Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/r7Q3uQcNDed8YzRELHRAmOV2Xkw.roa
File:                     r7Q3uQcNDed8YzRELHRAmOV2Xkw.roa (raw, json)
Hash identifier:          PvPucNwB9j2g4udEMmpyiadYgE5Azf0e5ZVoGbIYQbQ=
Subject key identifier:   AF:B4:37:B9:07:0D:0D:E7:7C:63:34:44:2C:74:40:98:E5:76:5E:4C
Certificate issuer:       /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial:       0193430485779DBEEC6C03E538282C144888
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/r7Q3uQcNDed8YzRELHRAmOV2Xkw.roa
Signing time:             Tue 19 Nov 2024 06:03:09 +0000
ROA not before:           Tue 19 Nov 2024 06:03:09 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48503
IP address blocks:        217.76.66.0/24 maxlen: 24
                          217.76.70.0/24 maxlen: 24
                          2a03:32c0::/48 maxlen: 48
                          2a03:32c0:1::/48 maxlen: 48
                          2a03:32c0:2::/48 maxlen: 48
                          2a03:32c0:3::/48 maxlen: 48
                          2a03:32c0:4::/48 maxlen: 48
                          2a03:32c0:5::/48 maxlen: 48
                          2a03:32c0:6::/48 maxlen: 48
                          2a03:32c0:7::/48 maxlen: 48
                          2a03:32c0:8::/48 maxlen: 48
                          2a03:32c0:1000::/48 maxlen: 48
                          2a03:32c0:1001::/48 maxlen: 48
                          2a03:32c0:1002::/48 maxlen: 48
                          2a03:32c0:1003::/48 maxlen: 48
                          2a03:32c0:1004::/48 maxlen: 48
                          2a03:32c0:1005::/48 maxlen: 48
                          2a03:32c0:1006::/48 maxlen: 48
                          2a03:32c0:1007::/48 maxlen: 48
                          2a03:32c0:1008::/48 maxlen: 48
                          2a03:32c0:1009::/48 maxlen: 48
                          2a03:32c0:2000::/48 maxlen: 48
                          2a03:32c0:2001::/48 maxlen: 48
                          2a03:32c0:2002::/48 maxlen: 48
                          2a03:32c0:2003::/48 maxlen: 48
                          2a03:32c0:2004::/48 maxlen: 48
                          2a03:32c0:2005::/48 maxlen: 48
                          2a03:32c0:2006::/48 maxlen: 48
                          2a03:32c0:2007::/48 maxlen: 48
                          2a03:32c0:2008::/48 maxlen: 48
                          2a03:32c0:2009::/48 maxlen: 48
                          2a03:32c0:3000::/48 maxlen: 48
                          2a03:32c0:3001::/48 maxlen: 48
                          2a03:32c0:3002::/48 maxlen: 48
                          2a03:32c0:3003::/48 maxlen: 48
                          2a03:32c0:3004::/48 maxlen: 48
                          2a03:32c0:3005::/48 maxlen: 48
                          2a03:32c0:3006::/48 maxlen: 48
                          2a03:32c0:3007::/48 maxlen: 48
                          2a03:32c0:3008::/48 maxlen: 48
                          2a03:32c0:3009::/48 maxlen: 48
                          2a03:32c0:4000::/48 maxlen: 48
                          2a03:32c0:4001::/48 maxlen: 48
                          2a03:32c0:4002::/48 maxlen: 48
                          2a03:32c0:4003::/48 maxlen: 48
                          2a03:32c0:4004::/48 maxlen: 48
                          2a03:32c0:4005::/48 maxlen: 48
                          2a03:32c0:4006::/48 maxlen: 48
                          2a03:32c0:4007::/48 maxlen: 48
                          2a03:32c0:4008::/48 maxlen: 48
                          2a03:32c0:4009::/48 maxlen: 48
