Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/c_1TxPrlsipMRubH5nm6kOf2sBM.roa
File:                     c_1TxPrlsipMRubH5nm6kOf2sBM.roa (raw, json)
Hash identifier:          EhhhkG36DS1/j7X90u2vh14PFuHB0DMsOYvz2SZUQ+E=
Subject key identifier:   73:FD:53:C4:FA:E5:B2:2A:4C:46:E6:C7:E6:79:BA:90:E7:F6:B0:13
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0196BAE2D7BADCFCCEA4A9935671F882B62B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/c_1TxPrlsipMRubH5nm6kOf2sBM.roa
Signing time:             Sat 10 May 2025 15:49:10 +0000
ROA not before:           Sat 10 May 2025 15:49:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     30633
IP address blocks:        45.85.160.0/24 maxlen: 24
                          45.86.247.0/24 maxlen: 24
                          45.128.77.0/24 maxlen: 24
                          45.129.127.0/24 maxlen: 24
                          45.135.37.0/24 maxlen: 24
                          45.157.37.0/24 maxlen: 24
                          80.253.250.0/24 maxlen: 24
                          80.253.251.0/24 maxlen: 24
                          103.139.50.0/24 maxlen: 24
                          185.164.59.0/24 maxlen: 24
                          193.27.23.0/24 maxlen: 24
                          193.164.199.0/24 maxlen: 24
                          195.66.24.0/24 maxlen: 24
                          195.66.25.0/24 maxlen: 24
                          2a06:1180:1c5::/48 maxlen: 48
                          2a06:1181:100::/48 maxlen: 48
                          2a06:1184:33::/48 maxlen: 48
                          2a06:35c2::/32 maxlen: 32
                          2a07:bb40::/29 maxlen: 29
                          2a09:17c4::/32 maxlen: 32
                          2a0a:2d04:100::/48 maxlen: 48
                          2a0a:2d06:33::/48 maxlen: 48
                          2a0c:7886:b::/48 maxlen: 48
                          2a0c:7886:33::/48 maxlen: 48
                          2a0e:15c7:88::/48 maxlen: 48
                          2a0e:1a80:2541::/48 maxlen: 48
                          2a0e:1a81::/32 maxlen: 32
                          2a0e:1a83:66::/48 maxlen: 48
                          2a0e:c780::/32 maxlen: 32
                          2a0e:c781::/32 maxlen: 32
                          2a0e:f201:1::/48 maxlen: 48
                          2a0f:1206:44::/48 maxlen: 48
                          2a0f:1583::/32 maxlen: 32
                          2a0f:1e00:123::/48 maxlen: 48
                          2a0f:1e00:456::/48 maxlen: 48
                          2a0f:1e00:987::/48 maxlen: 48
                          2a0f:1e00:abc::/48 maxlen: 48
                          2a0f:1e00:def9::/48 maxlen: 48
                          2a0f:1e01:1::/48 maxlen: 48
                          2a0f:1e81:2::/48 maxlen: 48
                          2a0f:1e81:1293::/48 maxlen: 48
                          2a0f:1e81:4319::/48 maxlen: 48
                          2a0f:1e81:92e8::/48 maxlen: 48
                          2a0f:1e81:a3d0::/48 maxlen: 48
                          2a0f:1e81:cdae::/48 maxlen: 48
                          2a0f:2e80::/29 maxlen: 29
                          2a0f:3045::/32 maxlen: 32
                          2a0f:3d84::/32 maxlen: 32
                          2a0f:7d02:1::/48 maxlen: 48
                          2a0f:7d02:100::/48 maxlen: 48
                          2a0f:7d06:fc9d::/48 maxlen: 48
                          2a0f:df44::/32 maxlen: 32
                          2a0f:e1c6::/32 maxlen: 32
                          2a0f:e6c5::/32 maxlen: 32
                          2a0f:e7c6:55::/48 maxlen: 48
                          2a0f:e844:8642::/48 maxlen: 48
                          2a10:30c0::/29 maxlen: 29
                          2a10:32c0::/29 maxlen: 29
                          2a10:32c0::/32 maxlen: 32
                          2a10:32c1::/32 maxlen: 32
                          2a10:32c2::/32 maxlen: 32
                          2a10:32c4::/32 maxlen: 32
