Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/qPsspxuMjzqt3i_LVHarlSOqzOM.roa
File:                     qPsspxuMjzqt3i_LVHarlSOqzOM.roa (raw, json)
Hash identifier:          UNj3UontF3py5zjDV7lewMqgRJIxWbvMOpohGVaOgSk=
Subject key identifier:   A8:FB:2C:A7:1B:8C:8F:3A:AD:DE:2F:CB:54:76:AB:95:23:AA:CC:E3
Certificate issuer:       /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial:       018CC4254AC3EEC97383F366F599DFE205A5
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/qPsspxuMjzqt3i_LVHarlSOqzOM.roa
Signing time:             Mon 01 Jan 2024 08:30:27 +0000
ROA not before:           Mon 01 Jan 2024 08:30:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     5617
IP address blocks:        79.188.0.0/16 maxlen: 24
                          31.60.0.0/14 maxlen: 25
                          83.13.0.0/16 maxlen: 24
                          83.6.0.0/16 maxlen: 24
                          46.134.0.0/16 maxlen: 25
                          83.20.0.0/16 maxlen: 24
                          37.47.0.0/16 maxlen: 24
                          188.47.0.0/16 maxlen: 24
                          91.94.0.0/16 maxlen: 24
                          213.25.125.0/24 maxlen: 24
                          83.12.0.0/16 maxlen: 24
                          213.25.166.0/24 maxlen: 24
                          212.160.0.0/16 maxlen: 24
                          79.187.0.0/16 maxlen: 24
                          213.25.92.0/24 maxlen: 24
                          37.228.0.0/18 maxlen: 18
                          212.160.172.0/24 maxlen: 24
                          83.26.0.0/16 maxlen: 24
                          80.53.0.0/16 maxlen: 24
                          83.19.0.0/16 maxlen: 24
                          83.18.0.0/16 maxlen: 24
                          83.11.0.0/16 maxlen: 24
                          80.52.0.0/16 maxlen: 24
                          83.5.0.0/16 maxlen: 24
                          217.99.0.0/16 maxlen: 24
                          213.25.0.0/16 maxlen: 24
                          83.25.0.0/16 maxlen: 24
                          217.98.0.0/16 maxlen: 24
                          195.205.147.0/24 maxlen: 24
                          83.17.0.0/16 maxlen: 24
                          83.24.0.0/13 maxlen: 13
                          83.4.0.0/16 maxlen: 24
                          83.31.0.0/16 maxlen: 24
                          79.186.0.0/16 maxlen: 24
                          83.24.0.0/16 maxlen: 24
                          195.205.239.0/24 maxlen: 24
                          80.51.0.0/16 maxlen: 24
                          95.51.0.0/16 maxlen: 24
                          83.16.0.0/13 maxlen: 13
                          83.23.0.0/16 maxlen: 24
                          95.50.0.0/16 maxlen: 24
                          80.50.0.0/16 maxlen: 24
                          213.77.0.0/17 maxlen: 17
                          213.77.0.0/16 maxlen: 24
                          213.77.5.0/24 maxlen: 24
                          195.205.0.0/16 maxlen: 24
                          83.16.0.0/16 maxlen: 24
                          193.110.120.0/22 maxlen: 22
                          217.97.0.0/16 maxlen: 24
                          37.225.0.0/16 maxlen: 25
                          213.77.68.0/24 maxlen: 24
                          83.10.0.0/16 maxlen: 24
                          213.77.20.0/24 maxlen: 24
                          83.3.0.0/16 maxlen: 24
                          213.77.34.0/24 maxlen: 24
                          83.30.0.0/16 maxlen: 24
                          79.185.0.0/16 maxlen: 24
                          213.76.0.0/16 maxlen: 24
                          83.2.0.0/16 maxlen: 24
                          83.29.0.0/16 maxlen: 24
