Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/k9C-Lx2MnDen0PPrjv-FBmwm7k8.roa
File:                     k9C-Lx2MnDen0PPrjv-FBmwm7k8.roa (raw, json)
Hash identifier:          DeBvzqgY1xxdBa2nL/oQy7FJbk8p0IxEM7ONkXLFQ7g=
Subject key identifier:   93:D0:BE:2F:1D:8C:9C:37:A7:D0:F3:EB:8E:FF:85:06:6C:26:EE:4F
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       018CC6B892091869A85B3147BE27A8919ADC
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/k9C-Lx2MnDen0PPrjv-FBmwm7k8.roa
Signing time:             Mon 01 Jan 2024 20:30:33 +0000
ROA not before:           Mon 01 Jan 2024 20:30:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202935
IP address blocks:        80.73.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:92:09:18:69:a8:5b:31:47:be:27:a8:91:9a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  1 20:30:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=93d0be2f1d8c9c37a7d0f3eb8eff85066c26ee4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:de:55:c6:0f:f4:63:40:dd:81:64:1a:6b:35:
                    11:cb:bb:2a:2d:f2:13:b2:99:73:46:ec:7a:6e:23:
                    12:87:b5:53:e1:08:c5:d8:38:5b:c1:7a:07:b6:3d:
                    9f:83:27:ff:09:c8:3a:22:76:62:6b:03:2e:90:05:
                    96:6f:be:8e:1e:68:1d:0e:f3:d2:fa:fb:ce:1a:b4:
                    6e:e5:f0:fa:37:04:c4:0d:b5:ba:d8:55:e5:5a:0d:
                    31:98:b2:1f:ae:de:e2:55:fb:98:67:37:4c:5f:e2:
                    6b:87:73:94:ff:cb:bf:52:a1:7e:1a:0c:e7:6c:59:
                    a5:38:0b:19:5a:37:de:45:ab:9b:73:40:f6:1b:31:
                    3c:3e:2a:db:12:ba:45:0b:cf:a6:7f:6a:f1:c0:f5:
                    aa:71:a8:88:cb:c4:b2:6c:b6:44:f1:10:20:3f:fc:
                    5a:6b:41:af:fc:eb:7a:74:d7:a4:12:ed:b4:7c:de:
                    f0:69:c6:d4:11:65:82:ac:31:c9:41:eb:ae:2e:71:
                    89:a6:cf:6e:ed:b0:06:f0:09:37:4d:c5:c7:dc:7c:
                    c9:b7:c7:d5:10:fb:59:5e:56:51:ca:e4:17:43:1c:
                    73:52:fa:9e:fe:8d:e8:8f:64:85:c0:2e:4f:3e:45:
                    ab:ff:db:3c:53:1b:1e:09:db:41:4c:b8:39:fa:c2:
                    d4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D0:BE:2F:1D:8C:9C:37:A7:D0:F3:EB:8E:FF:85:06:6C:26:EE:4F
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/k9C-Lx2MnDen0PPrjv-FBmwm7k8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.73.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e8:e7:4a:38:c4:93:44:79:08:00:56:d6:6c:9f:2b:d6:e8:
         20:41:cc:84:96:91:43:ff:ce:01:1e:b1:71:2e:03:02:86:ff:
         00:7f:0f:bb:65:79:96:21:65:de:c9:3b:a4:be:4e:25:2a:d4:
         fa:ad:9a:28:af:de:6e:2e:fd:20:b4:18:6f:89:34:06:26:c9:
         5b:24:80:46:52:bd:55:a8:aa:ce:9e:ee:51:b5:fe:ad:d1:42:
         c3:ca:6a:1b:53:16:35:91:5f:79:70:aa:1c:52:1d:de:4f:d6:
         96:5a:87:18:5c:01:b7:42:2a:a3:18:52:3b:7d:65:f2:a7:19:
         30:62:21:9a:10:83:63:bb:07:70:5e:ed:1e:63:b1:75:53:01:
         6e:8d:87:81:c9:03:4e:3d:70:95:f8:46:41:b8:79:52:e2:15:
         15:50:ab:de:73:65:5a:4b:41:67:28:65:dd:ef:bc:00:ff:4a:
         90:de:61:13:32:28:c1:ae:f1:48:b5:83:bb:c9:73:63:6d:9b:
         77:69:fa:0f:ea:9c:1b:c3:dd:b6:58:f6:25:7d:97:76:11:85:
         a3:eb:1c:d0:0a:4a:ec:e2:2c:b7:6c:c3:b7:2c:e8:eb:16:67:
         5c:2d:73:af:e3:af:fd:94:7d:19:d4:36:a7:f9:8c:21:c5:f5:
         3e:d0:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:06:45 2024 by rpki-client on console.sobornost.net