                          2a03:32c0:5000::/48 maxlen: 48
                          2a03:32c0:5001::/48 maxlen: 48
                          2a03:32c0:5002::/48 maxlen: 48
                          2a03:32c0:5003::/48 maxlen: 48
                          2a03:32c0:5004::/48 maxlen: 48
                          2a03:32c0:5005::/48 maxlen: 48
                          2a03:32c0:5006::/48 maxlen: 48
                          2a03:32c0:5007::/48 maxlen: 48
                          2a03:32c0:5008::/48 maxlen: 48
                          2a03:32c0:5009::/48 maxlen: 48
                          2a03:32c0:6000::/48 maxlen: 48
                          2a03:32c0:6001::/48 maxlen: 48
                          2a03:32c0:6002::/48 maxlen: 48
                          2a03:32c0:6003::/48 maxlen: 48
                          2a03:32c0:6004::/48 maxlen: 48
                          2a03:32c0:6005::/48 maxlen: 48
                          2a03:32c0:6006::/48 maxlen: 48
                          2a03:32c0:6007::/48 maxlen: 48
                          2a03:32c0:6008::/48 maxlen: 48
                          2a03:32c0:6009::/48 maxlen: 48
                          2a03:32c0:7000::/48 maxlen: 48
                          2a03:32c0:7001::/48 maxlen: 48
                          2a03:32c0:7008::/48 maxlen: 48
                          2a03:32c0:7009::/48 maxlen: 48
                          2a03:32c0:8000::/48 maxlen: 48
                          2a03:32c0:8001::/48 maxlen: 48
                          2a03:32c0:8002::/48 maxlen: 48
                          2a03:32c0:8003::/48 maxlen: 48
                          2a03:32c0:8004::/48 maxlen: 48
                          2a03:32c0:8005::/48 maxlen: 48
                          2a03:32c0:8006::/48 maxlen: 48
                          2a03:32c0:8007::/48 maxlen: 48
                          2a03:32c0:8008::/48 maxlen: 48
                          2a03:32c0:8009::/48 maxlen: 48
                          2a03:32c0:9000::/48 maxlen: 48
                          2a03:32c0:9001::/48 maxlen: 48
                          2a03:32c0:9002::/48 maxlen: 48
                          2a03:32c0:9003::/48 maxlen: 48
                          2a03:32c0:9004::/48 maxlen: 48
                          2a03:32c0:9005::/48 maxlen: 48
                          2a03:32c0:9006::/48 maxlen: 48
                          2a03:32c0:9007::/48 maxlen: 48
                          2a03:32c0:9008::/48 maxlen: 48
                          2a03:32c0:9009::/48 maxlen: 48
                          2a03:32c0:9010::/48 maxlen: 48
                          2a03:32c0:9011::/48 maxlen: 48
                          2a03:32c0:a000::/48 maxlen: 48
                          2a03:32c0:a001::/48 maxlen: 48
                          2a03:32c0:a002::/48 maxlen: 48
                          2a03:32c0:a003::/48 maxlen: 48
                          2a03:32c0:a004::/48 maxlen: 48
                          2a03:32c0:a005::/48 maxlen: 48
                          2a03:32c0:a006::/48 maxlen: 48
                          2a03:32c0:a007::/48 maxlen: 48
                          2a03:32c0:a008::/48 maxlen: 48
                          2a03:32c0:a009::/48 maxlen: 48
                          2a03:32c0:b000::/48 maxlen: 48
                          2a03:32c0:b001::/48 maxlen: 48
                          2a03:32c0:b002::/48 maxlen: 48
                          2a03:32c0:b003::/48 maxlen: 48
                          2a03:32c0:b004::/48 maxlen: 48
                          2a03:32c0:b005::/48 maxlen: 48