                          2a10:32c5::/32 maxlen: 32
                          2a10:32c6::/32 maxlen: 32
                          2a10:32c7::/32 maxlen: 32
                          2a10:35c0::/29 maxlen: 29
                          2a10:35c0::/32 maxlen: 32
                          2a10:35c1::/32 maxlen: 32
                          2a10:35c2::/32 maxlen: 32
                          2a10:35c3::/32 maxlen: 32
                          2a10:35c4::/32 maxlen: 32
                          2a10:35c5::/32 maxlen: 32
                          2a10:35c6::/32 maxlen: 32
                          2a10:35c7::/32 maxlen: 32
                          2a10:36c0::/29 maxlen: 29
                          2a10:3740::/29 maxlen: 29
                          2a10:37c0::/29 maxlen: 29
                          2a10:4a00::/29 maxlen: 29
                          2a10:5400::/29 maxlen: 29
                          2a10:6400::/29 maxlen: 29
                          2a10:6b00::/29 maxlen: 29
                          2a10:6d40::/29 maxlen: 29
                          2a10:7100::/29 maxlen: 29
                          2a10:7500::/29 maxlen: 29
                          2a10:7d00::/29 maxlen: 29
                          2a11:fd80::/29 maxlen: 29
                          2a12:ac40::/32 maxlen: 32
                          2a12:ac41::/32 maxlen: 32
                          2a12:ecc0:271::/48 maxlen: 48
                          2a12:ecc0:3e2::/48 maxlen: 48
                          2a12:ecc4:2213::/48 maxlen: 48
                          2a12:f540::/29 maxlen: 29
                          2a13:18c0:1::/48 maxlen: 48
                          2a13:18c4::/32 maxlen: 32
                          2a13:18c6:55::/48 maxlen: 48
                          2a13:18c6:c9a1::/48 maxlen: 48
                          2a13:8c84::/32 maxlen: 32
                          2a13:9280::/32 maxlen: 32
                          2a13:c904::/32 maxlen: 32
                          2a13:cf01::/32 maxlen: 32
                          2a13:cf03::/32 maxlen: 32
                          2a13:cf06::/32 maxlen: 32
                          2a13:df00::/29 maxlen: 29
                          2a13:e100:1312::/48 maxlen: 48
                          2a13:e101:2::/48 maxlen: 48
                          2a13:e104::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:e2:d7:ba:dc:fc:ce:a4:a9:93:56:71:f8:82:b6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: May 10 15:49:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=73fd53c4fae5b22a4c46e6c7e679ba90e7f6b013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:1c:d4:ea:af:31:69:ba:79:70:29:0a:4d:
                    c7:a7:4e:55:ce:43:c8:b0:0d:39:af:af:c2:14:c9:
                    96:75:b0:fd:42:20:bb:02:5d:21:7e:85:0b:95:f5:
                    eb:5b:ec:78:84:db:26:80:ee:d7:b0:7f:dc:69:49:
                    af:4e:e7:b6:f3:df:a0:62:b5:54:cb:ac:2f:f2:7c:
                    85:7c:31:e2:3e:1a:26:00:fb:21:ca:f9:0f:f1:eb:
                    aa:42:c5:34:24:22:6a:07:3c:7a:7c:1d:56:03:11:
                    06:4b:1d:b8:53:fe:19:53:c3:2d:36:d2:fe:fc:60:
                    13:24:3e:3e:71:de:8c:c2:97:76:62:24:41:88:69:
                    37:d1:35:7c:be:bb:d6:d4:0c:a4:a4:64:9b:31:99:
                    0f:ef:09:0e:50:ee:e3:fb:a6:0b:0d:28:9e:69:21:
                    92:e8:fc:33:2b:cc:93:59:2e:42:5a:83:00:91:35:
                    70:b9:75:9b:3c:c4:8d:2e:3e:54:06:07:79:7a:dc:
                    a0:66:93:f1:9c:af:59:f6:21:af:6a:91:4f:8f:41:
                    73:1e:a1:d3:68:91:6f:02:e6:fa:a2:be:f4:eb:ac:
                    e4:32:c6:9a:64:e4:30:c3:c4:d4:8d:fe:4d:08:eb:
                    13:2d:05:e2:76:0d:b3:5b:8d:b4:26:b6:32:ec:02:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FD:53:C4:FA:E5:B2:2A:4C:46:E6:C7:E6:79:BA:90:E7:F6:B0:13
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/c_1TxPrlsipMRubH5nm6kOf2sBM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.85.160.0/24
                  45.86.247.0/24
