Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/V7pzudrBvKtyWxKZWO0x6f4_reQ.roa
File:                     V7pzudrBvKtyWxKZWO0x6f4_reQ.roa (raw, json)
Hash identifier:          ad12O7f2C5d8aoYSLL5ymITCCLpvSolDNgnwjYiuMkk=
Subject key identifier:   57:BA:73:B9:DA:C1:BC:AB:72:5B:12:99:58:ED:31:E9:FE:3F:AD:E4
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       0196429F7C91F06516D31AB26235047476FC
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/V7pzudrBvKtyWxKZWO0x6f4_reQ.roa
Signing time:             Thu 17 Apr 2025 07:21:10 +0000
ROA not before:           Thu 17 Apr 2025 07:21:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     35470
IP address blocks:        31.3.96.0/21 maxlen: 24
                          37.34.48.0/21 maxlen: 24
                          37.230.96.0/21 maxlen: 24
                          79.170.88.0/21 maxlen: 24
                          81.4.84.0/22 maxlen: 24
                          83.96.200.0/22 maxlen: 24
                          83.96.204.0/22 maxlen: 24
                          83.96.212.0/22 maxlen: 24
                          83.96.216.0/22 maxlen: 24
                          83.96.220.0/22 maxlen: 24
                          83.96.236.0/22 maxlen: 24
                          83.96.240.0/22 maxlen: 24
                          83.96.244.0/22 maxlen: 24
                          83.96.252.0/22 maxlen: 24
                          85.10.176.0/22 maxlen: 24
                          85.10.184.0/22 maxlen: 22
                          85.10.184.0/24 maxlen: 24
                          85.10.185.0/24 maxlen: 24
                          85.10.186.0/24 maxlen: 24
                          85.10.187.0/24 maxlen: 24
                          85.10.188.0/22 maxlen: 22
                          85.222.224.0/21 maxlen: 24
                          85.222.224.0/22 maxlen: 24
                          89.31.96.0/21 maxlen: 24
                          89.31.98.0/23 maxlen: 24
                          93.191.128.0/21 maxlen: 24
                          93.191.134.0/24 maxlen: 24
                          141.138.192.0/20 maxlen: 24
                          141.138.207.0/24 maxlen: 24
                          178.18.80.0/20 maxlen: 24
                          185.3.208.0/22 maxlen: 24
                          185.21.188.0/22 maxlen: 24
                          185.96.4.0/22 maxlen: 24
                          185.110.172.0/22 maxlen: 24
                          185.110.200.0/22 maxlen: 24
                          193.138.204.0/22 maxlen: 24
                          194.60.207.0/24 maxlen: 24
                          213.187.240.0/21 maxlen: 24
                          2a02:348::/32 maxlen: 32
                          2a02:348:3::/48 maxlen: 48
                          2a02:348:14::/48 maxlen: 48
                          2a02:348:15::/48 maxlen: 48
                          2a02:348:1e::/48 maxlen: 48
                          2a02:348:28::/48 maxlen: 48
                          2a02:348:29::/48 maxlen: 48
                          2a02:348:32::/48 maxlen: 48
                          2a02:348:33::/48 maxlen: 48
                          2a02:348:35::/48 maxlen: 48
                          2a02:348:36::/48 maxlen: 48
                          2a02:348:37::/48 maxlen: 48
