Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/zosmpKcLQNGkscPW8tKE7PBQSyk.roa
File:                     zosmpKcLQNGkscPW8tKE7PBQSyk.roa (raw, json)
Hash identifier:          fxmp6kgoB1x7HBzudnwiHB17kPjYswX/Pg9n2OgaTJw=
Subject key identifier:   CE:8B:26:A4:A7:0B:40:D1:A4:B1:C3:D6:F2:D2:84:EC:F0:50:4B:29
Certificate issuer:       /CN=637108e0d19992fdc0bfb6e27137304fd543436d
Certificate serial:       018CC4933FBC7EC3DB51E0A08C33FA6AAFC9
Authority key identifier: 63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/zosmpKcLQNGkscPW8tKE7PBQSyk.roa
Signing time:             Mon 01 Jan 2024 10:30:33 +0000
ROA not before:           Mon 01 Jan 2024 10:30:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     28959
IP address blocks:        195.238.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:3f:bc:7e:c3:db:51:e0:a0:8c:33:fa:6a:af:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637108e0d19992fdc0bfb6e27137304fd543436d
        Validity
            Not Before: Jan  1 10:30:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ce8b26a4a70b40d1a4b1c3d6f2d284ecf0504b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:bb:68:bf:7d:d0:90:91:9a:38:35:27:cb:
                    d0:5a:b5:5d:80:bb:44:cb:1e:34:98:3d:ab:dd:f6:
                    23:cf:9a:d6:f1:fb:cc:d4:a7:0f:30:54:41:65:85:
                    1d:82:58:e1:01:be:48:69:6f:90:ba:aa:cf:d7:9c:
                    da:a8:9b:c0:11:4c:05:bb:24:76:41:68:d9:1b:73:
                    39:ef:88:6f:a2:82:22:14:93:fc:9e:1c:a2:09:e5:
                    ef:89:3b:98:de:71:2c:27:10:cd:96:96:8c:71:ac:
                    c1:9d:d6:1f:ed:80:cb:ac:cd:a5:65:a0:3f:38:e2:
                    40:ea:b1:09:ce:6b:76:5e:6b:1a:25:e3:fc:4a:9b:
                    84:fc:05:50:9f:b9:93:8d:24:c3:f2:25:d1:59:fd:
                    dd:b5:ae:88:0f:41:dc:ed:6a:cc:d7:0f:aa:87:54:
                    d8:9e:b4:47:e9:2e:3c:46:67:7f:0f:3a:9a:23:c9:
                    77:e5:3f:f6:70:4e:bf:e2:b4:9f:be:6a:dd:d6:e9:
                    0b:a2:1e:74:a4:5c:53:87:43:8c:89:4a:eb:e3:04:
                    1f:60:dd:7d:91:bd:aa:08:3d:a1:64:f4:09:f6:6e:
                    4f:63:36:fd:b4:41:3c:fc:83:14:3b:9a:62:b9:f3:
                    24:90:93:11:bc:a5:09:07:c7:5c:cf:a3:6a:4b:dc:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8B:26:A4:A7:0B:40:D1:A4:B1:C3:D6:F2:D2:84:EC:F0:50:4B:29
            X509v3 Authority Key Identifier:
                keyid:63:71:08:E0:D1:99:92:FD:C0:BF:B6:E2:71:37:30:4F:D5:43:43:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EI4NGZkv3Av7bicTcwT9VDQ20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/zosmpKcLQNGkscPW8tKE7PBQSyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/185b1b-9885-4de6-bc5f-b9121a6f7189/1/Y3EI4NGZkv3Av7bicTcwT9VDQ20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.238.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:97:c7:36:83:cf:04:d7:19:fe:b7:10:df:82:b4:8f:42:f2:
         10:ca:bb:e2:f7:07:9f:e1:2c:bf:34:e5:0c:4a:32:42:fe:9a:
         25:18:62:2b:d5:25:66:6d:5c:3b:1b:e5:a7:e9:61:83:64:75:
         04:d9:c8:e1:16:d3:6a:7c:e3:22:76:70:ac:85:e2:51:c4:65:
         a7:97:9e:a4:60:34:2f:5a:bc:1c:20:a9:55:ea:d1:80:ac:50:
         b2:07:74:e7:b3:51:19:ab:32:e5:21:c4:f4:03:ff:2c:8c:d9:
         1a:49:d3:71:e2:db:d6:d0:66:c7:65:81:f6:22:04:3e:52:c4:
         4e:65:cf:27:ed:c3:de:2a:6a:a9:a4:71:63:ea:d3:92:59:14:
         32:58:6f:92:9e:31:bf:6f:e0:6d:72:5d:f5:3d:fc:fc:82:3f:
         da:65:da:f9:1b:e2:42:27:e2:78:22:e1:04:fd:8f:09:64:8e:
         2b:2f:d7:01:98:82:44:f6:ed:33:a8:72:fb:b7:50:d9:17:ad:
         50:24:b3:b0:1d:78:88:f8:ad:70:cb:f5:3a:4a:f6:48:a4:7f:
         32:de:95:ea:79:3f:5d:77:0e:47:69:4b:f7:42:85:59:71:4b:
         fe:73:02:f2:76:75:7a:d2:34:e5:a1:00:b3:08:9d:e1:84:51:
         ae:e1:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:15:01 2024 by rpki-client on console-fra.rpki-client.org