Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa
File:                     3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa (raw, json)
Hash identifier:          u76bNHyScT58+AH1BubCkRPmwQukj+R0GOpjfjU/oO4=
Subject key identifier:   E8:A5:79:7E:D8:00:CC:C9:4F:68:5E:5E:A9:01:4B:D3:77:0B:D4:64
Certificate issuer:       /CN=048af665bf8b186b70220759d26c578f40b5f3e3
Certificate serial:       327BC38EB62032394E1EF44CF691A37723D71B41
Authority key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa
Signing time:             Fri 24 Nov 2023 15:32:10 +0000
ROA not before:           Fri 24 Nov 2023 15:27:10 +0000
ROA not after:            Fri 22 Nov 2024 15:32:10 +0000
asID:                     9087
IP address blocks:        178.208.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 19:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7b:c3:8e:b6:20:32:39:4e:1e:f4:4c:f6:91:a3:77:23:d7:1b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048af665bf8b186b70220759d26c578f40b5f3e3
        Validity
            Not Before: Nov 24 15:27:10 2023 GMT
            Not After : Nov 22 15:32:10 2024 GMT
        Subject: CN=E8A5797ED800CCC94F685E5EA9014BD3770BD464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8f:78:38:b7:7b:8a:95:cb:5b:42:55:bd:9c:
                    91:60:6f:c6:68:51:a9:11:ec:7f:53:14:98:b5:be:
                    f8:ce:0a:89:09:3c:36:67:26:df:bf:c1:ff:73:dd:
                    47:e6:3f:7c:91:72:83:95:ca:44:ad:5c:9c:7e:d0:
                    19:72:66:52:cf:8b:fe:86:25:ed:11:7e:75:1d:4a:
                    c4:a9:83:d4:21:6e:b9:a4:24:a0:9b:51:f4:8a:68:
                    3e:2e:db:76:f2:f1:6b:a5:d3:78:8d:7d:b6:c2:de:
                    c0:1e:f3:9a:58:88:70:1a:05:72:d4:83:2c:2c:6d:
                    13:9b:77:2d:34:01:9a:c4:a2:d4:a8:f4:b1:c9:a5:
                    96:3f:fe:35:74:73:6d:be:a0:6d:6e:76:ab:a0:dd:
                    ec:7f:a3:f9:b9:64:33:ad:d6:28:61:60:7d:02:1e:
                    bf:f8:4b:b7:5c:f0:89:8d:37:41:30:dc:fc:5b:88:
                    f5:15:74:67:c5:34:5e:2e:6b:a2:fe:b8:46:0b:10:
                    15:b5:f3:f5:01:af:b1:0c:1c:fe:a0:35:7f:5f:c6:
                    9e:08:14:68:23:80:8a:57:b8:1b:29:ae:95:ed:49:
                    a9:8b:f8:ed:d9:e0:a4:4d:11:73:1e:3b:11:f3:85:
                    f9:60:f1:58:6e:db:68:68:b7:0e:32:1e:08:86:26:
                    8a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A5:79:7E:D8:00:CC:C9:4F:68:5E:5E:A9:01:4B:D3:77:0B:D4:64
            X509v3 Authority Key Identifier:
                keyid:04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/3137382e3230382e3137382e302f32332d3233203d3e2039303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.208.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:45:1f:d2:e7:ec:1b:55:94:14:fa:93:3b:6a:85:70:f7:af:
         dc:66:af:2d:ee:3d:36:bd:0c:67:7a:b7:c9:90:09:82:d8:70:
         ae:ca:51:93:73:79:02:0d:05:0d:c7:4e:d4:51:4d:49:58:ec:
         84:1e:67:c0:b5:1e:cc:64:72:d3:3a:f0:33:6d:45:ba:d7:71:
         76:f6:64:17:9b:bd:23:6a:08:30:9b:65:38:8b:ed:32:38:6d:
         02:18:5c:08:48:86:ea:5b:70:90:38:61:64:ed:5a:06:b1:22:
         2f:6b:9a:0f:86:3a:fd:a0:4c:42:14:13:a3:8d:81:e3:c2:14:
         14:d6:4a:70:85:98:92:0f:6b:93:de:b9:da:a0:c3:31:3a:36:
         bd:0f:6e:8e:e0:b5:40:21:5f:b0:1d:23:f2:8e:e2:84:74:a8:
         19:1a:ba:37:66:0c:67:77:3f:e7:cd:0a:3e:f4:7d:82:cc:1d:
         48:a4:52:e0:5c:b1:32:99:0a:95:2f:f7:94:dc:b6:8c:03:d1:
         ba:bd:8b:50:22:75:36:fe:2b:ef:f9:d8:23:28:39:18:b6:d5:
         f9:8c:36:d4:85:5b:c4:d5:9f:bd:14:2f:69:ed:40:13:0b:71:
         53:0b:1c:4f:a1:2f:c7:c1:a9:cf:38:21:bc:fd:76:cd:67:bb:
         7e:52:35:15
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMnvDjrYgMjlOHvRM9pGjdyPXG0EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQ4YWY2NjViZjhiMTg2YjcwMjIwNzU5ZDI2YzU3OGY0
MGI1ZjNlMzAeFw0yMzExMjQxNTI3MTBaFw0yNDExMjIxNTMyMTBaMDMxMTAvBgNV
BAMTKEU4QTU3OTdFRDgwMENDQzk0RjY4NUU1RUE5MDE0QkQzNzcwQkQ0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFj3g4t3uKlctbQlW9nJFgb8Zo
UakR7H9TFJi1vvjOCokJPDZnJt+/wf9z3UfmP3yRcoOVykStXJx+0BlyZlLPi/6G
Je0RfnUdSsSpg9QhbrmkJKCbUfSKaD4u23by8Wul03iNfbbC3sAe85pYiHAaBXLU
gywsbRObdy00AZrEotSo9LHJpZY//jV0c22+oG1udqug3ex/o/m5ZDOt1ihhYH0C
Hr/4S7dc8ImNN0Ew3PxbiPUVdGfFNF4ua6L+uEYLEBW18/UBr7EMHP6gNX9fxp4I
FGgjgIpXuBsprpXtSamL+O3Z4KRNEXMeOxHzhflg8Vhu22hotw4yHgiGJorXAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU6KV5ftgAzMlPaF5eqQFL03cL1GQwHwYDVR0j
BBgwFoAUBIr2Zb+LGGtwIgdZ0mxXj0C18+MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODJhOWJmNWItMzljMS00MDUwLWIwNzMtNDgwNzViODYx
ZDg3LzAvMDQ4QUY2NjVCRjhCMTg2QjcwMjIwNzU5RDI2QzU3OEY0MEI1RjNFMy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0JJcjJaYi1MR0d0d0lnZFowbXhYajBD
MTgtTS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODJhOWJmNWIt
MzljMS00MDUwLWIwNzMtNDgwNzViODYxZDg3LzAvMzEzNzM4MmUzMjMwMzgyZTMx
MzczODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM5MzAzODM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
stCyMA0GCSqGSIb3DQEBCwUAA4IBAQCgRR/S5+wbVZQU+pM7aoVw96/cZq8t7j02
vQxnerfJkAmC2HCuylGTc3kCDQUNx07UUU1JWOyEHmfAtR7MZHLTOvAzbUW613F2
9mQXm70jaggwm2U4i+0yOG0CGFwISIbqW3CQOGFk7VoGsSIva5oPhjr9oExCFBOj
jYHjwhQU1kpwhZiSD2uT3rnaoMMxOja9D26O4LVAIV+wHSPyjuKEdKgZGro3Zgxn
dz/nzQo+9H2CzB1IpFLgXLEymQqVL/eU3LaMA9G6vYtQInU2/ivv+dgjKDkYttX5
jDbUhVvE1Z+9FC9p7UATC3FTCxxPoS/HwanPOCG8/XbNZ7t+UjUV
-----END CERTIFICATE-----
Generated at Mon May 20 04:05:07 2024 by rpki-client on console-ams.rpki-client.org