Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/yHtjWNkg6wy9JN1AOObEAZdGdMk.roa
File:                     yHtjWNkg6wy9JN1AOObEAZdGdMk.roa (raw, json)
Hash identifier:          vjIzLE56whnyvX1oKnrY3P+J9l53LRSAgTrN9J3+xfo=
Subject key identifier:   C8:7B:63:58:D9:20:EB:0C:BD:24:DD:40:38:E6:C4:01:97:46:74:C9
Certificate issuer:       /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial:       018E21F00D3B8553EF42AF7621D8626CD3DA
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/yHtjWNkg6wy9JN1AOObEAZdGdMk.roa
Signing time:             Sat 09 Mar 2024 06:39:23 +0000
ROA not before:           Sat 09 Mar 2024 06:39:23 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42337
IP address blocks:        95.128.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:21:f0:0d:3b:85:53:ef:42:af:76:21:d8:62:6c:d3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
        Validity
            Not Before: Mar  9 06:39:23 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c87b6358d920eb0cbd24dd4038e6c401974674c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:71:39:f8:28:34:f3:33:d8:68:37:61:16:
                    53:e6:38:c0:da:f9:e9:3a:e2:56:27:17:a5:aa:0d:
                    3d:9f:fb:dc:4b:f1:eb:b3:87:00:dc:8d:2e:3f:39:
                    a0:1d:1a:4b:f7:8a:d2:cc:9a:56:e3:f5:39:26:53:
                    f6:c8:60:ed:e6:da:72:af:79:30:04:f8:f0:f3:5b:
                    27:5a:5a:8a:f8:ef:25:47:8e:4a:9e:8d:6f:3d:c8:
                    62:ba:16:d5:84:c0:23:c8:09:bd:9e:45:29:70:68:
                    66:25:b4:ee:f2:4a:ee:4f:4e:ec:e5:d1:36:1b:60:
                    7d:77:ca:e7:47:2a:8c:15:d8:4d:67:53:d7:be:7a:
                    be:9e:a9:51:52:b8:98:8c:89:51:e2:2c:22:91:83:
                    e6:8d:3d:2b:94:fa:d4:3d:b2:d3:01:b0:61:c8:d5:
                    b9:a9:7f:f0:93:be:93:ac:2c:4c:e5:9f:b5:b9:d2:
                    27:4d:3c:18:83:2b:74:a9:47:f9:61:37:e7:86:5f:
                    62:79:0f:24:a7:b6:e7:af:e5:ad:65:8a:5e:fc:68:
                    18:d7:8b:2d:62:b3:1d:50:eb:fb:24:0d:c2:59:5c:
                    ed:d7:69:df:31:20:e6:df:00:9e:f2:af:04:72:21:
                    f4:e3:ed:2a:58:c5:c2:03:8a:53:17:27:a7:7a:65:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7B:63:58:D9:20:EB:0C:BD:24:DD:40:38:E6:C4:01:97:46:74:C9
            X509v3 Authority Key Identifier:
                keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/yHtjWNkg6wy9JN1AOObEAZdGdMk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.128.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:a6:fb:00:de:d5:07:f3:80:9c:3b:de:5c:f5:4e:cf:18:be:
         a3:68:07:47:ee:94:97:06:d9:3a:72:97:17:d9:fd:99:ec:70:
         42:4d:53:fb:6b:ab:c4:f8:fb:9f:f8:83:de:41:c8:2d:de:ca:
         da:7c:ab:1a:64:91:85:e1:e0:db:ee:bd:09:a9:af:5c:49:55:
         58:d8:b7:c0:13:53:2f:c7:30:a9:2a:4b:16:97:d8:59:c5:fa:
         02:ef:82:e4:6d:b5:ca:48:c0:40:e0:9c:35:99:83:ed:a8:e6:
         a6:b1:aa:21:0a:70:36:ca:59:fa:6b:7f:b5:ea:f8:9e:80:43:
         1d:12:c8:39:c6:ae:7c:b9:f4:e4:8f:00:13:48:2d:c9:a3:30:
         b4:03:73:75:27:ef:b2:b1:46:83:2c:25:f3:b0:4a:8d:e8:5e:
         c7:2b:cb:79:e2:ed:37:e7:f5:71:15:f3:78:58:1d:20:4c:24:
         0e:e8:7d:b0:29:8e:ba:b4:68:dc:6f:b6:dc:1a:af:0f:08:8a:
         d6:60:52:a6:0a:48:0e:51:fc:0d:31:9b:7a:f5:9d:21:b5:04:
         52:67:7b:bc:4f:bb:ba:71:4a:64:d8:d3:04:79:a1:bc:98:1e:
         d1:03:eb:50:f8:3d:76:03:9b:39:70:98:bc:95:0f:03:c4:24:
         f0:88:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:28:19 2024 by rpki-client on console-fra.rpki-client.org