                          2a02:348:38::/48 maxlen: 48
                          2a02:348:39::/48 maxlen: 48
                          2a02:348:3a::/48 maxlen: 48
                          2a02:348:3b::/48 maxlen: 48
                          2a02:348:3c::/48 maxlen: 48
                          2a02:348:46::/48 maxlen: 48
                          2a02:348:47::/48 maxlen: 48
                          2a02:348:4b::/48 maxlen: 48
                          2a02:348:4c::/48 maxlen: 48
                          2a02:348:4f::/48 maxlen: 48
                          2a02:348:50::/48 maxlen: 48
                          2a02:348:53::/48 maxlen: 48
                          2a02:348:54::/48 maxlen: 48
                          2a02:348:55::/48 maxlen: 48
                          2a02:348:56::/48 maxlen: 48
                          2a02:348:57::/48 maxlen: 48
                          2a02:348:58::/48 maxlen: 48
                          2a02:348:59::/48 maxlen: 48
                          2a02:348:5a::/48 maxlen: 48
                          2a02:348:5b::/48 maxlen: 48
                          2a02:348:5d::/48 maxlen: 48
                          2a02:348:5e::/48 maxlen: 48
                          2a02:348:5f::/48 maxlen: 48
                          2a02:348:60::/48 maxlen: 48
                          2a02:348:61::/48 maxlen: 48
                          2a02:348:62::/48 maxlen: 48
                          2a02:348:63::/48 maxlen: 48
                          2a02:348:6e::/48 maxlen: 48
                          2a02:348:6f::/48 maxlen: 48
                          2a02:348:70::/48 maxlen: 48
                          2a02:348:71::/48 maxlen: 48
                          2a02:348:73::/48 maxlen: 48
                          2a02:348:74::/48 maxlen: 48
                          2a02:348:75::/48 maxlen: 48
                          2a02:348:76::/48 maxlen: 48
                          2a02:348:77::/48 maxlen: 48
                          2a02:348:78::/48 maxlen: 48
                          2a02:348:79::/48 maxlen: 48
                          2a02:348:7b::/48 maxlen: 48
                          2a02:348:7c::/48 maxlen: 48
                          2a02:348:7d::/48 maxlen: 48
                          2a02:348:7e::/48 maxlen: 48
                          2a02:348:7f::/48 maxlen: 48
                          2a02:348:80::/48 maxlen: 48
                          2a02:348:81::/48 maxlen: 48
                          2a02:348:82::/48 maxlen: 48
                          2a02:348:83::/48 maxlen: 48
                          2a02:348:84::/48 maxlen: 48
                          2a02:348:85::/48 maxlen: 48
                          2a02:348:86::/48 maxlen: 48
                          2a02:348:87::/48 maxlen: 48
                          2a02:348:88::/48 maxlen: 48
                          2a02:348:89::/48 maxlen: 48
                          2a02:348:8a::/48 maxlen: 48
                          2a02:348:8b::/48 maxlen: 48
                          2a02:348:8c::/48 maxlen: 48
                          2a02:348:8d::/48 maxlen: 48
                          2a02:348:8e::/48 maxlen: 48
                          2a02:348:8f::/48 maxlen: 48
                          2a02:348:90::/48 maxlen: 48
