Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/38392e3138372e36382e302f32342d3332203d3e20323035383438.roa
File:                     38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (raw, json)
Hash identifier:          98nwIQUls95w+5/vJrU/CLedlIF/m709Mvz7GncQGhY=
Subject key identifier:   F1:C8:28:CB:5B:70:95:BE:7A:0E:1A:A9:57:8F:DD:73:B1:DC:99:0E
Certificate issuer:       /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial:       13F2703C948E5FFD1622D2C73478B966E544E0FF
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/0/38392e3138372e36382e302f32342d3332203d3e20323035383438.roa
Signing time:             Mon 13 May 2024 21:06:32 +0000
ROA not before:           Mon 13 May 2024 21:01:32 +0000
ROA not after:            Mon 12 May 2025 21:06:32 +0000
asID:                     205848
IP address blocks:        89.187.68.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f2:70:3c:94:8e:5f:fd:16:22:d2:c7:34:78:b9:66:e5:44:e0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Validity
            Not Before: May 13 21:01:32 2024 GMT
            Not After : May 12 21:06:32 2025 GMT
        Subject: CN=F1C828CB5B7095BE7A0E1AA9578FDD73B1DC990E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:07:0a:96:45:a2:d8:00:22:58:31:b0:92:
                    64:ab:62:87:15:b4:15:8a:4b:db:c9:12:05:68:9a:
                    c3:f0:31:ae:a9:10:7b:02:61:ee:8c:62:a7:a4:bf:
                    f1:68:6c:ee:4f:7d:7d:5b:a7:4e:ea:82:71:31:c2:
                    ff:d8:fb:f5:51:be:19:dc:17:63:51:6f:6a:bc:c4:
                    26:00:1e:7e:c8:2a:58:88:58:28:62:90:c3:10:23:
                    24:b1:2f:91:45:d6:35:72:08:2e:26:4c:24:3a:5d:
                    c8:1f:22:23:c1:61:e2:0d:2f:5b:a3:71:03:a4:c9:
                    1e:f8:70:35:af:e9:51:f8:fe:cc:72:d3:ed:b1:83:
                    30:9f:72:cb:59:40:09:cd:39:e2:f8:7c:03:53:43:
                    24:75:c0:4d:a3:01:c4:eb:01:0b:a8:13:88:b0:4c:
                    b1:76:11:d6:1d:cb:0f:25:01:9f:14:4e:78:c8:cf:
                    f9:97:84:5e:dd:e4:a2:ae:59:13:72:c0:1b:b1:1e:
                    4c:e3:02:42:eb:36:63:36:8b:2c:81:02:e6:df:a0:
                    09:8c:51:bb:a4:05:af:57:b2:c3:89:6c:94:dc:f0:
                    be:0c:15:ec:7b:a6:75:4a:dd:25:be:71:88:d6:04:
                    3e:2f:96:23:9e:4a:be:33:bf:17:70:9b:3e:c9:8b:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C8:28:CB:5B:70:95:BE:7A:0E:1A:A9:57:8F:DD:73:B1:DC:99:0E
            X509v3 Authority Key Identifier:
                keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/38392e3138372e36382e302f32342d3332203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.187.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:a6:b5:f0:18:4f:94:ad:d0:0b:0f:66:b4:4d:db:f6:2b:
         fc:2a:03:79:2e:b3:73:c1:07:c7:8d:d6:dc:db:cc:36:1f:d6:
         6c:86:c6:73:8c:4a:0a:4f:2d:67:c9:02:8b:ec:fd:c2:97:bf:
         29:68:97:87:fe:c5:9e:fd:b0:80:a5:60:5a:79:0b:1c:2b:8e:
         59:29:20:1c:83:7d:ba:0c:64:1c:04:37:6e:6c:e8:5b:8e:e9:
         7a:f2:3d:38:b5:d6:b3:3b:c8:3b:0b:24:54:a2:7c:e4:34:7a:
         85:10:a0:7f:85:0b:84:48:1d:df:2b:95:56:92:19:6a:f0:e2:
         47:46:57:4f:64:9c:e7:f9:ab:59:74:55:e8:bf:65:13:e7:ed:
         89:3c:11:04:3a:4d:f8:0b:62:bf:b2:8d:ea:8d:6b:af:c8:1f:
         d2:47:26:3d:23:3d:09:61:30:aa:0c:cf:14:54:ee:15:5e:37:
         58:68:e6:a4:9a:cf:d1:5a:26:ca:8e:94:71:0f:9a:37:bf:39:
         4a:b2:55:35:f7:d7:50:e2:1d:fd:c4:50:31:fc:ab:16:94:ad:
         eb:b7:42:7a:50:53:0c:80:62:b1:51:94:34:4f:58:8d:40:a0:
         0f:33:74:55:2a:6d:37:67:c1:fc:e3:2d:dd:81:e8:4f:34:19:
         fa:5d:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:56:18 2024 by rpki-client on console-fra.rpki-client.org