Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203631333137.roa
File:                     39332e3131332e3231322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          pYw0P56zFi4wRkkwvPxK0X9Amc7AuJTA4uP+hbzqcfs=
Subject key identifier:   65:06:50:EF:74:9E:FA:D5:BF:5A:39:2A:8D:4F:D5:A7:9C:B0:14:6F
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       322C501D10BB4928A4BA47608D0E32B9998853E4
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 24 Jul 2024 12:05:19 +0000
ROA not before:           Wed 24 Jul 2024 12:00:19 +0000
ROA not after:            Wed 23 Jul 2025 12:05:19 +0000
asID:                     61317
IP address blocks:        93.113.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 16:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2c:50:1d:10:bb:49:28:a4:ba:47:60:8d:0e:32:b9:99:88:53:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Jul 24 12:00:19 2024 GMT
            Not After : Jul 23 12:05:19 2025 GMT
        Subject: CN=650650EF749EFAD5BF5A392A8D4FD5A79CB0146F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:19:cf:36:fe:10:26:be:e8:41:4a:f3:34:
                    90:ba:0c:52:b8:9e:92:0a:25:dc:41:92:fa:96:c1:
                    2f:f5:d5:90:de:38:43:d6:18:7c:54:a4:d8:e3:cf:
                    93:54:30:4c:ba:29:3d:35:41:29:ab:ad:a7:e9:b8:
                    73:23:94:60:50:00:8d:ff:f9:e4:03:0c:40:f1:fe:
                    79:6b:68:11:1e:4a:02:cd:16:5f:85:91:8e:ae:a4:
                    aa:be:22:19:64:62:d2:4d:a7:42:8b:5b:1f:63:76:
                    7d:5b:9e:e1:a3:c7:0f:64:fa:5b:36:91:0e:de:0f:
                    f6:b6:9e:cf:45:cb:df:84:4e:ec:02:08:ca:29:41:
                    45:8b:35:50:f8:a1:9b:91:1f:55:09:6b:dd:c2:52:
                    a9:b2:f8:a0:e8:1e:32:52:06:90:f7:17:72:43:d5:
                    b2:71:23:45:20:71:b8:34:05:b6:65:5d:37:d4:3e:
                    1b:18:d4:1b:c7:c7:ff:dd:01:4a:76:82:fa:0e:0b:
                    9a:3e:53:ea:c1:ee:e1:60:7a:4b:11:bf:94:55:dc:
                    6d:69:7d:5c:a0:47:2a:28:13:be:86:f4:77:9e:d2:
                    f5:c7:fb:1f:1c:71:9d:b4:0f:1f:6b:42:43:28:88:
                    92:9c:54:3b:77:93:c7:35:81:fa:23:e0:ee:37:8e:
                    45:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:06:50:EF:74:9E:FA:D5:BF:5A:39:2A:8D:4F:D5:A7:9C:B0:14:6F
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e3231322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:bc:ce:bc:0a:14:24:b0:5d:af:5d:74:ff:00:e8:05:2c:c9:
         a0:2e:c5:9c:b5:7a:18:72:b8:de:c7:9d:40:93:83:c8:a8:06:
         8b:d0:06:7d:07:95:53:4e:ea:9e:a1:65:0d:ff:b3:a7:63:1a:
         2c:c2:82:3b:32:d8:db:e4:0a:b3:2d:f4:f7:dc:65:04:c0:a8:
         be:16:25:9c:1a:0b:02:9e:c7:ef:71:b7:b4:3e:45:48:19:2e:
         47:f1:45:ab:1a:32:84:b2:fa:30:9b:72:24:71:19:95:d0:7e:
         be:b6:49:a5:ed:89:81:d8:d1:da:51:ae:9e:a1:78:fd:18:0c:
         aa:bf:cd:10:96:32:31:63:31:6a:d5:74:6b:15:ed:c5:ec:3c:
         5d:bd:9c:2e:88:9d:bb:4d:8d:97:f7:b8:ff:01:7b:6a:2a:86:
         8a:e5:e5:42:78:0d:e1:8e:4a:46:26:b9:af:fb:c7:1e:56:df:
         ca:68:29:61:1c:ca:98:fc:11:2b:0d:0f:af:a0:b5:22:2f:cd:
         18:d1:b7:60:c6:ff:d0:13:21:18:91:89:38:ab:72:4e:d8:fd:
         cd:ba:f1:66:4d:72:1a:b5:a6:36:94:ae:c0:97:9e:b5:af:6a:
         90:2e:ed:d6:6b:af:d2:68:09:72:08:dc:7c:4d:d1:b3:5e:5b:
         1c:f7:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:33:20 2025 by rpki-client