Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/V-DGH8TR0ddHiiqufidIaH6mzmo.roa
File:                     V-DGH8TR0ddHiiqufidIaH6mzmo.roa (raw, json)
Hash identifier:          ZVdQIW/I2zM3sPBlwstQbLEj4yIhxbNR9po7GF3Lfuo=
Subject key identifier:   57:E0:C6:1F:C4:D1:D1:D7:47:8A:2A:AE:7E:27:48:68:7E:A6:CE:6A
Certificate issuer:       /CN=aee8d6f56c5fbc904c9b913609013e5964865257
Certificate serial:       018CC348A5086112F96A50BA024637194C00
Authority key identifier: AE:E8:D6:F5:6C:5F:BC:90:4C:9B:91:36:09:01:3E:59:64:86:52:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rujW9WxfvJBMm5E2CQE-WWSGUlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/V-DGH8TR0ddHiiqufidIaH6mzmo.roa
Signing time:             Mon 01 Jan 2024 04:29:27 +0000
ROA not before:           Mon 01 Jan 2024 04:29:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207713
IP address blocks:        195.20.19.0/24 maxlen: 24
                          2a13:49c0::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/rujW9WxfvJBMm5E2CQE-WWSGUlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/rujW9WxfvJBMm5E2CQE-WWSGUlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rujW9WxfvJBMm5E2CQE-WWSGUlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:a5:08:61:12:f9:6a:50:ba:02:46:37:19:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee8d6f56c5fbc904c9b913609013e5964865257
        Validity
            Not Before: Jan  1 04:29:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=57e0c61fc4d1d1d7478a2aae7e2748687ea6ce6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a7:7a:68:91:be:50:2b:37:e8:53:51:01:13:
                    18:ff:19:b8:4b:a0:c1:b2:c9:7a:71:bf:2c:93:a3:
                    c8:37:24:e2:68:5a:42:93:95:e8:07:5c:53:9d:b0:
                    f4:cb:be:66:0c:2b:1b:ee:c0:17:95:08:78:df:67:
                    16:79:c3:ff:1f:4a:ba:cb:71:b0:19:45:44:61:a1:
                    e3:57:33:14:f1:2c:be:cf:a3:34:6d:2f:e9:1b:95:
                    31:bd:d9:a8:d7:25:eb:9c:59:0d:20:6f:20:d0:17:
                    20:5c:a7:56:f2:96:e8:a9:7a:c7:7b:66:56:98:e3:
                    68:07:64:52:33:ca:bf:92:70:8b:8f:95:84:af:c8:
                    8f:9f:0b:b8:89:b1:6e:cc:bf:c8:c7:97:6e:a5:5a:
                    c8:a5:43:03:b2:ac:f9:cc:da:fd:4c:60:8c:4f:90:
                    fa:9f:99:6d:90:7e:8f:cb:60:db:72:80:57:04:c0:
                    c4:22:9f:df:70:62:5f:3e:f9:90:a3:48:60:4b:ab:
                    5b:88:de:70:db:7e:64:77:3a:6f:01:9a:f2:66:0c:
                    16:36:31:b0:ec:88:dc:83:35:12:c0:63:3c:5b:38:
                    8b:a0:58:91:27:ab:b3:82:8b:38:63:d6:07:c1:bf:
                    48:e8:2c:f7:67:12:dc:de:0a:8f:20:0d:e4:2f:42:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E0:C6:1F:C4:D1:D1:D7:47:8A:2A:AE:7E:27:48:68:7E:A6:CE:6A
            X509v3 Authority Key Identifier:
                keyid:AE:E8:D6:F5:6C:5F:BC:90:4C:9B:91:36:09:01:3E:59:64:86:52:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rujW9WxfvJBMm5E2CQE-WWSGUlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/V-DGH8TR0ddHiiqufidIaH6mzmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f9b3ca-04a0-4233-aed1-c6f9d0a8f36e/1/rujW9WxfvJBMm5E2CQE-WWSGUlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.20.19.0/24
                IPv6:
                  2a13:49c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         7a:57:8b:d3:4c:5b:3c:69:bb:89:af:da:36:db:bc:27:b7:49:
         f4:e3:88:55:f6:60:2c:79:71:de:40:76:ee:75:25:87:2d:dc:
         ae:b1:87:ae:f8:82:56:d4:e3:bf:ff:61:1b:23:ef:93:45:f9:
         6d:e5:ca:77:d9:d4:a0:1a:03:76:0b:cc:05:6f:5c:b2:95:8d:
         c7:6a:01:32:fc:48:a3:3d:ab:17:8b:dd:ea:64:67:23:e5:35:
         8b:8b:e1:91:eb:c5:60:d7:21:5b:d8:6a:cc:11:2e:c3:79:1a:
         82:9c:2c:c3:ab:ee:a2:6d:3d:a2:19:6b:e1:ae:94:9a:23:dd:
         f9:07:71:e1:fc:31:1a:42:37:b8:2a:d7:ea:19:0a:d3:d1:3b:
         2e:fa:b2:08:2a:14:a0:22:11:c1:f8:59:c4:e1:fc:21:f2:51:
         e6:c6:c9:0b:05:a9:cc:92:e7:65:b3:89:81:3f:84:aa:2c:42:
         ae:fc:01:a5:5c:bd:f3:02:96:58:b3:d6:6d:c1:d9:f9:70:e7:
         6d:1d:50:12:d5:d8:e3:93:2b:00:e8:fb:c1:fb:91:2a:c9:f2:
         35:7a:d5:bf:99:ae:dd:be:a5:20:fe:19:15:35:a8:b7:ee:ea:
         37:24:30:09:60:46:fb:64:13:3b:d0:b4:97:d8:f8:ad:4c:5c:
         4d:c3:e5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----