Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/5cn0p1Xp5ZPZaa90bq79qNXrsnI.roa
File:                     5cn0p1Xp5ZPZaa90bq79qNXrsnI.roa (raw, json)
Hash identifier:          EnglXaAjxe664C/lxORZPZDINt97qB5xOai6KYLSDtI=
Subject key identifier:   E5:C9:F4:A7:55:E9:E5:93:D9:69:AF:74:6E:AE:FD:A8:D5:EB:B2:72
Certificate issuer:       /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial:       018CC26D4899C130C57CA32995C394174B31
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/5cn0p1Xp5ZPZaa90bq79qNXrsnI.roa
Signing time:             Mon 01 Jan 2024 00:29:50 +0000
ROA not before:           Mon 01 Jan 2024 00:29:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8495
IP address blocks:        45.135.106.0/24 maxlen: 24
                          2a0e:6b40:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:48:99:c1:30:c5:7c:a3:29:95:c3:94:17:4b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
        Validity
            Not Before: Jan  1 00:29:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e5c9f4a755e9e593d969af746eaefda8d5ebb272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:f8:b9:ef:54:72:be:09:f0:ae:52:0f:2a:
                    9a:da:68:4c:1d:f0:5b:bc:a5:c9:29:6b:f5:4e:1a:
                    d0:e6:89:2d:48:48:51:dc:0a:3a:41:06:a3:2e:82:
                    55:6a:47:3b:e2:ee:30:82:9c:17:52:be:6f:3b:69:
                    ff:de:74:88:a6:ed:6f:26:93:7a:13:ba:52:89:ea:
                    a8:5e:6d:a6:07:22:2a:7b:85:2c:ea:bc:a6:8f:66:
                    cc:eb:c2:f8:ed:12:c5:63:8b:67:8d:e3:37:f0:e3:
                    ec:dd:b2:84:e9:0d:6b:49:ed:d8:10:e6:0c:30:e3:
                    c8:82:fa:eb:fb:65:cf:07:19:a9:be:bb:55:05:07:
                    47:f5:fb:83:77:88:72:76:97:da:84:7d:94:46:d7:
                    3c:86:4b:2d:7f:f4:8f:9b:37:70:72:39:f9:93:89:
                    c5:0d:29:bb:fc:f7:01:8d:a4:c9:d5:05:79:cb:3f:
                    ec:bf:a8:4a:d1:7c:ea:23:34:3c:88:78:4d:88:23:
                    05:57:27:b4:ec:8d:70:a9:e3:09:7f:05:fe:19:02:
                    fb:a9:c3:2d:f5:9f:6a:de:b4:dc:c9:56:8e:53:d6:
                    c9:a7:ea:7f:9d:9b:16:20:4c:81:e1:a7:94:88:3a:
                    b6:8f:ac:73:9a:cd:a7:af:86:ea:16:f1:ce:44:ea:
                    b1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C9:F4:A7:55:E9:E5:93:D9:69:AF:74:6E:AE:FD:A8:D5:EB:B2:72
            X509v3 Authority Key Identifier:
                keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/5cn0p1Xp5ZPZaa90bq79qNXrsnI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.106.0/24
                IPv6:
                  2a0e:6b40:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:c3:a1:a0:17:86:80:99:e8:60:87:33:5c:d3:0b:ef:ed:04:
         35:b6:27:bc:59:6a:ef:68:1b:91:ca:09:6d:15:7f:b2:8f:d5:
         a9:91:f4:bc:75:4f:1b:78:73:66:89:fa:b7:91:57:94:26:3b:
         0d:07:3c:2a:d8:81:c2:00:48:cb:75:88:9a:a3:4f:2e:11:48:
         0a:db:02:af:44:42:18:70:a0:a6:16:2b:68:2e:3e:7a:84:e7:
         3a:6f:9d:5e:73:dd:fe:80:51:b2:7c:2f:de:0f:bc:98:9c:7e:
         5b:bc:13:8a:cd:0b:fd:0f:57:10:82:0f:a4:0e:1f:d4:29:53:
         48:3f:0b:75:fb:3f:06:f4:d0:35:cf:b2:df:35:c2:2f:57:69:
         ba:40:b7:c0:a0:54:73:56:cc:69:bc:5b:73:2f:39:ee:bc:5c:
         25:fb:57:1d:84:a6:c0:b7:c3:d0:40:da:2d:2a:53:e4:d5:46:
         5e:34:17:b5:8f:72:66:ce:21:2b:7a:a9:87:98:0c:d7:ed:bb:
         6d:ba:49:03:2c:15:c9:5f:fb:9d:73:ef:4a:96:22:34:44:02:
         af:f8:60:45:08:26:b6:9d:b7:3a:9c:b9:84:d9:7c:fa:30:ad:
         4e:35:43:9b:c7:12:f2:dc:ca:e1:ed:fc:a4:9d:c4:e3:06:3a:
         39:81:03:76
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzCbUiZwTDFfKMplcOUF0sxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjY1ZDZjZjI2ZDkzNzQ4NGRiYjQ2MzM3NDNlMDY1N2Vj
Y2RjNWUwHhcNMjQwMTAxMDAyOTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWM5ZjRhNzU1ZTllNTkzZDk2OWFmNzQ2ZWFlZmRhOGQ1ZWJiMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJP4ue9Ucr4J8K5SDyqa2mhMHfBb
vKXJKWv1ThrQ5oktSEhR3Ao6QQajLoJVakc74u4wgpwXUr5vO2n/3nSIpu1vJpN6
E7pSieqoXm2mByIqe4Us6rymj2bM68L47RLFY4tnjeM38OPs3bKE6Q1rSe3YEOYM
MOPIgvrr+2XPBxmpvrtVBQdH9fuDd4hydpfahH2URtc8hkstf/SPmzdwcjn5k4nF
DSm7/PcBjaTJ1QV5yz/sv6hK0XzqIzQ8iHhNiCMFVye07I1wqeMJfwX+GQL7qcMt
9Z9q3rTcyVaOU9bJp+p/nZsWIEyB4aeUiDq2j6xzms2nr4bqFvHOROqxnQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOXJ9KdV6eWT2WmvdG6u/ajV67JyMB8GA1UdIwQY
MBaAFIFmXWzybZN0hNu0YzdD4GV+zNxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUt
YzU2ZjA1ZGEzZDI1LzEvNWNuMHAxWHA1WlBaYWE5MGJxNzlxTlhyc25JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8wMGY2NmItZmU4My00Y2NkLTgyZWUtYzU2ZjA1ZGEzZDI1
LzEvZ1daZGJQSnRrM1NFMjdSak4wUGdaWDdNM0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALYdqMA8E
AgACMAkDBwAqDmtAACAwDQYJKoZIhvcNAQELBQADggEBAB7DoaAXhoCZ6GCHM1zT
C+/tBDW2J7xZau9oG5HKCW0Vf7KP1amR9Lx1Txt4c2aJ+reRV5QmOw0HPCrYgcIA
SMt1iJqjTy4RSArbAq9EQhhwoKYWK2guPnqE5zpvnV5z3f6AUbJ8L94PvJicflu8
E4rNC/0PVxCCD6QOH9QpU0g/C3X7Pwb00DXPst81wi9XabpAt8CgVHNWzGm8W3Mv
Oe68XCX7Vx2EpsC3w9BA2i0qU+TVRl40F7WPcmbOISt6qYeYDNftu226SQMsFclf
+51z70qWIjREAq/4YEUIJradtzqcuYTZfPowrU41Q5vHEvLcyuHt/KSdxOMGOjmB
A3Y=
-----END CERTIFICATE-----