Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1vnm_kEik2dB3-1qf2aCGK1KUrg.roa
File:                     1vnm_kEik2dB3-1qf2aCGK1KUrg.roa (raw, json)
Hash identifier:          6FuXUSgDq/YjhS84Sn5sPhmpbKP0Hq7SG/XFd8FaBoM=
Subject key identifier:   D6:F9:E6:FE:41:22:93:67:41:DF:ED:6A:7F:66:82:18:AD:4A:52:B8
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0199CEE2909C79635D8A5D547E346477BB27
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1vnm_kEik2dB3-1qf2aCGK1KUrg.roa
Signing time:             Fri 10 Oct 2025 16:09:38 +0000
ROA not before:           Fri 10 Oct 2025 16:09:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199432
IP address blocks:        163.5.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:55:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ce:e2:90:9c:79:63:5d:8a:5d:54:7e:34:64:77:bb:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Oct 10 16:09:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=d6f9e6fe4122936741dfed6a7f668218ad4a52b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6c:66:89:c3:df:b4:29:10:54:50:63:7e:be:
                    d7:22:35:1d:36:2a:75:25:5e:6b:82:b8:44:00:71:
                    48:cc:7f:36:a1:0f:db:2d:c2:80:c2:c4:0d:58:4c:
                    23:95:4d:cb:e0:2d:c5:13:52:e4:df:9c:07:99:56:
                    26:8e:9c:2a:b4:3d:43:10:f9:b6:cf:7a:e9:c4:a4:
                    f6:7c:4a:32:94:7b:91:b2:a9:b5:f9:30:40:c3:1e:
                    b5:61:93:2b:ec:b8:43:c6:39:33:9b:13:3a:aa:a7:
                    e5:cb:cc:2a:6e:3e:5c:cb:37:7c:fa:ec:71:a9:e1:
                    be:a7:4c:34:c7:04:66:dc:ad:01:36:91:b7:8b:a8:
                    b7:98:55:cb:62:17:e3:7a:1a:d2:3f:69:60:fb:28:
                    ba:05:2b:47:4c:61:6c:05:36:91:85:a8:cb:e7:25:
                    6d:ea:4b:c6:b6:32:f2:da:9b:5e:3c:51:85:c8:7b:
                    fd:d0:84:6a:d2:ba:26:17:a1:17:a3:3f:61:01:f9:
                    2f:c7:30:65:32:03:c5:62:60:a4:77:f2:35:6f:fb:
                    d7:e6:0d:91:0e:19:0d:fa:45:4a:ef:44:e9:b3:7b:
                    a6:cc:fd:7a:dc:bc:52:8f:f4:4a:a4:f3:68:ee:4c:
                    f5:16:20:86:c9:5f:dc:ce:3a:55:3d:a1:8b:7d:a4:
                    61:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F9:E6:FE:41:22:93:67:41:DF:ED:6A:7F:66:82:18:AD:4A:52:B8
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1vnm_kEik2dB3-1qf2aCGK1KUrg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:1a:dd:03:6e:47:a4:59:b3:69:4a:82:ea:f4:06:ed:23:
         54:00:ae:e2:4c:7f:6b:2c:89:92:1d:71:27:ab:3e:f6:8a:ee:
         5d:a7:dc:2e:81:2a:b5:82:b3:dd:0f:25:d1:d2:34:11:79:21:
         f2:44:31:f7:24:7f:f9:5b:78:87:5c:64:95:d2:2d:8d:42:41:
         26:c5:19:63:fb:ad:61:e7:ee:86:bf:f2:a8:75:00:ab:4d:44:
         f1:8d:ff:a2:33:f6:2d:d2:29:54:41:72:5f:f0:03:49:fc:e5:
         77:a3:a4:c2:8d:3f:a3:f2:65:b2:9a:b6:e2:ad:5a:24:f3:50:
         bf:8f:3f:aa:50:a7:7d:44:4d:49:93:c9:b3:a5:c6:55:ea:c9:
         e4:ce:b9:13:f3:82:ef:3f:bc:1c:56:6a:81:8f:0c:c6:3e:ad:
         a9:77:be:e8:67:40:5e:b6:63:5a:54:7b:bd:17:3b:86:0e:1d:
         c8:c5:11:e6:6e:6f:cd:b5:c8:94:ec:17:eb:63:12:bc:ef:8c:
         55:fb:0c:a9:2a:c1:63:ab:bd:19:d8:af:88:9f:6e:49:23:b4:
         ff:72:96:23:c7:cc:a9:18:61:68:aa:27:67:24:e2:73:50:91:
         13:9e:08:c0:81:6d:7c:8d:52:f0:5f:07:ea:b6:42:d5:c1:73:
         d8:8c:ea:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:50:53 2025 by rpki-client