Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/DyMeztOuz35EefXWjOGbT5Us9Gw.roa
File:                     DyMeztOuz35EefXWjOGbT5Us9Gw.roa (raw, json)
Hash identifier:          S/vyrUZ0McQN3oB0fYukOqw/h1zKmF9l3cxllVeCCIQ=
Subject key identifier:   0F:23:1E:CE:D3:AE:CF:7E:44:79:F5:D6:8C:E1:9B:4F:95:2C:F4:6C
Certificate issuer:       /CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
Certificate serial:       018CC80191F016EE92B7FF45EC8AD98894E5
Authority key identifier: DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/DyMeztOuz35EefXWjOGbT5Us9Gw.roa
Signing time:             Tue 02 Jan 2024 02:29:55 +0000
ROA not before:           Tue 02 Jan 2024 02:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12907
IP address blocks:        213.252.0.0/18 maxlen: 18
                          2a04:d740::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:91:f0:16:ee:92:b7:ff:45:ec:8a:d9:88:94:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da3220272a469aed65cc2a7f6d97fca991f7ec81
        Validity
            Not Before: Jan  2 02:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0f231eced3aecf7e4479f5d68ce19b4f952cf46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:f8:a6:8d:0d:31:c8:de:cd:4f:53:48:c2:
                    92:bf:1e:e4:ff:66:4d:9a:c4:b5:6d:e9:2c:60:9f:
                    a1:2d:83:a6:64:0e:64:9e:4c:0f:2b:73:9b:59:b7:
                    b6:91:8d:33:2d:ce:86:06:c3:7d:4d:d6:eb:25:e0:
                    3e:56:5c:fc:8f:8c:34:9f:f1:f1:72:cb:1f:9e:0f:
                    6f:a3:ae:2e:3c:af:81:ac:c3:1c:8c:06:ff:2c:b0:
                    26:3f:ec:70:6d:51:f5:d1:72:39:2d:68:04:c6:45:
                    4f:c9:f4:cd:18:c2:d3:ff:44:93:b0:86:76:fa:06:
                    01:f8:8b:0c:f1:7e:98:f0:ae:59:96:74:e0:0e:f8:
                    f1:24:11:4e:8d:21:0e:2e:e2:e1:d5:b1:92:bc:f4:
                    9c:8a:c9:44:ee:56:ff:16:7b:dc:91:6d:0a:82:01:
                    bd:19:07:84:c6:56:70:9d:48:23:05:49:86:c1:65:
                    5d:4f:61:f6:67:ea:4f:84:0f:94:70:df:c3:41:03:
                    49:92:81:9a:56:ed:d6:35:79:40:97:88:f4:1d:ed:
                    d0:69:e6:66:3d:06:a9:07:75:39:f3:25:62:28:9a:
                    0b:77:e5:2e:9e:a5:38:98:11:b0:11:cf:9b:6b:a2:
                    84:01:ff:bd:a2:f3:92:74:67:0c:2d:6e:13:89:1a:
                    62:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:23:1E:CE:D3:AE:CF:7E:44:79:F5:D6:8C:E1:9B:4F:95:2C:F4:6C
            X509v3 Authority Key Identifier:
                keyid:DA:32:20:27:2A:46:9A:ED:65:CC:2A:7F:6D:97:FC:A9:91:F7:EC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2jIgJypGmu1lzCp_bZf8qZH37IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/DyMeztOuz35EefXWjOGbT5Us9Gw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/f4116a-7f40-4529-a3cc-241eecff9ab0/1/2jIgJypGmu1lzCp_bZf8qZH37IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.252.0.0/18
