Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230312e302f32342d3234203d3e203134343435.roa
File:                     38352e3233372e3230312e302f32342d3234203d3e203134343435.roa (raw, json)
Hash identifier:          akHt5DszDypZ6QyPIIRkWJeAOQQB+lY8gVX56uHc3H4=
Subject key identifier:   AC:6C:BC:68:A1:07:16:EB:31:E2:47:33:6A:8E:E9:9E:18:D1:9E:4B
Certificate issuer:       /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial:       1DDC1D46AC59E55C4DD9DE23D6E4A899C1A12F2F
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230312e302f32342d3234203d3e203134343435.roa
Signing time:             Wed 08 Nov 2023 09:21:04 +0000
ROA not before:           Wed 08 Nov 2023 09:16:04 +0000
ROA not after:            Wed 06 Nov 2024 09:21:04 +0000
asID:                     14445
IP address blocks:        85.237.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 Mar 2024 15:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:dc:1d:46:ac:59:e5:5c:4d:d9:de:23:d6:e4:a8:99:c1:a1:2f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
        Validity
            Not Before: Nov  8 09:16:04 2023 GMT
            Not After : Nov  6 09:21:04 2024 GMT
        Subject: CN=AC6CBC68A10716EB31E247336A8EE99E18D19E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:87:a4:27:c0:ec:2d:2f:a6:e3:45:5f:ae:
                    45:77:82:7d:6f:64:74:61:27:66:dd:0c:cd:5e:b6:
                    8c:02:1c:ac:4b:e4:6a:a2:c9:ae:95:5f:08:18:86:
                    8a:3d:34:b0:46:78:a0:cb:21:b3:b0:ef:6e:f6:22:
                    93:17:f7:3e:ea:52:f9:aa:2f:5a:2d:49:d6:29:cb:
                    24:97:6d:70:eb:87:90:40:aa:3c:11:6f:12:c7:29:
                    dd:8c:22:9a:90:fe:49:e4:c3:ee:10:08:ec:32:50:
                    2b:7a:44:54:35:4c:ec:ad:6b:2b:f5:72:c4:3c:27:
                    90:bc:b2:25:f5:43:34:35:9f:22:64:88:02:59:d0:
                    0e:10:ea:88:df:f3:d7:2a:61:d9:7c:b2:7e:80:47:
                    5e:ce:96:11:88:e8:4a:94:db:bb:16:43:ed:2d:94:
                    51:11:98:84:f3:f4:79:6a:59:c6:01:bb:49:38:47:
                    62:53:5c:d3:07:c4:c0:a3:d0:7e:9c:d0:3d:32:28:
                    27:a2:96:e2:4b:99:82:cb:ad:2f:1f:9e:1b:66:4d:
                    92:17:b1:e7:b9:a2:7f:80:1d:96:4a:99:81:8c:7a:
                    e0:84:dd:17:16:7e:65:cb:d3:cb:e6:0f:7f:6c:cc:
                    03:c7:45:01:1f:f6:31:74:57:9f:2b:de:7b:8a:50:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6C:BC:68:A1:07:16:EB:31:E2:47:33:6A:8E:E9:9E:18:D1:9E:4B
            X509v3 Authority Key Identifier:
                keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3230312e302f32342d3234203d3e203134343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:d6:d5:54:35:38:05:cf:6b:27:ea:10:1c:2b:54:bc:8c:e8:
         03:d5:10:8f:b6:27:bd:77:35:57:f1:ff:8d:49:df:db:98:0e:
         c4:a6:cd:5f:12:b2:9a:2b:e5:9a:7d:b7:6b:b3:f0:00:7a:79:
         49:ef:04:82:ad:15:ab:8b:b1:26:78:90:ce:02:ba:81:fa:e2:
         2e:5b:f6:5d:8a:9a:8d:d8:17:76:e1:93:dd:b5:c2:d0:76:b0:
         50:61:ca:dd:57:13:8d:10:3a:5e:73:06:5c:5e:9b:ed:c8:a4:
         f1:1e:de:bf:30:5c:94:9e:32:1e:05:c7:4d:66:9e:33:11:82:
         c6:94:62:09:46:aa:f4:c0:f4:01:d2:7f:5f:9f:ae:69:cc:e8:
         ff:b2:12:b5:cf:11:d7:18:a0:0e:88:03:c9:04:20:f9:51:4d:
         1e:fb:63:51:db:4d:df:ce:46:da:bd:d0:f2:68:7e:2c:b8:26:
         e6:05:46:3d:96:ca:2a:81:00:75:80:5b:d0:40:3f:8e:90:9c:
         78:1c:6c:66:0d:6b:1d:f9:9b:66:c6:1d:3f:3d:a6:de:fe:c7:
         3d:a3:55:07:1f:bf:d6:1a:d3:98:ab:79:f7:f3:13:4f:45:70:
         2c:db:4a:83:94:16:26:ac:dc:4e:30:c1:13:3c:92:34:a0:3b:
         c1:7b:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 21:13:49 2024 by rpki-client on console-fra.rpki-client.org