                          2a02:348:91::/48 maxlen: 48
                          2a02:348:92::/48 maxlen: 48
                          2a02:348:94::/48 maxlen: 48
                          2a02:348:95::/48 maxlen: 48
                          2a02:348:96::/48 maxlen: 48
                          2a02:348:97::/48 maxlen: 48
                          2a02:348:98::/48 maxlen: 48
                          2a02:348:99::/48 maxlen: 48
                          2a02:348:9a::/48 maxlen: 48
                          2a02:348:9b::/48 maxlen: 48
                          2a02:348:9c::/48 maxlen: 48
                          2a02:348:a0::/48 maxlen: 48
                          2a02:348:a1::/48 maxlen: 48
                          2a02:348:a2::/48 maxlen: 48
                          2a02:348:a3::/48 maxlen: 48
                          2a02:348:ac::/48 maxlen: 48
                          2a02:348:b1::/48 maxlen: 48
                          2a02:348:b2::/48 maxlen: 48
                          2a02:348:b3::/48 maxlen: 48
                          2a02:348:b4::/48 maxlen: 48
                          2a02:348:b9::/48 maxlen: 48
                          2a02:348:ba::/48 maxlen: 48
                          2a02:348:bb::/48 maxlen: 48
                          2a02:348:bc::/48 maxlen: 48
                          2a02:348:c8::/48 maxlen: 48
                          2a02:348:5e6::/48 maxlen: 48
                          2a02:348:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:9f:7c:91:f0:65:16:d3:1a:b2:62:35:04:74:76:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Apr 17 07:21:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=57ba73b9dac1bcab725b129958ed31e9fe3fade4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:27:4c:72:a8:71:6f:3a:8c:40:ae:a7:aa:5d:
                    ea:4d:9b:9e:29:bc:3d:70:66:e3:2a:6c:08:13:52:
                    27:b9:92:91:59:1b:b5:0d:a0:75:0e:7e:cb:b0:29:
                    07:be:91:af:b8:aa:d3:94:bf:fd:d1:c7:65:a6:3d:
                    da:30:24:01:98:99:c2:5f:ad:12:68:d5:1c:71:63:
                    c1:90:80:f6:e2:fb:52:46:55:43:93:85:dc:d2:67:
                    b4:b7:00:46:88:2b:a4:41:3c:00:4a:63:88:6b:f7:
                    fd:5c:56:56:64:44:e6:07:26:d0:77:1f:2d:30:f1:
                    be:75:db:66:ee:1b:21:99:69:9b:8d:46:0d:f4:a2:
                    dc:94:e4:34:d1:19:81:d5:bc:18:58:f9:70:9b:9c:
                    ff:34:51:c2:39:95:98:2d:6a:33:3c:ee:ae:41:8b:
                    19:99:22:89:7c:f3:74:08:66:29:74:20:e3:88:ca:
                    a2:d5:6e:af:50:5a:69:5d:75:25:40:2a:d0:46:bf:
                    f0:36:73:78:e2:17:e7:a4:2b:dd:ae:35:f8:09:e9:
                    38:8e:9d:6e:69:e2:aa:c6:18:56:8b:71:64:72:89:
                    e2:70:74:37:90:48:33:2e:81:c1:1c:3a:65:fe:33:
                    dd:30:4e:18:8e:92:bf:81:fa:26:70:0a:0f:ff:b9:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BA:73:B9:DA:C1:BC:AB:72:5B:12:99:58:ED:31:E9:FE:3F:AD:E4
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/V7pzudrBvKtyWxKZWO0x6f4_reQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.3.96.0/21
                  37.34.48.0/21
                  37.230.96.0/21
                  79.170.88.0/21
                  81.4.84.0/22
                  83.96.200.0/21
                  83.96.212.0-83.96.223.255
