Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LcOvnUy8rJmuqX5QyuaKsfXWqls.roa
File:                     LcOvnUy8rJmuqX5QyuaKsfXWqls.roa (raw, json)
Hash identifier:          BelrW2u5B2kmR9gVcw+AGg5p8gxh8CJjxBoxIzfFoT8=
Subject key identifier:   2D:C3:AF:9D:4C:BC:AC:99:AE:A9:7E:50:CA:E6:8A:B1:F5:D6:AA:5B
Certificate issuer:       /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial:       0199B2EA92D3A38ABF5B37DEA974195E5824
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LcOvnUy8rJmuqX5QyuaKsfXWqls.roa
Signing time:             Sun 05 Oct 2025 05:49:01 +0000
ROA not before:           Sun 05 Oct 2025 05:49:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     202656
IP address blocks:        31.58.229.0/24 maxlen: 24
                          31.59.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:b2:ea:92:d3:a3:8a:bf:5b:37:de:a9:74:19:5e:58:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
        Validity
            Not Before: Oct  5 05:49:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=2dc3af9d4cbcac99aea97e50cae68ab1f5d6aa5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:69:f5:5f:08:d2:5e:db:7d:c6:fe:a6:a6:a9:
                    2f:0a:ab:91:b3:57:a0:64:db:af:b3:b3:9e:fe:cb:
                    c0:94:f9:c5:b4:1e:da:af:63:38:65:88:8c:d5:ec:
                    63:fc:74:23:88:4b:59:12:f7:18:f0:03:da:4b:96:
                    fd:8c:43:35:64:37:a4:20:fb:e1:75:05:57:c9:6d:
                    ad:fa:e4:3a:f4:39:3a:8f:27:c7:a6:1a:fc:d2:77:
                    58:53:ad:48:9a:8b:f0:89:ec:3b:24:a7:5a:53:0d:
                    e1:e1:c7:2a:30:24:b5:7c:5c:57:b4:8a:9e:48:c4:
                    f6:bd:00:69:a3:a9:da:40:37:1b:21:c5:48:28:ae:
                    19:e3:8d:05:aa:3c:86:f7:8a:fc:00:e2:0f:c1:16:
                    cd:7b:50:42:ba:77:3a:ea:1c:7e:a9:cd:cc:6e:cf:
                    c8:f2:91:12:29:db:49:c1:0c:c0:eb:4b:f6:64:8e:
                    4a:97:b1:1f:7a:a3:72:03:82:0f:04:41:c0:44:a7:
                    f3:36:8a:56:c1:1c:0d:16:7e:6f:4f:af:e2:2d:7d:
                    e1:c0:b0:a4:e0:a6:66:10:d2:db:c4:59:9d:3d:55:
                    0b:d8:35:4b:3f:ff:f7:e3:c8:fd:bb:44:b3:29:cd:
                    fb:4e:ea:1a:c3:90:80:b6:5e:28:1e:12:ab:d9:53:
                    3f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C3:AF:9D:4C:BC:AC:99:AE:A9:7E:50:CA:E6:8A:B1:F5:D6:AA:5B
            X509v3 Authority Key Identifier:
                keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/LcOvnUy8rJmuqX5QyuaKsfXWqls.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.58.229.0/24
                  31.59.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:2b:91:ca:63:9e:83:0e:a5:e2:a1:60:d4:f0:1f:86:f1:59:
         fb:fe:0b:d4:31:4e:4f:45:4a:54:b5:00:09:3f:51:b7:ae:e3:
         81:6a:a1:3d:01:3f:86:cd:8d:c3:64:38:6d:e9:bc:11:55:3c:
         6d:19:d2:33:d7:ed:2a:18:72:bb:ef:b7:60:13:05:4c:1d:1a:
         e4:89:fd:0e:ba:56:6e:94:b7:fe:96:d9:0b:af:c1:e6:b7:e3:
         55:d9:dd:b4:36:16:e2:24:7e:36:20:d6:0e:6b:c3:07:5d:5f:
         1f:33:c0:6a:4d:24:42:50:3b:cb:97:79:58:f7:5d:24:c5:d9:
         f2:a9:bf:53:1f:af:08:5b:66:26:f2:e3:ef:67:50:74:d1:56:
         85:3a:6c:97:86:46:fb:e7:3a:3a:bc:c2:05:16:4a:d6:5f:3d:
         12:e5:eb:9b:9b:67:42:a7:62:69:59:79:26:ce:53:3c:6f:43:
         79:7a:e7:ca:1f:96:26:ca:44:77:40:ee:4f:f2:36:b9:49:e5:
         22:a8:1f:95:d8:6e:8f:53:0c:35:6d:6a:db:59:cb:fe:b2:b0:
         40:dd:76:9c:ff:a1:ca:e2:1e:98:b0:c5:c5:2e:12:77:34:79:
         bd:90:cf:00:34:ce:d2:f1:35:5b:84:47:a0:be:b8:a3:c6:3b:
         fa:0c:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:16 2025 by rpki-client