                          2a03:32c0:b006::/48 maxlen: 48
                          2a03:32c0:b007::/48 maxlen: 48
                          2a03:32c0:b008::/48 maxlen: 48
                          2a03:32c0:b009::/48 maxlen: 48
                          2a03:32c0:c001::/48 maxlen: 48
                          2a03:32c0:c008::/48 maxlen: 48
                          2a03:32c0:d008::/48 maxlen: 48
                          2a03:32c0:e000::/48 maxlen: 48
                          2a03:32c0:e001::/48 maxlen: 48
                          2a03:32c0:e002::/48 maxlen: 48
                          2a03:32c0:e003::/48 maxlen: 48
                          2a03:32c0:e004::/48 maxlen: 48
                          2a03:32c0:e005::/48 maxlen: 48
                          2a03:32c0:e006::/48 maxlen: 48
                          2a03:32c0:e007::/48 maxlen: 48
                          2a03:32c0:e008::/48 maxlen: 48
                          2a03:32c0:e009::/48 maxlen: 48
                          2a03:32c0:f000::/48 maxlen: 48
                          2a03:32c0:f008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:43:04:85:77:9d:be:ec:6c:03:e5:38:28:2c:14:48:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
        Validity
            Not Before: Nov 19 06:03:09 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=afb437b9070d0de77c6334442c744098e5765e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:89:fe:77:26:1a:cc:34:67:32:8f:e4:9f:
                    36:26:f5:6a:49:b2:7a:b5:2c:f4:4c:73:87:c6:bc:
                    57:39:03:89:79:29:5f:e9:b1:79:7d:6b:7f:e5:b8:
                    0c:61:17:5a:15:6f:f3:c4:2e:57:16:60:24:10:28:
                    43:bd:9c:27:8c:c7:e5:f1:21:eb:0a:58:ea:2c:c5:
                    fa:4e:83:60:cd:57:4e:8c:98:91:6a:04:df:34:db:
                    21:0b:91:ef:24:f4:cc:31:b7:cb:a5:29:cd:0d:cb:
                    7e:41:61:d6:2a:4d:cc:3a:05:28:6f:e4:6a:f5:8f:
                    92:f9:d3:87:f7:ca:59:3c:9e:cb:3b:12:13:a3:5d:
                    b7:53:87:1c:3d:20:40:96:2f:e7:9c:1e:a0:19:31:
                    82:d9:c8:0b:d3:ba:b3:44:61:df:34:75:3c:a1:ae:
                    01:a5:7d:2a:f8:89:23:ba:c1:84:74:4d:d3:d3:26:
                    ee:a4:bc:cb:63:53:b1:a1:ee:69:fe:d1:8d:28:8a:
                    66:88:1e:c7:23:3a:a7:d1:56:92:1c:30:54:79:0f:
                    ff:28:93:65:e6:0d:46:b3:f8:41:d2:e4:06:cd:aa:
                    76:e8:e0:45:52:a8:a6:af:5b:9d:20:cd:f8:b4:70:
                    34:6c:14:6d:02:4b:74:44:01:19:27:53:78:dd:36:
                    17:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B4:37:B9:07:0D:0D:E7:7C:63:34:44:2C:74:40:98:E5:76:5E:4C
            X509v3 Authority Key Identifier:
                keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/r7Q3uQcNDed8YzRELHRAmOV2Xkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.76.66.0/24
                  217.76.70.0/24
                IPv6:
                  2a03:32c0::-2a03:32c0:8:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:1000::-2a03:32c0:1009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:2000::-2a03:32c0:2009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:3000::-2a03:32c0:3009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:4000::-2a03:32c0:4009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:5000::-2a03:32c0:5009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:6000::-2a03:32c0:6009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:7000::/47
                  2a03:32c0:7008::/47
