Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/TOoWNubPU9o6ZNw91-j7pRQHP24.roa
File:                     TOoWNubPU9o6ZNw91-j7pRQHP24.roa (raw, json)
Hash identifier:          Bce18KLXKs+BpUyJxl0D1BAcokqILG2nMZ84q+n4aMk=
Subject key identifier:   4C:EA:16:36:E6:CF:53:DA:3A:64:DC:3D:D7:E8:FB:A5:14:07:3F:6E
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       01924D621E8E6C528F06235F98845AFB68BC
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/TOoWNubPU9o6ZNw91-j7pRQHP24.roa
Signing time:             Wed 02 Oct 2024 13:18:48 +0000
ROA not before:           Wed 02 Oct 2024 13:18:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        80.254.228.0/24 maxlen: 24
                          185.92.171.0/24 maxlen: 24
                          2a13:5241::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:4d:62:1e:8e:6c:52:8f:06:23:5f:98:84:5a:fb:68:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Oct  2 13:18:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4cea1636e6cf53da3a64dc3dd7e8fba514073f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:cd:05:f6:61:86:5d:89:e0:40:1a:79:0b:
                    cb:cd:10:8d:47:87:dd:22:db:6e:f2:6a:f1:d4:fb:
                    96:0f:93:7e:2b:88:4d:be:7e:e3:ff:f7:69:f4:3a:
                    ab:b5:0d:b9:0c:78:01:16:99:7f:3d:d4:fc:bf:bc:
                    ff:f2:73:7b:c2:bc:39:52:1c:1b:ef:b3:66:d2:5e:
                    37:a5:a4:c4:37:6b:07:2d:5d:ca:99:6d:80:0c:2a:
                    97:a4:6f:15:4d:1d:6f:0b:0a:6f:4f:e0:f8:22:67:
                    f6:c0:05:95:c1:a8:5c:e5:c8:0e:a9:f8:ec:c8:b3:
                    b0:0e:f5:4b:cb:17:d4:17:15:51:10:df:20:45:f1:
                    38:e8:9b:a0:b3:90:7f:7d:fa:27:0c:99:4d:bd:84:
                    3a:5f:d5:d4:d6:cb:4b:c2:07:55:3f:dd:f9:d1:d6:
                    8c:f4:0c:2f:2d:3f:05:d6:da:2d:51:17:a1:19:38:
                    72:8f:bf:2f:a3:3e:c0:d9:5a:42:5d:03:8c:8f:7c:
                    f1:aa:0d:b5:90:2c:fc:9f:82:fb:69:99:fa:89:47:
                    68:6b:18:c9:95:c0:68:8e:2d:3b:42:28:96:4f:32:
                    b5:4d:5b:03:6f:30:3c:25:70:8d:28:be:54:19:30:
                    23:c6:01:af:d9:92:15:95:35:e4:d2:f1:57:ee:47:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:16:36:E6:CF:53:DA:3A:64:DC:3D:D7:E8:FB:A5:14:07:3F:6E
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/TOoWNubPU9o6ZNw91-j7pRQHP24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.254.228.0/24
                  185.92.171.0/24
                IPv6:
                  2a13:5241::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:13:14:ee:3f:b7:01:d2:cb:f8:ba:58:94:3d:ca:75:15:9c:
         88:a2:bc:2c:b1:9b:cb:e9:1c:6b:f0:d6:d7:f2:b9:95:c9:31:
         a9:26:a1:87:92:28:66:19:c8:88:d7:12:24:29:b3:e5:27:b9:
         c7:ca:77:84:42:96:12:55:4e:4e:75:24:2b:c8:a7:24:74:7f:
         44:5d:84:d7:c6:fb:c1:96:ce:c7:fd:4e:95:af:01:d6:5e:30:
         36:26:81:71:85:db:5f:55:70:7b:f0:10:8a:b0:18:1e:09:1a:
         87:0e:3a:96:17:ed:2c:44:f9:4d:3e:0a:a0:ff:36:0c:26:b4:
         7d:a7:2c:42:c9:11:db:fd:47:0c:b9:f0:33:16:33:93:30:49:
         98:ed:27:4b:51:1e:a1:1c:d0:78:51:b2:59:14:15:32:05:86:
         fc:db:a0:98:8c:1e:25:68:14:d4:86:66:9e:41:11:c7:5e:be:
         08:0f:bd:0c:b8:f0:71:b5:58:93:a9:3d:ed:0e:92:d1:2b:0d:
         84:24:ad:e0:eb:31:86:78:da:ee:2b:d0:6c:42:0f:8a:cf:98:
         25:7b:c5:c3:4c:b2:57:dd:86:30:ab:55:a5:d6:35:fc:51:b3:
         a1:ea:3e:3c:79:73:bb:48:eb:e4:8e:82:85:1b:88:dc:72:af:
         14:0f:73:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----