Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e203534333339.roa
File:                     39332e39322e31382e302f32342d3234203d3e203534333339.roa (raw, json)
Hash identifier:          0oE5Xz8hSZVVCK191bZ+YhoVSBj4Q8M0iZuBlgrVyfo=
Subject key identifier:   EA:69:5F:22:C3:D5:E4:B4:37:D2:DE:C9:3F:98:AA:73:7F:C5:DC:75
Certificate issuer:       /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial:       750FD96F25FE1DA57AC405F702C7BCFE916411B9
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e203534333339.roa
Signing time:             Fri 23 Jun 2023 17:30:35 +0000
ROA not before:           Fri 23 Jun 2023 17:25:35 +0000
ROA not after:            Fri 21 Jun 2024 17:30:35 +0000
asID:                     54339
IP address blocks:        93.92.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0f:d9:6f:25:fe:1d:a5:7a:c4:05:f7:02:c7:bc:fe:91:64:11:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
        Validity
            Not Before: Jun 23 17:25:35 2023 GMT
            Not After : Jun 21 17:30:35 2024 GMT
        Subject: CN=EA695F22C3D5E4B437D2DEC93F98AA737FC5DC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:dc:47:25:0c:89:75:83:c8:7d:f7:c6:ce:63:
                    de:6f:f6:8c:30:99:3b:3f:33:ec:b4:05:96:64:83:
                    1e:85:79:ac:58:f9:7f:33:88:e2:b2:6a:ff:30:2f:
                    05:61:ed:4b:12:c7:b4:04:03:81:cd:1e:b9:46:43:
                    f9:1e:5e:aa:85:87:48:2c:dc:14:91:a6:e7:cb:ed:
                    e6:71:a3:db:5f:3c:16:9f:47:25:81:35:e0:79:4c:
                    76:f0:f4:70:a9:52:7f:79:c7:16:82:c7:89:0f:bc:
                    34:a9:6f:40:7f:91:f8:28:46:5c:76:60:a6:b3:8b:
                    c8:c0:b2:25:14:7f:be:c3:f9:9b:e8:a1:e4:14:09:
                    0b:32:48:12:14:ec:d5:f9:38:21:44:54:a8:02:b2:
                    ec:65:a4:f7:fc:5d:04:ca:0c:46:35:e6:16:13:fc:
                    79:f5:2b:21:03:04:c9:53:87:f3:3c:a5:1b:1d:88:
                    a6:0e:c1:86:41:52:7a:3b:92:e3:76:c7:12:d8:f6:
                    2a:90:5d:36:8e:59:de:3a:ec:d0:bf:c0:bd:c7:67:
                    dc:f6:8c:ea:5f:51:d8:e4:f7:82:e4:86:a7:7b:62:
                    9a:ba:2c:4c:26:f6:be:8c:b8:8e:d3:24:45:fe:e5:
                    6d:31:20:c0:9e:52:ec:f5:9a:02:85:85:94:7f:d8:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:69:5F:22:C3:D5:E4:B4:37:D2:DE:C9:3F:98:AA:73:7F:C5:DC:75
            X509v3 Authority Key Identifier:
                keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/39332e39322e31382e302f32342d3234203d3e203534333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.92.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:de:e8:96:07:4f:1a:b8:89:41:93:f1:b3:26:62:cb:d4:
         d4:46:8e:ff:f9:75:cf:8e:e5:0a:fa:7f:13:e9:2e:0e:51:a1:
         cb:f9:5f:e8:21:7f:61:33:95:6e:6f:a3:de:3c:e9:97:5b:d3:
         dc:a9:b6:86:38:53:f5:a4:10:67:13:8b:56:05:e3:3e:59:95:
         18:a7:40:c6:3b:30:4f:b9:25:42:e0:0f:61:ad:0e:0d:45:f1:
         1e:eb:15:4a:dc:31:a7:c7:2a:28:ba:ce:b4:71:da:63:3d:4a:
         c4:34:9a:b3:7f:db:59:61:f2:80:60:ec:72:00:62:a2:14:db:
         a0:9c:8b:8f:b6:0b:fe:7d:6e:4e:a6:bb:ac:06:a8:8a:61:39:
         06:03:66:93:9f:26:0b:34:93:dc:d9:12:b5:2c:29:0a:41:31:
         b5:ff:04:fb:5e:37:f7:d8:7e:7c:4b:3e:dd:80:cd:9f:ed:8b:
         e6:42:a8:78:89:e2:a0:cc:f6:14:6d:84:47:c0:56:40:d1:e3:
         ff:ca:d6:11:ba:21:38:e3:f0:5c:b3:a4:1b:6f:b1:c3:79:cc:
         d1:e5:85:11:70:05:1d:0a:20:46:07:a2:16:28:67:65:9d:34:
         dc:05:ad:b5:3a:32:54:fb:63:fd:7f:78:df:a4:6d:84:ab:f9:
         4a:36:60:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 05:44:25 2024 by rpki-client on console-fra.rpki-client.org