                IPv6:
                  2a04:d740::/29

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:e6:c0:77:4e:b6:a0:06:e7:07:8f:43:58:69:d6:17:4e:
         39:d0:3d:88:91:bd:d5:9c:fc:ab:bf:ee:06:ef:9c:b1:58:63:
         c7:a4:2d:ff:27:0f:32:0c:b2:a1:95:f9:16:38:0d:38:cf:ea:
         bc:3b:6e:cb:6c:fc:a6:19:2d:2e:10:36:50:9b:2d:10:ae:38:
         3a:17:5f:e9:65:19:21:09:a0:3b:5f:0e:c9:1d:ad:3d:77:21:
         14:5f:3d:31:d7:98:52:7a:6f:5a:8e:10:9a:9f:32:c2:ba:f0:
         ec:b7:e2:cf:91:fe:69:dc:10:14:f5:a3:2b:94:6c:98:72:3f:
         30:09:e5:ef:ee:8c:48:62:7c:8b:65:8f:4e:7f:45:5f:5a:e6:
         39:0e:be:f8:65:fd:a9:b0:a6:3c:76:24:36:9f:1f:d1:81:1c:
         24:2a:b8:d6:37:2d:80:38:53:ae:b0:d0:84:e7:9d:81:05:28:
         67:6c:94:0f:49:85:e6:ab:7e:23:fb:ad:14:f3:37:d6:d9:3f:
         83:48:ac:2f:2b:88:d4:e2:29:5b:e3:03:89:cd:bc:87:26:3d:
         09:1b:f2:68:11:2d:1d:47:a9:55:cd:02:2e:e5:01:11:cd:bd:
         d6:81:0d:8e:f8:1f:8a:78:ca:b7:d8:00:1a:24:e9:c7:71:5d:
         22:63:9f:1d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIAZHwFu6St/9F7IrZiJTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMzIyMDI3MmE0NjlhZWQ2NWNjMmE3ZjZkOTdmY2E5OTFm
N2VjODEwHhcNMjQwMTAyMDIyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjIzMWVjZWQzYWVjZjdlNDQ3OWY1ZDY4Y2UxOWI0Zjk1MmNmNDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIr4po0NMcjezU9TSMKSvx7k/2ZN
msS1beksYJ+hLYOmZA5knkwPK3ObWbe2kY0zLc6GBsN9TdbrJeA+Vlz8j4w0n/Hx
cssfng9vo64uPK+BrMMcjAb/LLAmP+xwbVH10XI5LWgExkVPyfTNGMLT/0STsIZ2
+gYB+IsM8X6Y8K5ZlnTgDvjxJBFOjSEOLuLh1bGSvPScislE7lb/FnvckW0KggG9
GQeExlZwnUgjBUmGwWVdT2H2Z+pPhA+UcN/DQQNJkoGaVu3WNXlAl4j0He3QaeZm
PQapB3U58yViKJoLd+UunqU4mBGwEc+ba6KEAf+9ovOSdGcMLW4TiRpiPwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFA8jHs7Trs9+RHn11ozhm0+VLPRsMB8GA1UdIwQY
MBaAFNoyICcqRprtZcwqf22X/KmR9+yBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2Mt
MjQxZWVjZmY5YWIwLzEvRHlNZXp0T3V6MzVFZWZYV2pPR2JUNVVzOUd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9mNDExNmEtN2Y0MC00NTI5LWEzY2MtMjQxZWVjZmY5YWIw
LzEvMmpJZ0p5cEdtdTFsekNwX2JaZjhxWkgzN0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQG1fwAMA0E
AgACMAcDBQMqBNdAMA0GCSqGSIb3DQEBCwUAA4IBAQAHi+bAd062oAbnB49DWGnW
F0450D2Ikb3VnPyrv+4G75yxWGPHpC3/Jw8yDLKhlfkWOA04z+q8O27LbPymGS0u
EDZQmy0Qrjg6F1/pZRkhCaA7Xw7JHa09dyEUXz0x15hSem9ajhCanzLCuvDst+LP
kf5p3BAU9aMrlGyYcj8wCeXv7oxIYnyLZY9Of0VfWuY5Dr74Zf2psKY8diQ2nx/R
gRwkKrjWNy2AOFOusNCE552BBShnbJQPSYXmq34j+60U8zfW2T+DSKwvK4jU4ilb
4wOJzbyHJj0JG/JoES0dR6lVzQIu5QERzb3WgQ2O+B+KeMq32AAaJOnHcV0iY58d
-----END CERTIFICATE-----