Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273508.roa
File:                     AS273508.roa (raw, json)
Hash identifier:          7jUc+1LFh8tTKz/7VIwbFJckj+Gw/KJiq4sdmR4VCkI=
Subject key identifier:   BB:C6:59:1F:15:7E:A8:8A:E2:88:CF:E1:B7:98:08:1C:B9:00:30:79
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       263B911955D23A2990782F13D474A4F2B663EDD8
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273508.roa
Signing time:             Fri 06 Jun 2025 17:54:08 +0000
ROA not before:           Fri 06 Jun 2025 17:49:08 +0000
ROA not after:            Fri 05 Jun 2026 17:54:08 +0000
asID:                     273508
IP address blocks:        92.112.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3b:91:19:55:d2:3a:29:90:78:2f:13:d4:74:a4:f2:b6:63:ed:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: Jun  6 17:49:08 2025 GMT
            Not After : Jun  5 17:54:08 2026 GMT
        Subject: CN=BBC6591F157EA88AE288CFE1B798081CB9003079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:f2:41:78:0a:1d:ba:5b:4c:54:27:11:a0:
                    3f:0a:3a:cf:f7:41:1a:03:47:fb:55:d5:2a:fb:18:
                    da:49:fb:bc:33:2c:a0:ed:a3:e4:8b:69:e0:e8:bc:
                    de:90:c6:af:f4:16:7d:a9:de:9d:c5:a8:33:ec:e0:
                    4d:9f:b6:47:6f:4b:60:cb:28:8f:e2:c6:61:7d:ea:
                    2d:c1:5c:2e:fb:d2:bd:61:bb:99:b8:c1:01:8b:28:
                    c8:04:b8:30:8f:c8:40:8b:29:37:ea:b8:1d:24:f1:
                    0b:57:a8:e2:e7:76:06:6c:ea:9e:6c:51:99:1f:d8:
                    fe:76:94:85:19:4b:0d:0c:5c:5f:f6:d0:cc:6e:6b:
                    0a:d1:dc:ae:a3:e4:49:05:12:a4:5d:c5:ec:9c:19:
                    c7:b1:9f:11:e2:fa:af:0d:c7:c5:fe:57:52:81:09:
                    8a:73:d2:9c:01:ec:09:16:1f:09:9f:21:72:47:21:
                    11:b6:0a:0b:bf:53:87:d8:78:3a:96:05:2b:66:3d:
                    4d:45:cd:e0:e8:65:d9:f5:8b:da:7d:d0:52:c7:7f:
                    69:99:3e:79:6b:3d:49:81:73:75:41:b1:5f:7e:e7:
                    34:bb:5a:9c:db:bb:15:af:9b:d8:18:81:4a:26:db:
                    89:c9:45:a9:c7:ef:a7:57:7c:72:4c:d1:ad:91:42:
                    1b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C6:59:1F:15:7E:A8:8A:E2:88:CF:E1:B7:98:08:1C:B9:00:30:79
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS273508.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.112.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:4c:87:6f:2c:9f:09:fa:9f:64:64:0b:b3:a2:9d:9c:6e:
         5f:d6:67:9f:89:0f:6c:97:c3:c8:21:63:db:1f:46:b4:4b:6b:
         94:df:57:73:52:89:d2:d1:49:23:ab:48:9f:b2:14:b0:2a:08:
         dc:58:69:60:0a:94:41:cc:7b:2a:29:75:c9:24:d3:ad:87:4e:
         cb:53:5d:38:b5:b9:5b:4c:97:ba:26:15:6f:c1:df:6c:de:91:
         7f:a8:e1:45:f4:f3:3c:ff:a8:5a:00:d0:0c:c7:6a:b5:03:cb:
         4e:7d:8b:67:7e:d8:d8:fb:a6:67:d2:03:fc:84:37:4d:30:2a:
         c3:e8:22:5f:bb:5e:46:0d:0e:f6:72:fd:23:2b:06:37:22:7c:
         0e:9f:ba:c2:93:50:0a:8c:48:2c:95:d4:9b:cd:98:eb:81:80:
         9c:a7:e6:be:c9:fe:f9:49:78:60:80:69:81:c6:2a:c7:44:94:
         05:ed:d5:0c:b1:e9:e2:af:d2:50:b5:66:ac:a4:24:93:73:b6:
         19:41:c2:5e:ca:20:f1:21:fb:fb:7f:c0:7a:2f:e5:b9:6b:c2:
         5a:4f:f4:c3:51:6c:6f:c5:a2:4b:65:0b:cb:dd:fe:bd:58:26:
         6b:a2:db:d8:83:8b:d1:55:bd:ee:62:81:89:0e:29:61:bf:25:
         fe:7b:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:02:44 2025 by rpki-client