Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/wonbylIhbF-4-ZTO_vsK8pKjJeo.roa
File:                     wonbylIhbF-4-ZTO_vsK8pKjJeo.roa (raw, json)
Hash identifier:          9XY/BCwXkiiZYNfxQVeWaOJ6gRmfc2Lfxc3rdIWbjAE=
Subject key identifier:   C2:89:DB:CA:52:21:6C:5F:B8:F9:94:CE:FE:FB:0A:F2:92:A3:25:EA
Certificate issuer:       /CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
Certificate serial:       0190C1862C921DFE07D6DB9442AB612E1B6C
Authority key identifier: 34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/wonbylIhbF-4-ZTO_vsK8pKjJeo.roa
Signing time:             Wed 17 Jul 2024 16:28:34 +0000
ROA not before:           Wed 17 Jul 2024 16:28:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50869
IP address blocks:        92.119.38.0/24 maxlen: 24
                          2a0b:dd80:3100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:c1:86:2c:92:1d:fe:07:d6:db:94:42:ab:61:2e:1b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=345b4f7b4a16db9e924f0908cee3da26f22ad481
        Validity
            Not Before: Jul 17 16:28:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c289dbca52216c5fb8f994cefefb0af292a325ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8e:36:22:56:ff:63:0b:f6:dd:fe:57:d9:78:
                    43:1f:92:76:9f:08:38:45:48:28:65:94:85:22:1e:
                    d8:e7:02:e6:07:10:ad:a7:08:21:df:93:b8:a9:dc:
                    55:d0:8b:54:ef:06:0b:e2:67:ef:65:63:3b:af:eb:
                    18:a1:dc:77:b5:3d:83:8c:db:02:9e:74:d6:bf:8f:
                    f7:c7:3f:b2:43:bd:fa:c8:92:56:c3:c3:00:97:cf:
                    47:6d:1c:82:fd:e8:0f:9f:4d:ef:9b:63:ad:f7:ab:
                    24:38:03:67:a1:3f:84:ed:e6:62:fa:cb:8c:2c:d0:
                    ae:fa:cc:f2:82:10:42:c4:c7:b2:8e:0a:68:29:32:
                    e8:53:1b:58:9b:cf:dd:03:d7:26:91:a2:e4:c3:4d:
                    26:e5:57:a5:75:7c:a9:6a:1b:b3:8c:b9:82:6f:6d:
                    85:3d:c4:dd:b7:88:e7:e2:f7:6b:2a:db:e7:96:80:
                    6b:7a:d7:7e:7b:02:6c:33:27:6e:07:76:ee:3d:13:
                    67:ff:cc:72:0c:f4:83:86:f7:01:78:b4:59:d7:e8:
                    0f:8f:a7:86:3e:2a:b5:f4:7f:6d:16:2c:09:35:c9:
                    2e:b0:e2:44:7b:8f:13:d6:3b:57:52:7e:c5:83:c6:
                    1e:51:ae:1a:b3:a9:73:82:cb:c0:f5:58:64:f4:d7:
                    9f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:89:DB:CA:52:21:6C:5F:B8:F9:94:CE:FE:FB:0A:F2:92:A3:25:EA
            X509v3 Authority Key Identifier:
                keyid:34:5B:4F:7B:4A:16:DB:9E:92:4F:09:08:CE:E3:DA:26:F2:2A:D4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFtPe0oW256STwkIzuPaJvIq1IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/wonbylIhbF-4-ZTO_vsK8pKjJeo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/36a9af-0d6a-45e3-9ca5-40858b95fcf5/1/NFtPe0oW256STwkIzuPaJvIq1IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.38.0/24
                IPv6:
                  2a0b:dd80:3100::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:b1:ab:d2:80:d9:38:28:32:94:9f:da:af:9d:fb:86:33:66:
         d8:a1:57:ba:d5:53:61:40:6b:95:fc:b3:4e:93:0e:8d:57:19:
         d9:b3:f7:71:a4:47:91:b5:6f:7f:b6:f5:c4:6d:c8:60:d4:b8:
         44:33:28:2a:19:5e:21:41:57:60:48:bd:0a:16:bf:c2:d6:c8:
         0d:a0:25:54:39:7a:1e:78:1c:17:09:c8:f1:85:36:c6:7f:bb:
         e6:09:4e:e1:3e:40:52:c5:ce:0f:63:da:bc:49:ad:97:f2:d1:
         28:fd:63:72:d9:a7:67:72:c5:59:48:3f:14:08:0f:85:15:f8:
         8e:ab:e7:15:77:28:e1:57:5d:64:c5:e4:27:69:98:40:39:84:
         98:ba:40:ac:81:4e:7a:03:24:60:1f:0e:c0:d5:e7:c5:fe:5d:
         c9:bf:82:15:14:a6:13:10:79:f6:8e:f1:2e:5a:1a:4a:3e:38:
         ba:03:aa:7d:91:2f:9c:0a:ba:27:de:26:22:8d:d0:4f:d1:6d:
         28:89:5f:09:7a:3f:a7:ea:c3:a3:45:de:4e:ac:b9:30:e9:08:
         0f:ba:91:3b:6f:54:5f:a0:cc:fa:a7:ec:e8:05:6e:db:4f:66:
         a1:86:a8:cd:70:2c:67:e9:48:8e:a5:7e:7c:34:55:66:1b:ab:
         79:76:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----