                          87.96.0.0/17 maxlen: 24
                          217.96.0.0/16 maxlen: 24
                          217.96.0.0/14 maxlen: 14
                          79.163.128.0/17 maxlen: 25
                          83.22.0.0/16 maxlen: 24
                          217.116.96.0/20 maxlen: 20
                          95.49.0.0/16 maxlen: 24
                          80.49.0.0/16 maxlen: 24
                          217.116.100.0/22 maxlen: 22
                          79.184.0.0/13 maxlen: 13
                          212.244.226.0/24 maxlen: 24
                          79.191.0.0/16 maxlen: 24
                          213.76.129.0/24 maxlen: 24
                          194.204.128.0/18 maxlen: 18
                          213.76.135.0/24 maxlen: 24
                          213.76.140.0/24 maxlen: 24
                          213.76.143.0/24 maxlen: 24
                          194.204.152.0/24 maxlen: 24
                          213.76.146.0/24 maxlen: 24
                          195.117.0.0/16 maxlen: 24
                          194.204.159.0/24 maxlen: 24
                          178.56.0.0/16 maxlen: 24
                          5.184.0.0/16 maxlen: 24
                          79.184.0.0/16 maxlen: 24
                          5.184.0.0/15 maxlen: 15
                          83.9.0.0/16 maxlen: 24
                          80.48.0.0/13 maxlen: 13
                          83.28.0.0/16 maxlen: 24
                          80.55.0.0/16 maxlen: 24
                          83.0.0.0/11 maxlen: 11
                          80.48.0.0/16 maxlen: 24
                          95.48.0.0/16 maxlen: 24
                          95.48.0.0/14 maxlen: 14
                          80.48.0.0/14 maxlen: 14
                          83.1.0.0/16 maxlen: 24
                          83.8.0.0/13 maxlen: 13
                          213.77.68.192/26 maxlen: 26
                          195.116.0.0/16 maxlen: 24
                          212.244.0.0/16 maxlen: 24
                          83.15.0.0/16 maxlen: 24
                          46.170.0.0/15 maxlen: 24
                          178.42.0.0/15 maxlen: 24
                          83.8.0.0/16 maxlen: 24
                          79.163.0.0/16 maxlen: 25
                          79.190.0.0/16 maxlen: 24
                          83.0.0.0/13 maxlen: 13
                          37.108.0.0/16 maxlen: 25
                          83.7.0.0/16 maxlen: 24
                          79.162.0.0/15 maxlen: 24
                          79.189.0.0/16 maxlen: 24
                          83.0.0.0/16 maxlen: 24
                          83.27.0.0/16 maxlen: 24
                          80.54.0.0/16 maxlen: 24
                          83.21.0.0/16 maxlen: 24
                          83.14.0.0/16 maxlen: 24
                          2a01:1140::/28 maxlen: 28
                          2a01:1700:3::/48 maxlen: 48
                          2a01:1160::/28 maxlen: 28
                          2a01:1120::/28 maxlen: 28
                          2a01:11a0::/28 maxlen: 28
                          2a00:f40::/29 maxlen: 29
                          2a01:1100::/28 maxlen: 28
                          2a01:11d0::/28 maxlen: 28
                          2a01:1700:2::/48 maxlen: 48
                          2a01:1130::/28 maxlen: 28
                          2a01:1150::/28 maxlen: 28
                          2a01:11c0::/28 maxlen: 28
                          2a01:1170::/28 maxlen: 28
                          2a01:1000::/21 maxlen: 21
                          2a01:1190::/28 maxlen: 28
                          2a01:11b0::/28 maxlen: 28
                          2a01:1110::/28 maxlen: 28