                  83.96.236.0-83.96.247.255
                  83.96.252.0/22
                  85.10.176.0/22
                  85.10.184.0/21
                  85.222.224.0/21
                  89.31.96.0/21
                  93.191.128.0/21
                  141.138.192.0/20
                  178.18.80.0/20
                  185.3.208.0/22
                  185.21.188.0/22
                  185.96.4.0/22
                  185.110.172.0/22
                  185.110.200.0/22
                  193.138.204.0/22
                  194.60.207.0/24
                  213.187.240.0/21
                IPv6:
                  2a02:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:68:a1:a3:c1:84:0d:2c:78:20:ce:da:e4:6e:a2:e0:9c:97:
         1d:43:7a:da:64:06:e6:6c:07:d8:eb:41:a1:ca:95:bd:29:a7:
         ec:d5:d8:ef:f6:cc:44:a7:e4:72:19:bd:0b:ac:58:8b:43:d6:
         db:cb:2f:42:77:51:83:ff:4b:9a:35:a7:92:d6:59:08:25:d0:
         06:09:d0:bc:6c:3d:d0:b6:53:c5:36:71:3f:2f:62:60:8a:83:
         57:b0:ea:22:83:5f:10:6f:22:5c:80:15:1f:02:ee:c1:40:d4:
         2f:9c:3c:88:7b:fb:45:7f:9c:b6:25:d8:cf:26:96:22:25:06:
         98:f2:5d:cc:16:e7:90:70:63:9e:f7:6d:b2:18:c3:62:39:b8:
         db:99:ef:78:43:82:88:db:ea:92:e1:82:03:e9:44:ce:36:38:
         a6:2d:ba:3b:8c:83:a0:5d:41:bd:e2:60:a3:0a:4f:fa:0d:89:
         f9:5e:70:fb:63:bc:5c:24:c9:dc:d6:95:3d:a1:0c:8b:02:83:
         10:7b:52:b4:b0:0f:9e:cb:df:ff:2e:b9:1e:c8:a1:fd:59:c1:
         5f:d2:6a:1a:10:24:c1:89:1b:c2:a3:0b:9f:d5:ee:f4:a7:f0:
         0f:6f:0f:e6:89:29:c8:83:6b:76:e6:fe:7c:e7:bf:db:3c:71:
         22:e4:8d:fb
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgISAZZCn3yR8GUW0xqyYjUEdHb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3
NTJhZTcwHhcNMjUwNDE3MDcyMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2JhNzNiOWRhYzFiY2FiNzI1YjEyOTk1OGVkMzFlOWZlM2ZhZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ydMcqhxbzqMQK6nql3qTZueKbw9
cGbjKmwIE1InuZKRWRu1DaB1Dn7LsCkHvpGvuKrTlL/90cdlpj3aMCQBmJnCX60S
aNUccWPBkID24vtSRlVDk4Xc0me0twBGiCukQTwASmOIa/f9XFZWZETmBybQdx8t
MPG+ddtm7hshmWmbjUYN9KLclOQ00RmB1bwYWPlwm5z/NFHCOZWYLWozPO6uQYsZ
mSKJfPN0CGYpdCDjiMqi1W6vUFppXXUlQCrQRr/wNnN44hfnpCvdrjX4Cek4jp1u
aeKqxhhWi3FkconicHQ3kEgzLoHBHDpl/jPdME4YjpK/gfomcAoP/7kTiwIDAQAB
o4ICtzCCArMwHQYDVR0OBBYEFFe6c7nawbyrclsSmVjtMen+P63kMB8GA1UdIwQY
MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt
MmI5MjBiZGUzOTkwLzEvVjdwenVkckJ2S3R5V3hLWldPMHg2ZjRfcmVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw
LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHMBggrBgEFBQcBBwEB/wSBvDCBuTCBpwQCAAEwgaADBAMf
A2ADBAMlIjADBAMl5mADBANPqlgDBAJRBFQDBANTYMgwDAMEAlNg1AMEBVNgwDAM
AwQCU2DsAwQDU2DwAwQCU2D8AwQCVQqwAwQDVQq4AwQDVd7gAwQDWR9gAwQDXb+A
AwQEjYrAAwQEshJQAwQCuQPQAwQCuRW8AwQCuWAEAwQCuW6sAwQCuW7IAwQCwYrM
AwQAwjzPAwQD1bvwMA0EAgACMAcDBQAqAgNIMA0GCSqGSIb3DQEBCwUAA4IBAQAi
aKGjwYQNLHggztrkbqLgnJcdQ3raZAbmbAfY60GhypW9Kafs1djv9sxEp+RyGb0L
rFiLQ9bbyy9Cd1GD/0uaNaeS1lkIJdAGCdC8bD3QtlPFNnE/L2JgioNXsOoig18Q
byJcgBUfAu7BQNQvnDyIe/tFf5y2JdjPJpYiJQaY8l3MFueQcGOe922yGMNiObjb
me94Q4KI2+qS4YID6UTONjimLbo7jIOgXUG94mCjCk/6DYn5XnD7Y7xcJMnc1pU9
oQyLAoMQe1K0sA+ey9//LrkeyKH9WcFf0moaECTBiRvCowuf1e70p/APbw/miSnI
g2t25v5857/bPHEi5I37
-----END CERTIFICATE-----
Generated at Fri May 2 04:50:30 2025 by rpki-client