Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/1-FSCARn17wWw6WjvMiMGNYzthco.roa
File:                     1-FSCARn17wWw6WjvMiMGNYzthco.roa (raw, json)
Hash identifier:          WzPC2hd+hE5fhExQNNOD10aWRIj2XENdQ2evH7suYjY=
Subject key identifier:   F8:54:82:01:19:F5:EF:05:B0:E9:68:EF:32:23:06:35:8C:ED:85:CA
Certificate issuer:       /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial:       01987A81357F0504AD5DE2335CCFDFE1D102
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/1-FSCARn17wWw6WjvMiMGNYzthco.roa
Signing time:             Tue 05 Aug 2025 13:52:24 +0000
ROA not before:           Tue 05 Aug 2025 13:52:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     200088
IP address blocks:        92.63.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:81:35:7f:05:04:ad:5d:e2:33:5c:cf:df:e1:d1:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
        Validity
            Not Before: Aug  5 13:52:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f854820119f5ef05b0e968ef322306358ced85ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:07:cb:72:91:96:0b:ea:ac:de:f8:6f:f6:
                    e5:0f:46:fd:0b:f5:a2:04:da:d4:fa:b7:a7:42:83:
                    57:8c:a7:c4:d7:4b:17:32:24:07:e9:76:89:96:10:
                    9f:5d:b7:84:7e:48:61:ed:45:26:57:c0:b9:98:ca:
                    17:61:37:b2:24:71:51:85:91:58:85:c0:65:42:b2:
                    9b:23:fb:25:b0:d1:7e:57:0b:3b:cf:bf:cd:26:b5:
                    a5:a1:29:c6:08:fa:54:0f:e3:a0:28:e0:37:9b:34:
                    e5:49:32:24:99:91:2c:a7:4f:72:95:03:d5:89:c7:
                    0b:f6:64:0c:ab:2c:b9:54:c9:eb:5a:9e:7f:ac:f2:
                    db:e4:ea:e6:20:05:31:fe:8c:de:da:05:60:96:e5:
                    21:13:f9:32:7a:fb:06:7f:19:81:b9:75:15:5b:8a:
                    b0:5d:52:31:ee:32:0b:e6:bf:72:e5:86:44:34:d5:
                    40:60:46:6a:8f:c6:42:10:ee:26:17:b6:0c:5c:a2:
                    3a:61:b8:80:c4:19:a5:b5:69:70:8e:74:4e:aa:9f:
                    b3:f0:64:54:48:e2:47:67:f4:16:59:a7:9d:61:84:
                    a8:69:dc:fa:e2:dc:e3:d7:1d:3b:1e:a6:58:eb:b8:
                    68:a7:fa:54:ca:99:ab:02:ef:e6:c9:b4:34:e8:11:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:54:82:01:19:F5:EF:05:B0:E9:68:EF:32:23:06:35:8C:ED:85:CA
            X509v3 Authority Key Identifier:
                keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/1-FSCARn17wWw6WjvMiMGNYzthco.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:6c:8c:9f:05:84:d1:2e:67:1b:f0:c0:43:c2:6c:71:a7:a2:
         96:9c:c8:6f:dc:b2:62:97:29:2c:4f:0c:ce:c1:70:0f:ef:d0:
         1f:f9:5e:ce:7b:60:94:4f:eb:a0:25:b7:2d:8f:c4:97:2b:a7:
         4c:ac:85:1d:e7:fd:cd:82:96:81:20:68:df:f7:f8:29:14:d1:
         ae:9a:58:e3:67:e1:1a:34:a9:5e:17:24:ea:4d:20:88:9b:fe:
         af:f9:2f:46:67:79:ef:1a:bc:db:e1:da:a9:0a:9c:31:29:35:
         fb:3b:8e:2f:cc:4e:f8:10:75:c4:ce:65:af:87:75:d5:cc:1a:
         42:1b:f7:c4:83:1f:59:52:24:bd:fe:eb:db:6d:ab:1e:1c:e6:
         44:6e:28:37:50:b6:88:20:55:c3:3d:d8:11:19:24:35:3d:ed:
         38:21:be:0c:43:64:68:29:4b:18:17:d3:b2:7b:18:19:ce:1f:
         d7:5a:23:61:1d:8f:f6:56:cc:63:6e:74:c6:9c:ca:f3:04:46:
         5d:c4:76:fa:d2:25:96:04:e9:ae:f0:77:49:86:e4:08:ff:06:
         b4:8a:91:db:70:b9:ea:a4:b8:88:38:84:92:66:17:e7:ca:3b:
         42:e1:a0:a9:ac:02:47:80:2d:e6:57:26:59:c1:cb:62:1e:15:
         41:8a:cb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:16:58 2025 by rpki-client