                          2a01:1180::/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:4a:c3:ee:c9:73:83:f3:66:f5:99:df:e2:05:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
        Validity
            Not Before: Jan  1 08:30:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a8fb2ca71b8c8f3aadde2fcb5476ab9523aacce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:c2:61:99:31:a4:7d:8c:e3:55:44:a9:51:
                    27:56:a2:d1:c1:07:13:e4:be:a6:51:67:4b:58:56:
                    3c:e4:17:49:1b:13:8e:c1:da:7f:9d:4f:61:fe:c5:
                    06:9d:1d:9d:6e:1f:69:5a:53:ff:1e:1e:54:54:03:
                    e8:f4:7a:74:bd:a3:a0:ed:0b:b4:8e:9b:40:97:96:
                    9a:48:48:ad:e9:b8:99:5a:81:b1:97:39:32:31:8a:
                    2d:e2:8d:ab:14:70:b0:8d:51:06:5b:f2:b5:20:40:
                    01:37:3c:a2:ca:3d:fc:cb:34:bc:b5:c9:ab:fb:55:
                    12:24:e2:ea:38:a6:79:ce:2d:6c:3a:d7:c4:0b:8a:
                    3b:14:73:ab:22:53:01:fd:11:8a:ed:69:53:2c:15:
                    7e:fc:47:7b:a7:a3:8d:4e:b9:ae:39:61:3c:f6:c3:
                    fd:ff:20:03:b5:50:5c:1c:b7:14:00:28:1c:3a:73:
                    03:18:b5:69:39:e6:30:c0:dc:70:2a:76:fe:d1:c1:
                    10:a7:b0:88:bc:2c:ae:ab:62:cb:dd:b1:7f:d4:84:
                    58:a8:66:c8:a9:b4:f8:65:4b:35:49:6b:8b:fb:5e:
                    d7:d9:e0:01:1a:a2:e7:00:1d:23:e4:17:65:01:8b:
                    cd:bd:40:1a:a8:56:91:cd:41:3f:73:fa:4e:ce:ba:
                    c3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FB:2C:A7:1B:8C:8F:3A:AD:DE:2F:CB:54:76:AB:95:23:AA:CC:E3
            X509v3 Authority Key Identifier:
                keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/qPsspxuMjzqt3i_LVHarlSOqzOM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.184.0.0/15
                  31.60.0.0/14
                  37.47.0.0/16
                  37.108.0.0/16
                  37.225.0.0/16
                  37.228.0.0/18
                  46.134.0.0/16
                  46.170.0.0/15
                  79.162.0.0/15
                  79.184.0.0/13
                  80.48.0.0/13
                  83.0.0.0/11
                  87.96.0.0/17
                  91.94.0.0/16
                  95.48.0.0/14
                  178.42.0.0/15
                  178.56.0.0/16
                  188.47.0.0/16
                  193.110.120.0/22
                  194.204.128.0/18
                  195.116.0.0/15
                  195.205.0.0/16
                  212.160.0.0/16
                  212.244.0.0/16
                  213.25.0.0/16
                  213.76.0.0/15
                  217.96.0.0/14
                  217.116.96.0/20
                IPv6:
                  2a00:f40::/29
                  2a01:1000::/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:a1:b6:7a:d1:ac:d6:e6:9d:03:6b:ca:bc:b3:6e:47:c2:5b:
         e2:0d:58:d1:b2:cd:a9:b0:38:c8:d4:70:7d:38:c5:61:1c:a3:
         51:8d:ee:19:6e:ff:ee:5a:3b:03:ac:e2:59:91:40:d4:9f:f6:
         75:f3:4d:b8:c5:3b:74:73:fb:a5:6b:a3:f8:c6:f3:6a:2e:b2:
         2c:92:23:4e:76:e9:88:eb:3f:08:b3:b8:1f:c3:93:f6:ff:29:
         29:39:aa:6c:44:7c:7f:2d:a0:c4:05:73:eb:51:c5:7f:2e:de:
         0c:8f:af:2f:e4:ff:61:b6:f9:fd:85:f0:41:95:7f:dd:6a:ad:
         e9:38:af:e6:29:60:99:a8:31:7f:2d:47:a7:42:85:3b:df:8c:
         91:b2:8e:0f:a3:d6:b2:76:93:72:f2:94:14:e8:cb:ca:89:8b:
         a0:66:bf:a9:fa:d6:62:b6:35:69:6c:76:31:c9:95:b1:87:ee:
         e6:2b:66:a4:4a:28:20:63:a4:6d:12:7b:28:f1:6c:d4:7d:01:
         47:ff:c5:6c:d7:25:34:ce:5f:85:2b:29:c5:9b:46:2c:47:bb:
         56:31:f0:20:7c:bd:ce:12:be:d6:76:77:51:be:42:1e:57:4a:
         45:1d:cc:21:b5:f3:0c:ba:a6:9d:b9:e6:bd:53:de:05:92:fd:
         04:90:23:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:10:59 2024 by rpki-client on console-ams.rpki-client.org