                  2a03:32c0:8000::-2a03:32c0:8009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:9000::-2a03:32c0:9009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:9010::/47
                  2a03:32c0:a000::-2a03:32c0:a009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:b000::-2a03:32c0:b009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:c001::/48
                  2a03:32c0:c008::/48
                  2a03:32c0:d008::/48
                  2a03:32c0:e000::-2a03:32c0:e009:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:f000::/48
                  2a03:32c0:f008::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:95:fc:3f:7e:59:14:b1:54:47:33:5e:d4:b6:75:3e:9c:2a:
         d1:f8:61:39:10:91:53:18:90:31:a7:3e:c1:46:d1:c1:9e:5e:
         07:d2:b1:84:22:cd:ba:ea:38:c1:98:11:52:a4:95:27:d4:00:
         b6:0d:ae:69:77:de:35:bd:02:5a:ed:0f:1f:01:9b:40:c5:84:
         1b:51:82:4a:b9:11:75:06:8e:f2:2a:73:de:0f:96:87:3e:2b:
         37:40:3f:d2:cb:6d:ae:0c:2f:ec:a3:99:06:8f:50:68:58:fc:
         dc:ee:2f:19:62:c0:72:43:c3:8c:f0:23:03:a4:ee:f6:ae:aa:
         d0:0c:10:62:ec:46:95:48:af:60:03:a0:a4:aa:bf:ae:5e:30:
         5b:9e:46:6e:d9:51:18:99:46:a9:64:c2:64:d7:66:4d:58:e1:
         2f:8a:d5:ff:66:71:c2:c4:35:07:e4:c7:fe:d1:a6:25:f1:f1:
         57:a1:e6:e1:25:82:d3:5e:c0:f2:67:45:c7:91:d8:f2:c4:d3:
         85:8d:7a:c0:2a:92:19:6a:27:fb:9f:fc:0a:0b:3d:24:cc:5d:
         2e:aa:d0:24:1c:4f:40:8b:78:5e:eb:68:ae:50:4a:1c:c5:b2:
         84:3b:d1:e2:b3:68:47:91:67:de:f8:4c:75:6e:49:b9:e9:06:
         c1:0c:d0:5f
-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgISAZNDBIV3nb7sbAPlOCgsFEiIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmJhMDczNWEwN2U0MGNhMzIwMjYyNzhiMjY3ODY3OGY4
YmFjZDkwHhcNMjQxMTE5MDYwMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmI0MzdiOTA3MGQwZGU3N2M2MzM0NDQyYzc0NDA5OGU1NzY1ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDuJ/ncmGsw0ZzKP5J82JvVqSbJ6
tSz0THOHxrxXOQOJeSlf6bF5fWt/5bgMYRdaFW/zxC5XFmAkEChDvZwnjMfl8SHr
CljqLMX6ToNgzVdOjJiRagTfNNshC5HvJPTMMbfLpSnNDct+QWHWKk3MOgUob+Rq
9Y+S+dOH98pZPJ7LOxITo123U4ccPSBAli/nnB6gGTGC2cgL07qzRGHfNHU8oa4B
pX0q+IkjusGEdE3T0ybupLzLY1Oxoe5p/tGNKIpmiB7HIzqn0VaSHDBUeQ//KJNl
5g1Gs/hB0uQGzap26OBFUqimr1udIM34tHA0bBRtAkt0RAEZJ1N43TYXuQIDAQAB
o4IDTDCCA0gwHQYDVR0OBBYEFK+0N7kHDQ3nfGM0RCx0QJjldl5MMB8GA1UdIwQY
MBaAFF67oHNaB+QMoyAmJ4smeGePi6zZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAt
MzIxMmI2ODU4NGU5LzEvcjdRM3VRY05EZWQ4WXpSRUxIUkFtT1YyWGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82MDc3ZDgtMjg3Ny00Njk4LTgwNDAtMzIxMmI2ODU4NGU5
LzEvWHJ1Z2Mxb0g1QXlqSUNZbml5WjRaNC1Mck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBYAYIKwYBBQUHAQcBAf8EggFPMIIBSzASBAIAATAMAwQA
2UxCAwQA2UxGMIIBMwQCAAIwggErMBADBQYqAzLAAwcAKgMywAAIMBEDBgQqAzLA
EAMHASoDMsAQCDARAwYFKgMywCADBwEqAzLAIAgwEQMGBCoDMsAwAwcBKgMywDAI
MBEDBgYqAzLAQAMHASoDMsBACDARAwYEKgMywFADBwEqAzLAUAgwEQMGBSoDMsBg
AwcBKgMywGAIAwcBKgMywHAAAwcBKgMywHAIMBEDBgcqAzLAgAMHASoDMsCACDAR
AwYEKgMywJADBwEqAzLAkAgDBwEqAzLAkBAwEQMGBSoDMsCgAwcBKgMywKAIMBED
BgQqAzLAsAMHASoDMsCwCAMHACoDMsDAAQMHACoDMsDACAMHACoDMsDQCDARAwYF
KgMywOADBwEqAzLA4AgDBwAqAzLA8AADBwAqAzLA8AgwDQYJKoZIhvcNAQELBQAD
ggEBAC2V/D9+WRSxVEczXtS2dT6cKtH4YTkQkVMYkDGnPsFG0cGeXgfSsYQizbrq
OMGYEVKklSfUALYNrml33jW9AlrtDx8Bm0DFhBtRgkq5EXUGjvIqc94Ploc+KzdA
P9LLba4ML+yjmQaPUGhY/NzuLxliwHJDw4zwIwOk7vauqtAMEGLsRpVIr2ADoKSq
v65eMFueRm7ZURiZRqlkwmTXZk1Y4S+K1f9mccLENQfkx/7RpiXx8Veh5uElgtNe
wPJnRceR2PLE04WNesAqkhlqJ/uf/AoLPSTMXS6q0CQcT0CLeF7raK5QShzFsoQ7
0eKzaEeRZ974THVuSbnpBsEM0F8=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:18:03 2024 by rpki-client on console-fra.rpki-client.org