Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51082.roa
File:                     AS51082.roa (raw, json)
Hash identifier:          rgZEXUkK6JF+tnYa3dpZDtwhv/JqmHm74ByIsrFHKbM=
Subject key identifier:   E5:78:62:FE:0A:34:BA:DB:88:98:46:D7:42:E5:0B:CB:2D:41:0E:64
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       6B14456551D2958D6A3268DB271A2B8B5ECC03A8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51082.roa
Signing time:             Thu 01 May 2025 12:44:11 +0000
ROA not before:           Thu 01 May 2025 12:39:11 +0000
ROA not after:            Thu 30 Apr 2026 12:44:11 +0000
asID:                     51082
IP address blocks:        92.113.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Jun 2025 20:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:14:45:65:51:d2:95:8d:6a:32:68:db:27:1a:2b:8b:5e:cc:03:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May  1 12:39:11 2025 GMT
            Not After : Apr 30 12:44:11 2026 GMT
        Subject: CN=E57862FE0A34BADB889846D742E50BCB2D410E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:e6:79:fd:c0:35:99:58:43:1a:ff:8f:51:
                    c4:ef:35:5f:4e:04:3b:f0:ef:34:ed:a4:d8:6c:00:
                    37:7a:d2:6a:54:a1:54:4b:54:c7:53:4f:9b:e7:57:
                    e4:b5:a0:48:e5:b7:4a:54:3d:d9:e9:36:4e:66:a2:
                    b5:4f:08:9d:51:65:7b:5b:2e:0c:d6:8e:25:3d:d9:
                    a5:ee:81:c3:b0:02:6c:1f:6a:ee:8b:f8:c4:53:93:
                    6a:e3:fa:69:62:a0:8d:65:5f:01:ca:74:6c:ea:7b:
                    37:da:f4:c6:9c:2e:f7:3c:a2:05:72:a7:9d:47:3e:
                    de:e6:30:70:4a:e1:0d:6b:dc:a3:a8:39:10:3f:f9:
                    68:78:c5:5b:f3:99:e5:78:16:08:e3:53:2e:2d:57:
                    9f:e7:11:91:4a:ba:e9:15:a8:bb:2b:22:cb:f4:4e:
                    38:ac:35:27:40:74:c5:04:e6:23:c9:9e:2b:bf:ad:
                    fc:11:59:0f:c3:68:ae:cf:c2:6f:5f:d7:93:75:a7:
                    22:de:59:e9:8b:a9:d2:08:b4:98:af:7c:57:1e:f4:
                    de:fc:74:11:cc:30:f9:9e:7d:84:86:21:e1:c1:55:
                    ed:fd:0e:c4:85:00:bd:50:2a:c0:ba:fc:89:e5:32:
                    72:b9:46:7e:c8:40:80:3f:48:ef:85:b5:86:ae:a8:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:78:62:FE:0A:34:BA:DB:88:98:46:D7:42:E5:0B:CB:2D:41:0E:64
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS51082.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.113.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:21:3d:a7:4b:78:ba:87:0b:ab:dd:5e:fd:b3:74:d4:af:d8:
         8b:29:18:28:83:b9:83:c2:fa:3e:e4:b2:71:d5:52:ab:a7:fb:
         5a:7f:5d:18:f9:69:07:42:e5:2d:de:f6:b6:2e:95:7c:69:de:
         f8:ea:1e:21:ee:d0:4b:9f:46:40:ba:5e:bb:f5:cd:e8:f7:21:
         d5:a9:6e:bc:45:0b:a1:ab:26:36:94:a7:5c:21:c7:73:83:30:
         79:01:92:0f:f6:7d:2d:08:bf:29:81:72:7b:d3:cf:a9:a4:8a:
         9b:05:21:fb:2b:39:73:de:8b:df:cb:1d:de:22:90:e1:1e:e6:
         1b:f0:4b:8e:a6:a6:4e:29:87:af:03:23:c7:99:64:42:2b:a3:
         f9:0f:2b:fb:fe:20:38:87:ef:28:7d:04:b0:9a:27:ea:11:cb:
         91:6f:2e:0b:49:37:24:7e:89:68:33:07:23:c3:f3:c6:73:c3:
         8f:a1:9f:aa:49:b0:d3:bf:f5:db:1c:fd:71:c3:fd:46:fd:4f:
         21:b8:86:23:25:7a:e6:7f:22:93:a3:83:bf:7a:45:96:7a:25:
         02:79:8b:d8:2b:bc:69:d4:c3:6d:3b:b3:d2:f2:33:01:df:d0:
         c7:a0:a5:46:99:f3:39:b6:de:47:85:c9:0d:88:a3:1f:e9:61:
         e3:3c:4a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:14:25 2025 by rpki-client