Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/y24rB24IWHermlVSDwnxlGzf3Ys.roa
File:                     y24rB24IWHermlVSDwnxlGzf3Ys.roa (raw, json)
Hash identifier:          RbSTG3uwhg+MoRtzCfeI6Xp8b7vhL+dnUy6mhOTBuJ0=
Subject key identifier:   CB:6E:2B:07:6E:08:58:77:AB:9A:55:52:0F:09:F1:94:6C:DF:DD:8B
Certificate issuer:       /CN=000a6718d539155c27300401f2c4667513eec5b1
Certificate serial:       018CC795104597A6CD8968BB1ED73DC6F708
Authority key identifier: 00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/y24rB24IWHermlVSDwnxlGzf3Ys.roa
Signing time:             Tue 02 Jan 2024 00:31:24 +0000
ROA not before:           Tue 02 Jan 2024 00:31:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49478
IP address blocks:        194.150.254.0/23 maxlen: 23
                          91.234.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:95:10:45:97:a6:cd:89:68:bb:1e:d7:3d:c6:f7:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=000a6718d539155c27300401f2c4667513eec5b1
        Validity
            Not Before: Jan  2 00:31:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cb6e2b076e085877ab9a55520f09f1946cdfdd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:10:45:6c:e1:f4:e3:3e:60:ce:dc:86:ee:38:
                    c4:c6:6b:46:41:e6:0b:36:1f:5c:b0:45:a3:9f:71:
                    b7:ad:04:a8:b2:f0:af:d8:1a:41:ab:99:74:32:f2:
                    7d:08:2d:8e:58:ea:b1:65:a6:c6:d0:d7:7c:54:95:
                    e7:5e:6c:37:b0:ab:ea:ed:07:7f:32:b5:74:42:7d:
                    11:86:39:83:cd:2e:dc:6e:42:fa:56:93:9b:98:2e:
                    77:08:b3:74:e9:b2:05:d6:75:0c:a5:88:1c:69:20:
                    1e:ea:fd:48:17:b7:e0:30:a5:15:d6:5f:c2:c3:90:
                    a0:ec:64:88:90:3b:7f:a8:39:c2:fd:fb:1b:ed:45:
                    c0:d6:3d:ca:28:23:f1:3b:98:63:4a:ea:22:96:5b:
                    47:c4:01:fe:25:66:3f:f1:e3:e7:c7:50:1c:cd:d6:
                    22:a0:41:0a:5a:19:2f:a0:90:f8:92:c0:4c:bc:a0:
                    ae:f0:e2:b2:2e:18:c8:8d:c2:cd:41:21:2d:4c:73:
                    22:8c:d6:9d:cb:9b:5d:74:93:cf:78:17:3d:40:87:
                    c9:5e:5b:3c:5b:28:79:71:2f:63:c4:f9:18:5e:2a:
                    cb:7a:f1:04:88:68:95:2f:ed:61:65:fe:9f:e0:ef:
                    82:c7:69:b5:ec:7e:00:f5:59:1c:5c:ba:f9:97:77:
                    1d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6E:2B:07:6E:08:58:77:AB:9A:55:52:0F:09:F1:94:6C:DF:DD:8B
            X509v3 Authority Key Identifier:
                keyid:00:0A:67:18:D5:39:15:5C:27:30:04:01:F2:C4:66:75:13:EE:C5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AApnGNU5FVwnMAQB8sRmdRPuxbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/y24rB24IWHermlVSDwnxlGzf3Ys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/AApnGNU5FVwnMAQB8sRmdRPuxbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.234.164.0/22
