Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/46uAO_7C_hVEQvZIAiRuYmh3QSo.roa
File:                     46uAO_7C_hVEQvZIAiRuYmh3QSo.roa (raw, json)
Hash identifier:          MFUM6s6M1weGqv2Xn6LhhIWodXnFo4p8KwKjPUo7OXo=
Subject key identifier:   E3:AB:80:3B:FE:C2:FE:15:44:42:F6:48:02:24:6E:62:68:77:41:2A
Certificate issuer:       /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial:       0197A5149A71D75C020DF9A89A35530E84F8
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/46uAO_7C_hVEQvZIAiRuYmh3QSo.roa
Signing time:             Wed 25 Jun 2025 03:14:40 +0000
ROA not before:           Wed 25 Jun 2025 03:14:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     210976
IP address blocks:        5.129.208.0/24 maxlen: 24
                          5.129.209.0/24 maxlen: 24
                          5.129.210.0/24 maxlen: 24
                          5.129.212.0/24 maxlen: 24
                          5.129.213.0/24 maxlen: 24
                          5.129.214.0/24 maxlen: 24
                          5.129.216.0/24 maxlen: 24
                          5.129.217.0/24 maxlen: 24
                          5.129.218.0/24 maxlen: 24
                          5.129.219.0/24 maxlen: 24
                          5.129.224.0/24 maxlen: 24
                          5.129.225.0/24 maxlen: 24
                          5.129.226.0/24 maxlen: 24
                          5.129.227.0/24 maxlen: 24
                          5.129.228.0/24 maxlen: 24
                          5.129.229.0/24 maxlen: 24
                          5.129.230.0/24 maxlen: 24
                          5.129.231.0/24 maxlen: 24
                          5.129.232.0/24 maxlen: 24
                          5.129.233.0/24 maxlen: 24
                          5.129.234.0/24 maxlen: 24
                          5.129.235.0/24 maxlen: 24
                          5.129.236.0/24 maxlen: 24
                          5.129.237.0/24 maxlen: 24
                          5.129.238.0/24 maxlen: 24
                          5.129.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:a5:14:9a:71:d7:5c:02:0d:f9:a8:9a:35:53:0e:84:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
        Validity
            Not Before: Jun 25 03:14:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=e3ab803bfec2fe154442f64802246e626877412a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:12:7e:87:8a:80:04:fe:6a:2e:11:05:a5:d8:
                    3b:3c:d2:d7:fa:f5:76:dd:bf:4c:9d:04:0d:94:97:
                    35:33:26:42:82:1e:44:6a:86:33:73:90:57:96:94:
                    e6:f8:10:58:84:f4:ab:59:42:3b:4f:26:35:f8:35:
                    df:32:03:39:3b:38:d0:d3:d5:71:4c:1e:77:24:7a:
                    6c:7a:c5:ea:7f:4c:cd:ae:b5:b4:3e:cc:ed:ed:0e:
                    e7:ad:f3:1b:82:97:9e:d5:d0:7d:c4:34:72:77:51:
                    d3:2e:3b:c3:77:ac:8a:a1:85:56:ea:58:cb:a9:af:
                    8f:89:c6:89:19:2f:c8:88:f0:98:03:a3:49:ba:aa:
                    c0:68:8f:ef:7b:5d:fa:f1:02:bb:72:ab:53:7c:55:
                    62:bb:19:f3:2e:ed:a9:3e:b8:cf:90:02:18:7b:ab:
                    c1:23:17:81:20:d7:1c:40:9c:e4:cf:93:53:47:28:
                    81:f3:b2:3a:fc:cf:c4:8c:67:da:06:02:39:e3:36:
                    29:41:0f:71:20:70:15:73:2a:32:da:91:c5:b9:69:
                    f5:0a:31:55:6b:11:b2:83:8a:45:4b:5f:87:1d:19:
                    f6:1d:5a:c6:9f:b6:4d:d7:ac:b6:2b:cc:9f:f3:da:
                    38:42:1b:66:1b:75:2a:db:04:b4:72:ae:f8:6e:33:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AB:80:3B:FE:C2:FE:15:44:42:F6:48:02:24:6E:62:68:77:41:2A
            X509v3 Authority Key Identifier:
                keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/46uAO_7C_hVEQvZIAiRuYmh3QSo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.129.208.0-5.129.210.255
                  5.129.212.0-5.129.214.255
                  5.129.216.0/22
                  5.129.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:70:47:c4:9c:7c:5b:f6:db:cb:64:d7:04:ca:97:0e:dc:79:
         1e:b4:fa:9d:72:2c:e2:e2:3d:bd:96:33:ca:6b:d8:10:21:01:
         e2:7f:a9:57:20:e6:7a:56:de:76:83:96:07:99:8c:54:c1:08:
         1f:8d:7c:9b:fc:48:ee:6d:63:58:dd:55:43:f9:8b:0f:03:02:
         0a:c1:d4:51:36:7a:e4:a9:75:ae:90:86:82:9e:76:7b:da:f2:
         ed:b4:f8:6b:19:a1:eb:23:44:ff:73:43:b0:ff:ee:66:cd:f0:
         55:2c:d3:a1:65:ad:fe:a4:09:d5:63:ba:27:a6:a3:30:52:a5:
         17:c3:44:81:db:97:0b:47:5d:fe:f5:a5:c2:8b:42:a4:59:57:
         5e:d0:33:75:4a:79:ba:c2:21:35:92:dc:4c:ce:9f:a3:76:84:
         d2:bc:47:97:b0:8c:f0:db:66:95:da:93:1a:8e:5d:2f:31:13:
         89:5b:b2:25:f3:ec:59:a9:8b:26:c9:be:92:c5:ca:93:b3:5c:
         94:32:aa:13:e7:11:ed:b5:68:ac:30:5d:fe:fe:e8:ee:e1:89:
         c5:dc:4e:ef:7f:18:18:38:59:5c:fa:f3:96:b5:ee:95:40:26:
         1f:5e:e9:37:6d:09:52:6e:ba:0e:c5:6a:2d:8f:ff:fe:f7:39:
         b5:f6:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:40:08 2025 by rpki-client