Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa
File:                     7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa (raw, json)
Hash identifier:          uPZBCvQWdyX5oSW3u+GYq0zKOz3VqYp/42l/kQKgi6Y=
Subject key identifier:   ED:72:EB:65:E2:8E:37:79:A2:FD:8F:07:6D:D9:30:85:D3:89:1D:93
Certificate issuer:       /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial:       0196386255E4F3BBA569BE4447D9B9D4161A
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa
Signing time:             Tue 15 Apr 2025 07:38:10 +0000
ROA not before:           Tue 15 Apr 2025 07:38:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     36671
IP address blocks:        212.133.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 13:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:38:62:55:e4:f3:bb:a5:69:be:44:47:d9:b9:d4:16:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
        Validity
            Not Before: Apr 15 07:38:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=ed72eb65e28e3779a2fd8f076dd93085d3891d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:20:84:be:1d:6f:75:a7:44:7e:b7:7b:24:04:
                    55:26:4c:22:9f:6c:21:57:70:86:a9:ac:81:40:c1:
                    2f:8e:f4:3a:fd:ca:a2:59:ba:ad:09:35:ea:41:6b:
                    3a:76:b3:ce:ed:18:c6:d5:4e:5e:bb:d1:e8:91:3d:
                    1a:70:53:8c:0b:a1:47:67:42:2f:b8:5e:41:e0:82:
                    cb:22:95:b9:9e:34:75:19:42:14:08:8a:db:6f:98:
                    e9:fd:53:12:8a:20:94:b3:d3:b8:3a:50:81:80:bb:
                    aa:65:54:b5:92:ce:e3:7b:38:be:31:fd:43:ac:65:
                    7d:15:b3:f1:39:70:0c:0a:51:43:8a:d5:3c:9f:21:
                    d2:59:51:57:d0:09:30:2f:cd:d0:88:77:32:06:3e:
                    09:27:ee:67:7a:50:f8:8e:20:5a:ed:cc:c0:f5:9d:
                    fa:be:7a:5e:96:19:e0:7f:a1:16:a2:8c:fc:5a:ef:
                    fa:59:ff:f9:3e:bb:dc:dd:85:ee:8d:a7:2b:9b:3a:
                    99:b1:e2:b6:98:89:cd:2a:a1:5f:b5:80:fa:01:84:
                    c9:7b:6b:43:c7:4f:70:5d:f1:a0:b5:bc:73:56:68:
                    7c:69:4b:f0:a2:68:61:d5:b6:f0:6d:2e:56:04:db:
                    fa:64:72:b0:9c:e9:60:aa:fe:c9:fa:c3:44:1c:5a:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:72:EB:65:E2:8E:37:79:A2:FD:8F:07:6D:D9:30:85:D3:89:1D:93
            X509v3 Authority Key Identifier:
                keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/7XLrZeKON3mi_Y8HbdkwhdOJHZM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.133.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ba:04:cf:6f:55:67:3c:99:76:53:ac:ad:68:f5:3a:09:a5:
         3a:43:1a:5f:53:ec:fa:d5:58:15:c9:65:0b:31:f8:80:ff:00:
         02:60:bf:f8:40:0b:8a:68:28:0e:5d:e1:93:e9:7c:7e:a2:60:
         25:ef:3e:2f:25:5d:c1:72:49:a6:2e:cf:ac:ad:8b:28:e1:43:
         d5:ed:92:30:10:13:10:30:af:c7:48:ca:5a:86:42:5f:c3:ae:
         4b:b4:1a:ac:c9:04:e1:50:e7:f1:0b:39:d5:f6:c4:bc:3f:16:
         d7:c6:9e:1b:b8:ba:dc:14:49:03:44:f4:3a:59:be:d6:77:98:
         56:78:ef:99:04:0a:ec:5e:29:57:df:96:55:65:63:5a:c8:b5:
         0b:d2:03:a1:15:bb:3f:02:0d:ca:1d:a8:b8:d7:8c:4c:7f:5b:
         2a:3d:f9:2d:d4:d5:90:9b:11:be:e7:64:2a:30:86:2a:0d:e3:
         0e:50:35:b7:8e:a0:bb:02:73:89:6c:40:5c:dc:91:e4:22:dc:
         9e:90:cc:5e:dd:34:05:cf:2b:d6:08:81:c5:3b:51:7c:a3:5a:
         08:38:cd:51:99:ae:e8:a1:81:fe:6a:5b:a6:b9:68:46:2a:b9:
         b8:0c:7d:ce:02:3e:f0:d8:b1:84:7c:14:5f:c7:a8:ce:25:12:
         63:13:c8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:00:05 2025 by rpki-client