Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/adv2I8ohQ_Aaz3Td1g442WIiJb8.roa
File:                     adv2I8ohQ_Aaz3Td1g442WIiJb8.roa (raw, json)
Hash identifier:          Dm02CNuasphr+tPivahhTRsXMIx045kC5rG2wb2fZlE=
Subject key identifier:   69:DB:F6:23:CA:21:43:F0:1A:CF:74:DD:D6:0E:38:D9:62:22:25:BF
Certificate issuer:       /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial:       01995C057059864AC5525E055AC68ABE6B3A
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/adv2I8ohQ_Aaz3Td1g442WIiJb8.roa
Signing time:             Thu 18 Sep 2025 08:51:23 +0000
ROA not before:           Thu 18 Sep 2025 08:51:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        84.247.113.0/24 maxlen: 24
                          89.149.18.0/24 maxlen: 24
                          89.149.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5c:05:70:59:86:4a:c5:52:5e:05:5a:c6:8a:be:6b:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
        Validity
            Not Before: Sep 18 08:51:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69dbf623ca2143f01acf74ddd60e38d9622225bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:7e:3c:92:b3:50:a7:ee:e4:f0:13:19:72:
                    5a:ec:08:c1:8b:5d:b9:ed:4e:14:e7:9e:f7:ed:5e:
                    d0:78:30:cc:c5:7b:4b:64:de:cf:d1:4d:f1:60:2d:
                    bb:ca:02:01:97:c1:87:68:b0:79:c5:2e:88:61:c7:
                    27:44:55:1f:33:df:02:a6:c5:c4:79:89:2f:cb:f8:
                    47:23:94:08:4a:3d:b2:8b:93:c4:81:39:13:27:0c:
                    19:77:60:ea:a8:ae:a0:9e:27:b6:7e:b4:d9:78:50:
                    90:42:17:dc:30:f3:53:52:31:99:fe:25:6a:78:d4:
                    16:76:8c:af:4f:50:42:74:c8:71:85:68:98:08:96:
                    c5:29:18:03:2b:cf:6f:9c:ac:a6:70:1b:bd:23:41:
                    03:60:fd:b8:41:d5:31:9c:95:65:4a:d2:8e:e8:89:
                    22:8c:13:a7:ce:f9:ae:97:4d:59:07:72:b6:f6:60:
                    30:16:f8:3c:a1:7f:c4:4e:6d:19:24:4c:61:30:b0:
                    91:e6:5d:2e:69:9d:87:d5:15:54:a7:cb:ed:ca:59:
                    c6:d9:aa:89:c9:2c:94:66:90:c0:e8:53:bf:03:89:
                    ad:ab:59:b9:9a:3d:10:1b:13:64:8b:fd:9f:19:99:
                    d1:36:38:5a:19:b5:fe:fc:fd:2a:4e:76:bc:56:dd:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DB:F6:23:CA:21:43:F0:1A:CF:74:DD:D6:0E:38:D9:62:22:25:BF
            X509v3 Authority Key Identifier:
                keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/adv2I8ohQ_Aaz3Td1g442WIiJb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.247.113.0/24
                  89.149.18.0/24
                  89.149.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:ee:20:f3:78:05:84:55:11:60:b1:8c:20:4c:d4:84:c2:dd:
         d2:1b:b3:13:8c:73:33:76:fc:02:e8:f4:d2:d6:3a:7d:3d:41:
         58:2e:cd:da:d7:08:25:60:0a:de:7c:13:e0:41:06:f4:b2:0b:
         5a:3c:e2:e4:7e:c8:52:4c:13:ea:21:4b:ce:23:d1:37:49:db:
         bb:65:b4:66:b3:9f:6b:41:d1:ba:2c:fc:41:71:a3:d7:d0:85:
         80:64:44:5a:12:25:46:0f:fd:e3:15:51:98:0c:c7:9a:d5:69:
         93:b2:a7:15:f8:0f:fe:bd:3e:24:fc:5c:84:d5:06:10:81:f5:
         11:e2:44:31:1f:5d:5e:8d:b2:a6:03:e9:3d:59:29:cb:6f:9b:
         4a:7e:75:58:ac:46:ba:18:de:97:f1:56:2b:4d:f7:79:84:29:
         df:2c:ea:ed:c3:3d:08:ff:db:b1:2d:0e:27:6a:1d:4b:4f:3d:
         4c:ca:5e:35:8e:99:12:76:ba:9c:a0:56:b8:b3:86:6f:9f:31:
         1a:3d:e0:27:75:1e:20:ef:6d:d9:f2:64:0c:09:d2:a3:73:63:
         5a:99:7f:5f:5f:c1:9c:74:a9:c6:4c:e5:2c:05:31:05:3d:85:
         54:9f:e6:cb:ae:2e:7e:ef:74:81:7e:af:19:ac:50:c7:e2:3b:
         0c:0b:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:41 2025 by rpki-client