                  194.150.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ef:ce:75:42:6a:e1:86:0b:6d:71:69:ac:0e:1c:63:73:c2:2a:
         1f:71:58:93:8c:94:0b:9f:77:c7:6d:db:d8:1f:4e:87:ce:3e:
         3f:c8:fb:f8:11:99:ae:4a:3b:86:ef:ba:36:1c:ef:cf:70:aa:
         25:4b:b2:3a:c4:c4:e4:a5:f0:5d:9e:e6:7d:a9:75:85:2f:bb:
         61:a4:d7:8e:0e:fa:6b:10:3c:d2:95:4c:d4:44:6a:fb:9b:0f:
         29:59:e9:2a:9d:f7:47:68:a8:c9:90:0b:25:0a:32:ab:43:a1:
         8c:ca:6b:b5:ef:87:05:21:e7:9c:0d:f9:33:76:84:a3:1a:5a:
         8e:b2:18:93:ed:3c:43:f9:2e:f7:4b:0d:42:95:f4:df:86:3e:
         41:47:19:12:66:5f:2a:6d:75:f2:e2:2a:78:ad:71:3b:32:3d:
         07:cd:49:92:3d:7e:da:52:3f:ed:e0:81:a6:70:42:b9:fd:04:
         78:7a:3f:e0:4e:9d:51:4c:ed:e3:4d:31:30:93:a9:6a:64:dd:
         e5:0e:f8:e6:94:a8:0e:54:1e:77:cb:d6:f2:36:da:9b:34:2c:
         36:4a:fb:fa:42:10:60:93:a1:96:79:9f:5f:13:30:1c:dc:50:
         65:d7:21:af:99:4b:18:91:71:0a:49:6d:02:9c:7b:04:79:5b:
         11:c9:c6:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHlRBFl6bNiWi7Htc9xvcIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMGE2NzE4ZDUzOTE1NWMyNzMwMDQwMWYyYzQ2Njc1MTNl
ZWM1YjEwHhcNMjQwMTAyMDAzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjZlMmIwNzZlMDg1ODc3YWI5YTU1NTIwZjA5ZjE5NDZjZGZkZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBBFbOH04z5gztyG7jjExmtGQeYL
Nh9csEWjn3G3rQSosvCv2BpBq5l0MvJ9CC2OWOqxZabG0Nd8VJXnXmw3sKvq7Qd/
MrV0Qn0RhjmDzS7cbkL6VpObmC53CLN06bIF1nUMpYgcaSAe6v1IF7fgMKUV1l/C
w5Cg7GSIkDt/qDnC/fsb7UXA1j3KKCPxO5hjSuoilltHxAH+JWY/8ePnx1AczdYi
oEEKWhkvoJD4ksBMvKCu8OKyLhjIjcLNQSEtTHMijNady5tddJPPeBc9QIfJXls8
Wyh5cS9jxPkYXirLevEEiGiVL+1hZf6f4O+Cx2m17H4A9VkcXLr5l3cdHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMtuKwduCFh3q5pVUg8J8ZRs392LMB8GA1UdIwQY
MBaAFAAKZxjVORVcJzAEAfLEZnUT7sWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMt
OWRkODU2MWNhZWRlLzEveTI0ckIyNElXSGVybWxWU0R3bnhsR3pmM1lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hMjMzNDgtNjJjZi00YWZhLTk0ZmMtOWRkODU2MWNhZWRl
LzEvQUFwbkdOVTVGVnduTUFRQjhzUm1kUlB1eGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+qkAwQB
wpb+MA0GCSqGSIb3DQEBCwUAA4IBAQDvznVCauGGC21xaawOHGNzwiofcViTjJQL
n3fHbdvYH06Hzj4/yPv4EZmuSjuG77o2HO/PcKolS7I6xMTkpfBdnuZ9qXWFL7th
pNeODvprEDzSlUzURGr7mw8pWekqnfdHaKjJkAslCjKrQ6GMymu174cFIeecDfkz
doSjGlqOshiT7TxD+S73Sw1ClfTfhj5BRxkSZl8qbXXy4ip4rXE7Mj0HzUmSPX7a
Uj/t4IGmcEK5/QR4ej/gTp1RTO3jTTEwk6lqZN3lDvjmlKgOVB53y9byNtqbNCw2
Svv6QhBgk6GWeZ9fEzAc3FBl1yGvmUsYkXEKSW0CnHsEeVsRycbV
-----END CERTIFICATE-----
Generated at Mon Jun 17 10:26:57 2024 by rpki-client on console-ams.rpki-client.org