Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e2039303530.roa
File:                     39332e3131332e32352e302f32342d3234203d3e2039303530.roa (raw, json)
Hash identifier:          PTyzEGEzj9Op+ZC4bzRXct/MD0TsGyScJGiqxGu6KIE=
Subject key identifier:   E9:6B:FA:78:B4:C3:0A:D1:E8:83:8C:65:B1:5F:A0:5C:C9:37:22:CB
Certificate issuer:       /CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
Certificate serial:       12F60F010E3F4D07ACB762F919AD922807E20A23
Authority key identifier: ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e2039303530.roa
Signing time:             Wed 23 Aug 2023 11:20:38 +0000
ROA not before:           Wed 23 Aug 2023 11:15:38 +0000
ROA not after:            Wed 21 Aug 2024 11:20:38 +0000
asID:                     9050
IP address blocks:        93.113.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f6:0f:01:0e:3f:4d:07:ac:b7:62:f9:19:ad:92:28:07:e2:0a:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed9edb2a15871785fbae38e23c38820dbfa2cca4
        Validity
            Not Before: Aug 23 11:15:38 2023 GMT
            Not After : Aug 21 11:20:38 2024 GMT
        Subject: CN=E96BFA78B4C30AD1E8838C65B15FA05CC93722CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:05:93:43:10:5a:aa:f9:27:24:bc:19:f2:
                    67:a7:42:80:23:b7:d8:90:5b:a7:eb:38:74:f9:39:
                    a4:77:82:fa:ba:ee:13:be:1a:2f:46:27:07:ba:fb:
                    cd:0b:f4:99:34:0a:42:cd:87:a5:ef:00:2a:8e:02:
                    ed:1d:a0:ab:fc:76:31:35:8f:3d:82:80:3a:33:1a:
                    a8:36:00:a4:06:92:92:5b:f5:93:d9:42:67:3d:9f:
                    c1:6c:9b:e7:95:2e:27:80:cd:36:70:c8:5e:6b:6c:
                    75:e0:4b:c1:bb:25:9d:e0:fe:69:21:39:00:e4:76:
                    43:dc:94:3a:fc:d4:fc:cb:0c:f9:8a:af:a4:8a:89:
                    e7:52:2d:b8:fb:db:de:3c:ce:cb:08:dd:4f:45:dc:
                    a0:26:48:0f:8f:2c:3d:17:d6:20:45:8d:c6:8b:3f:
                    64:42:62:d6:57:8a:a1:0e:eb:d5:db:36:47:40:96:
                    cc:88:d1:48:6f:ed:a6:d7:6d:3f:8a:d7:a1:db:7d:
                    b6:c5:e9:48:a9:65:48:47:25:0e:db:cf:a0:9b:8b:
                    05:c5:53:f0:16:e9:42:e7:77:6e:fd:d7:47:7f:cf:
                    8c:d5:35:fa:0e:63:2f:f8:dd:ec:d2:8d:16:f8:32:
                    23:56:91:4b:64:93:42:4a:6c:45:dd:17:0c:fe:71:
                    2b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6B:FA:78:B4:C3:0A:D1:E8:83:8C:65:B1:5F:A0:5C:C9:37:22:CB
            X509v3 Authority Key Identifier:
                keyid:ED:9E:DB:2A:15:87:17:85:FB:AE:38:E2:3C:38:82:0D:BF:A2:CC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/ED9EDB2A15871785FBAE38E23C38820DBFA2CCA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Z7bKhWHF4X7rjjiPDiCDb-izKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ea0de97f-7ee8-4ce0-b045-efac8c243c79/0/39332e3131332e32352e302f32342d3234203d3e2039303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.113.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:47:e2:e1:9e:e2:6d:3a:43:ed:45:7a:90:39:3b:d5:a6:6e:
         99:82:c3:74:a9:e3:18:24:4e:f0:bf:ae:c4:48:5e:b5:c7:7d:
         d3:61:63:63:9e:34:90:e0:e3:d0:65:16:2d:fd:10:ed:54:ac:
         3e:89:bb:de:27:e6:69:1d:8e:85:20:10:c7:98:a7:70:68:49:
         f9:85:80:93:86:5a:52:f6:11:cf:ae:89:df:09:6b:70:47:b2:
         a0:92:d7:d0:20:4b:df:7d:b6:5f:77:3c:a9:13:5e:5c:4a:82:
         9b:2a:e4:36:34:60:6e:dd:30:d8:83:86:e1:79:9d:45:fe:ef:
         e1:b9:e0:19:d9:8e:d6:10:71:30:75:ae:ef:2e:ec:9e:cc:c3:
         94:7e:e4:12:26:00:df:93:06:33:95:ea:a9:19:95:39:67:c3:
         72:d2:c5:46:f4:77:a9:ed:61:5c:53:60:ba:36:06:67:c1:40:
         6f:fd:78:4d:9e:31:6d:4c:61:ed:28:6f:d5:42:56:4d:b1:8a:
         00:e0:d8:97:cc:41:40:9f:03:56:e2:c4:5b:90:72:a9:80:95:
         ac:6e:2d:b6:86:89:e1:9a:9f:00:ad:06:01:1b:97:5f:5b:9e:
         6d:43:41:d1:0b:be:95:0f:6a:8b:a3:97:15:8f:21:a5:19:bf:
         b1:47:b0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 23:07:52 2024 by rpki-client on console-fra.rpki-client.org