                  45.128.77.0/24
                  45.129.127.0/24
                  45.135.37.0/24
                  45.157.37.0/24
                  80.253.250.0/23
                  103.139.50.0/24
                  185.164.59.0/24
                  193.27.23.0/24
                  193.164.199.0/24
                  195.66.24.0/23
                IPv6:
                  2a06:1180:1c5::/48
                  2a06:1181:100::/48
                  2a06:1184:33::/48
                  2a06:35c2::/32
                  2a07:bb40::/29
                  2a09:17c4::/32
                  2a0a:2d04:100::/48
                  2a0a:2d06:33::/48
                  2a0c:7886:b::/48
                  2a0c:7886:33::/48
                  2a0e:15c7:88::/48
                  2a0e:1a80:2541::/48
                  2a0e:1a81::/32
                  2a0e:1a83:66::/48
                  2a0e:c780::/31
                  2a0e:f201:1::/48
                  2a0f:1206:44::/48
                  2a0f:1583::/32
                  2a0f:1e00:123::/48
                  2a0f:1e00:456::/48
                  2a0f:1e00:987::/48
                  2a0f:1e00:abc::/48
                  2a0f:1e00:def9::/48
                  2a0f:1e01:1::/48
                  2a0f:1e81:2::/48
                  2a0f:1e81:1293::/48
                  2a0f:1e81:4319::/48
                  2a0f:1e81:92e8::/48
                  2a0f:1e81:a3d0::/48
                  2a0f:1e81:cdae::/48
                  2a0f:2e80::/29
                  2a0f:3045::/32
                  2a0f:3d84::/32
                  2a0f:7d02:1::/48
                  2a0f:7d02:100::/48
                  2a0f:7d06:fc9d::/48
                  2a0f:df44::/32
                  2a0f:e1c6::/32
                  2a0f:e6c5::/32
                  2a0f:e7c6:55::/48
                  2a0f:e844:8642::/48
                  2a10:30c0::/29
                  2a10:32c0::/29
                  2a10:35c0::/29
                  2a10:36c0::/29
                  2a10:3740::/29
                  2a10:37c0::/29
                  2a10:4a00::/29
                  2a10:5400::/29
                  2a10:6400::/29
                  2a10:6b00::/29
                  2a10:6d40::/29
                  2a10:7100::/29
                  2a10:7500::/29
                  2a10:7d00::/29
                  2a11:fd80::/29
                  2a12:ac40::/31
                  2a12:ecc0:271::/48
                  2a12:ecc0:3e2::/48
                  2a12:ecc4:2213::/48
                  2a12:f540::/29
                  2a13:18c0:1::/48
                  2a13:18c4::/32
                  2a13:18c6:55::/48
                  2a13:18c6:c9a1::/48
                  2a13:8c84::/32
                  2a13:9280::/32
                  2a13:c904::/32
                  2a13:cf01::/32
                  2a13:cf03::/32
                  2a13:cf06::/32
                  2a13:df00::/29
                  2a13:e100:1312::/48
                  2a13:e101:2::/48
                  2a13:e104::/32

    Signature Algorithm: sha256WithRSAEncryption
         64:c7:1a:2c:6d:b4:0e:ec:85:2c:91:0e:a2:eb:7d:ab:9d:77:
         3f:af:ce:bc:1e:f3:6a:76:39:7e:0f:89:0e:8f:27:ab:2f:a2:
         4e:45:f5:aa:ae:5b:4a:ea:5a:a5:62:75:16:dc:6a:9c:dd:11:
         c6:27:40:6a:92:37:41:3e:ac:b8:23:ee:8a:7b:a4:02:1d:d0:
         10:26:5b:31:fc:04:c4:b8:6a:44:e3:42:ac:d4:81:49:cf:2a:
         40:56:18:83:0b:22:23:2c:ac:3b:80:16:50:23:89:e8:bc:ed:
         0b:3f:2a:f2:6b:67:ca:fb:f7:07:a6:3b:a2:98:96:2c:d8:96:
         88:66:a2:08:40:ef:d9:e0:af:e6:b7:db:b8:b5:7e:cf:82:50:
         e0:20:9c:0f:21:49:e4:90:dd:24:17:fe:11:6f:3e:cc:05:72:
         08:86:85:17:be:17:22:b7:9b:21:93:fa:a1:fe:5d:c7:ab:0f:
         73:e6:64:a2:4a:ca:0f:ea:0e:b8:4f:00:d6:94:a9:32:68:7e:
         71:14:78:28:e1:37:35:cd:66:a8:2c:04:1c:b1:d4:9e:3a:13:
         78:30:d1:d0:ff:53:e9:bd:50:7d:76:da:21:dc:f9:cf:ac:df:
         11:a1:f6:b3:28:8b:ba:c6:6f:02:7e:48:a5:45:18:76:6e:3d:
         38:5e:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:28:39 2025 by rpki-client