Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38302e37352e3232312e302f32342d3234203d3e203438393235.roa
File:                     38302e37352e3232312e302f32342d3234203d3e203438393235.roa (raw, json)
Hash identifier:          0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=
Subject key identifier:   99:AE:33:C4:F4:FF:B3:70:78:41:48:FD:62:A3:E0:33:85:E0:3E:96
Certificate issuer:       /CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Certificate serial:       5EDDAD8E5FB32CBAD336EBE3FD0813E0BFDEA944
Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38302e37352e3232312e302f32342d3234203d3e203438393235.roa
Signing time:             Mon 11 Nov 2024 17:57:02 +0000
ROA not before:           Mon 11 Nov 2024 17:52:02 +0000
ROA not after:            Mon 10 Nov 2025 17:57:02 +0000
asID:                     48925
IP address blocks:        80.75.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:dd:ad:8e:5f:b3:2c:ba:d3:36:eb:e3:fd:08:13:e0:bf:de:a9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
        Validity
            Not Before: Nov 11 17:52:02 2024 GMT
            Not After : Nov 10 17:57:02 2025 GMT
        Subject: CN=99AE33C4F4FFB370784148FD62A3E03385E03E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:dd:dd:c5:80:ce:14:db:88:22:1c:e2:75:
                    99:28:53:77:15:f5:9f:dc:2a:2b:96:eb:72:bc:d6:
                    61:fe:59:11:56:87:97:30:06:bb:1a:f2:c3:bb:0b:
                    ca:75:e1:43:c5:cf:e9:2e:c8:45:b8:15:09:16:60:
                    16:e9:45:f9:5f:6f:48:56:8e:5e:6f:76:bd:3c:16:
                    4e:f9:8d:72:fc:be:a4:f6:59:e9:00:08:26:96:5e:
                    1d:e3:c4:fe:bd:1c:52:aa:fc:0c:8d:01:55:b8:45:
                    45:81:1f:37:f8:3a:cc:bb:b2:6b:ad:b5:98:20:e5:
                    6e:e4:b0:a8:5d:e0:0b:a0:cf:b2:64:e8:18:9d:c4:
                    df:9c:56:f0:ac:63:eb:ea:71:61:2a:20:ae:e0:0b:
                    84:9a:28:cd:af:7b:43:6c:a6:f3:95:69:f4:c9:29:
                    2e:11:03:9e:07:92:0a:06:61:f2:fb:39:ce:d6:5e:
                    b3:01:93:7a:b6:4f:78:c8:ee:ac:d3:bb:1f:5a:f4:
                    a8:bc:72:27:23:ef:79:4d:0f:17:ee:d0:e1:69:8c:
                    5d:26:4b:18:cb:47:dc:58:95:38:6c:13:65:3a:16:
                    0f:cb:bc:3d:0e:0d:46:80:c4:45:17:d9:40:c8:4a:
                    9b:d6:51:05:dc:59:e2:56:10:58:aa:a8:5f:09:9f:
                    5d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AE:33:C4:F4:FF:B3:70:78:41:48:FD:62:A3:E0:33:85:E0:3E:96
            X509v3 Authority Key Identifier:
                keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38302e37352e3232312e302f32342d3234203d3e203438393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.75.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:c4:f0:a7:d9:7a:52:c6:2e:90:9b:43:84:61:9e:13:c4:
         0a:2d:18:58:ba:99:6d:1f:f1:9e:c3:3c:b4:ad:fd:32:52:01:
         90:70:3a:78:22:0e:5c:a4:27:ae:43:40:44:c1:fa:ec:bb:8d:
         5d:29:e6:11:c2:88:a3:ad:20:02:e4:c7:01:7d:24:e8:04:31:
         50:27:3f:1c:f0:3a:54:5c:13:07:f5:35:80:67:5a:95:94:f0:
         0c:3a:1c:21:74:05:31:d5:2e:d7:39:78:ad:06:b0:b2:72:5f:
         9f:eb:4d:8c:00:76:87:cf:94:ef:1a:52:42:20:55:3b:6a:89:
         92:05:c2:c3:1e:41:dc:d3:3e:66:52:41:53:5c:fd:64:70:e7:
         08:ff:89:55:5b:b3:9f:61:42:7e:b9:8b:6c:67:20:4c:2a:3c:
         37:be:04:36:9e:04:0b:c4:38:c5:ff:6c:fd:9f:ed:e3:fa:81:
         ab:20:c7:f1:e2:b8:4d:ff:9d:cb:b4:de:fc:79:39:1b:7c:fe:
         5f:9f:e5:5c:f2:05:f3:c1:90:d2:23:d4:73:56:f0:76:f3:c3:
         d2:39:36:38:95:76:ad:20:d3:a0:e2:dc:a1:eb:27:45:17:64:
         5f:ed:07:bb:f5:49:9b:90:86:d5:74:55:02:8a:f8:04:2f:2c:
         2d:7c:5c:6a
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUXt2tjl+zLLrTNuvj/QgT4L/eqUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx
ZTAxNzYwODAeFw0yNDExMTExNzUyMDJaFw0yNTExMTAxNzU3MDJaMDMxMTAvBgNV
BAMTKDk5QUUzM0M0RjRGRkIzNzA3ODQxNDhGRDYyQTNFMDMzODVFMDNFOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaN3dxYDOFNuIIhzidZkoU3cV
9Z/cKiuW63K81mH+WRFWh5cwBrsa8sO7C8p14UPFz+kuyEW4FQkWYBbpRflfb0hW
jl5vdr08Fk75jXL8vqT2WekACCaWXh3jxP69HFKq/AyNAVW4RUWBHzf4Osy7smut
tZgg5W7ksKhd4Augz7Jk6BidxN+cVvCsY+vqcWEqIK7gC4SaKM2ve0NspvOVafTJ
KS4RA54HkgoGYfL7Oc7WXrMBk3q2T3jI7qzTux9a9Ki8cicj73lNDxfu0OFpjF0m
SxjLR9xYlThsE2U6Fg/LvD0ODUaAxEUX2UDISpvWUQXcWeJWEFiqqF8Jn105AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUma4zxPT/s3B4QUj9YqPgM4XgPpYwHwYDVR0j
BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj
ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0
QmRnZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgt
YmZlMC00MjM1LWFmYjQtZDUzZWRmYmFjZGQyLzAvMzgzMDJlMzczNTJlMzIzMjMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODM5MzIzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFBL
3TANBgkqhkiG9w0BAQsFAAOCAQEAXxnE8KfZelLGLpCbQ4RhnhPECi0YWLqZbR/x
nsM8tK39MlIBkHA6eCIOXKQnrkNARMH67LuNXSnmEcKIo60gAuTHAX0k6AQxUCc/
HPA6VFwTB/U1gGdalZTwDDocIXQFMdUu1zl4rQawsnJfn+tNjAB2h8+U7xpSQiBV
O2qJkgXCwx5B3NM+ZlJBU1z9ZHDnCP+JVVuzn2FCfrmLbGcgTCo8N74ENp4EC8Q4
xf9s/Z/t4/qBqyDH8eK4Tf+dy7Te/Hk5G3z+X5/lXPIF88GQ0iPUc1bwdvPD0jk2
OJV2rSDToOLcoesnRRdkX+0Hu/VJm5CG1XRVAor4BC8sLXxcag==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:51 2024 by rpki-client on console-ams.rpki-client.org