Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/8Ua36sQPiROOdvji9D_u-a0zjio.roa
File:                     8Ua36sQPiROOdvji9D_u-a0zjio.roa (raw, json)
Hash identifier:          D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=
Subject key identifier:   F1:46:B7:EA:C4:0F:89:13:8E:76:F8:E2:F4:3F:EE:F9:AD:33:8E:2A
Certificate issuer:       /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
Certificate serial:       01942747D362BD0318B0AA09C223EB343FA6
Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/8Ua36sQPiROOdvji9D_u-a0zjio.roa
Signing time:             Thu 02 Jan 2025 13:50:06 +0000
ROA not before:           Thu 02 Jan 2025 13:50:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     49715
IP address blocks:        213.108.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 09:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:47:d3:62:bd:03:18:b0:aa:09:c2:23:eb:34:3f:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950
        Validity
            Not Before: Jan  2 13:50:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=f146b7eac40f89138e76f8e2f43feef9ad338e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:02:14:84:fb:4d:99:ea:05:c3:b2:e5:a3:ef:
                    05:f6:44:64:f9:42:a6:1d:8b:96:45:0b:e9:b6:58:
                    00:83:09:01:e7:33:8e:99:85:79:df:7c:19:0b:1d:
                    8a:62:a9:a6:d2:a5:8d:2c:42:58:0e:0a:58:85:0e:
                    e2:55:ed:dc:d8:09:20:ea:97:d4:25:c2:07:01:11:
                    9b:dd:b8:84:d4:d5:6c:db:f7:41:dc:aa:bb:6f:36:
                    fe:dc:71:c9:f1:93:6f:0b:3f:71:f3:12:47:05:bf:
                    1a:2b:4e:48:5a:7a:3b:ef:b4:c5:e1:c7:1d:78:b1:
                    19:ce:53:90:a0:da:05:39:cc:27:67:9f:90:80:8b:
                    39:35:84:57:e0:8e:af:5a:2a:b0:d6:ea:5a:74:fe:
                    c7:24:fe:39:37:c0:32:95:2d:27:63:17:92:34:7f:
                    bf:10:57:47:21:4b:c8:db:5c:68:0e:96:26:54:15:
                    35:20:43:a1:18:4f:f6:57:bc:6f:34:d8:d0:00:00:
                    99:c4:10:c0:d8:d7:42:40:9e:1e:f2:59:05:f3:e2:
                    c8:23:31:0a:1a:28:1d:fa:f3:fe:7d:04:e5:01:8a:
                    cb:ff:bf:f7:15:43:0f:9c:93:f0:3f:b8:f0:7c:c2:
                    e4:23:ce:24:d2:f3:66:5e:1e:bc:c4:7c:c9:9a:1c:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:46:B7:EA:C4:0F:89:13:8E:76:F8:E2:F4:3F:EE:F9:AD:33:8E:2A
            X509v3 Authority Key Identifier:
                keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/8Ua36sQPiROOdvji9D_u-a0zjio.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.108.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:fc:02:cb:4c:37:1a:ea:c8:8f:f4:33:95:51:32:58:5b:4e:
         08:2c:16:73:05:94:f3:bc:af:8e:1d:e3:76:e8:14:d6:61:e3:
         b0:38:2a:71:ae:99:73:5a:f7:3b:10:97:9e:96:d2:54:48:e7:
         24:0a:7c:0e:63:f8:e8:39:9f:a8:50:c3:e4:38:76:ea:12:fa:
         00:b5:39:75:77:52:a1:04:9d:66:11:89:01:0e:24:96:b4:a4:
         bf:07:66:a0:b7:49:4f:fe:b0:3b:bb:97:e6:0a:26:32:8b:cf:
         db:33:5e:47:e4:ff:d4:ac:70:82:da:7d:4a:1b:3a:b7:fa:97:
         dc:43:9d:72:e9:b5:7f:61:e4:53:bc:34:22:14:f7:0c:ed:42:
         76:ff:4e:c1:e9:10:99:fa:c5:da:36:18:9f:c7:98:68:23:7b:
         69:d2:10:46:f7:36:37:b0:22:26:04:de:ae:60:90:3c:fd:ef:
         b4:01:7c:77:cb:1f:56:fd:76:70:e1:74:d3:cf:89:6d:6f:84:
         5c:e7:94:d8:69:c7:cd:3d:a3:c7:64:df:fc:55:5a:22:ed:40:
         cb:38:38:aa:55:b3:7e:e0:7f:d4:8d:ab:dd:cb:1c:30:50:89:
         bc:47:b6:85:17:ca:ce:71:8f:65:81:73:1b:20:a4:53:5b:53:
         aa:17:08:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR9NivQMYsKoJwiPrND+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj
NWU5NTAwHhcNMjUwMTAyMTM1MDA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTQ2YjdlYWM0MGY4OTEzOGU3NmY4ZTJmNDNmZWVmOWFkMzM4ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QIUhPtNmeoFw7Llo+8F9kRk+UKm
HYuWRQvptlgAgwkB5zOOmYV533wZCx2KYqmm0qWNLEJYDgpYhQ7iVe3c2Akg6pfU
JcIHARGb3biE1NVs2/dB3Kq7bzb+3HHJ8ZNvCz9x8xJHBb8aK05IWno777TF4ccd
eLEZzlOQoNoFOcwnZ5+QgIs5NYRX4I6vWiqw1upadP7HJP45N8AylS0nYxeSNH+/
EFdHIUvI21xoDpYmVBU1IEOhGE/2V7xvNNjQAACZxBDA2NdCQJ4e8lkF8+LIIzEK
Gigd+vP+fQTlAYrL/7/3FUMPnJPwP7jwfMLkI84k0vNmXh68xHzJmhxozQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPFGt+rED4kTjnb44vQ/7vmtM44qMB8GA1UdIwQY
MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt
OTliNDU2ZmRkOTU0LzEvOFVhMzZzUVBpUk9PZHZqaTlEX3UtYTB6amlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0
LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1WyYMA0G
CSqGSIb3DQEBCwUAA4IBAQDH/ALLTDca6siP9DOVUTJYW04ILBZzBZTzvK+OHeN2
6BTWYeOwOCpxrplzWvc7EJeeltJUSOckCnwOY/joOZ+oUMPkOHbqEvoAtTl1d1Kh
BJ1mEYkBDiSWtKS/B2agt0lP/rA7u5fmCiYyi8/bM15H5P/UrHCC2n1KGzq3+pfc
Q51y6bV/YeRTvDQiFPcM7UJ2/07B6RCZ+sXaNhifx5hoI3tp0hBG9zY3sCImBN6u
YJA8/e+0AXx3yx9W/XZw4XTTz4ltb4Rc55TYacfNPaPHZN/8VVoi7UDLODiqVbN+
4H/UjavdyxwwUIm8R7aFF8rOcY9lgXMbIKRTW1OqFwgg
-----END CERTIFICATE-----