Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/EStMkQNsaAUNugMHWcUUmUGRd5Y.roa
File:                     EStMkQNsaAUNugMHWcUUmUGRd5Y.roa (raw, json)
Hash identifier:          BmfnQVJUbzTVrPnURQaE2FANFrkJ40gg3mpiKwSBcpY=
Subject key identifier:   11:2B:4C:91:03:6C:68:05:0D:BA:03:07:59:C5:14:99:41:91:77:96
Certificate issuer:       /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
Certificate serial:       018CC725F84F12A1017A30310EAB455E531F
Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/EStMkQNsaAUNugMHWcUUmUGRd5Y.roa
Signing time:             Mon 01 Jan 2024 22:30:03 +0000
ROA not before:           Mon 01 Jan 2024 22:30:03 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60558
IP address blocks:        185.52.52.0/22 maxlen: 22
                          185.52.55.0/24 maxlen: 24
                          2a01:b960:2301::/48 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:25:f8:4f:12:a1:01:7a:30:31:0e:ab:45:5e:53:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2
        Validity
            Not Before: Jan  1 22:30:03 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=112b4c91036c68050dba030759c5149941917796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:11:01:38:45:f3:92:33:11:e2:6a:ae:56:47:
                    fc:d6:aa:c5:20:93:9a:76:e5:2f:67:fc:38:e7:8a:
                    ed:7b:8d:f5:1d:bc:26:5e:3e:0e:b7:b6:fa:c7:fb:
                    23:4e:aa:f5:94:48:ee:d2:ad:82:ef:c2:c5:d5:a8:
                    96:18:49:2a:82:93:f7:48:62:cf:f1:56:18:78:d7:
                    4f:25:66:77:b3:3e:ef:53:48:08:e8:fc:0e:bb:6a:
                    cb:41:30:ed:b8:6c:7a:05:c3:a1:3d:55:cb:0f:c7:
                    79:93:0e:52:fe:0c:3f:47:94:ef:b4:18:de:61:0f:
                    c7:6a:ef:58:81:78:5c:99:ec:e3:c7:dc:a8:cc:9e:
                    ca:60:f5:33:a5:9e:8b:8f:c0:22:52:79:96:a2:32:
                    23:9c:9b:b1:4a:3d:c4:2f:05:11:c7:e3:14:52:a1:
                    7a:fb:76:9b:4f:a4:2d:b3:b9:49:a0:70:c0:ab:65:
                    70:e0:64:7e:b7:6f:0c:51:d7:fc:f0:1f:df:79:31:
                    1f:55:98:f6:76:e3:f7:cf:e6:ce:2c:63:06:3d:4d:
                    71:82:86:4d:f6:9d:47:ff:10:e5:37:5c:8a:ae:ce:
                    f9:19:8f:4e:f6:b8:24:78:0d:47:f1:7b:cb:a7:a6:
                    12:7a:8d:68:32:b3:6f:66:e3:15:2b:6d:a3:13:a4:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2B:4C:91:03:6C:68:05:0D:BA:03:07:59:C5:14:99:41:91:77:96
            X509v3 Authority Key Identifier:
                keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/EStMkQNsaAUNugMHWcUUmUGRd5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.52.52.0/22
                IPv6:
                  2a01:b960:2301::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:5e:66:eb:f3:02:cc:04:2d:20:ab:73:47:49:a5:76:05:bc:
         4f:73:0d:13:8b:39:d6:99:23:41:e6:77:f0:e8:ff:f0:76:07:
         04:91:a9:27:8d:df:ae:bd:29:0d:94:72:d2:b1:0b:9f:b1:e4:
         10:69:45:75:43:df:58:b3:0f:53:89:90:cc:86:a6:ea:a5:40:
         63:32:6a:cc:9a:90:28:66:69:c1:4b:88:4a:0d:6d:12:7d:ce:
         c7:da:34:ea:f1:60:5c:d6:c3:27:02:58:a8:30:85:fb:5d:df:
         9f:97:16:5c:7f:95:29:90:2d:e8:77:e4:2f:7c:02:15:48:f7:
         fc:5a:e0:b4:46:58:60:df:99:2e:0f:06:af:7b:8d:35:f2:98:
         f6:17:fb:fb:7e:43:06:b4:85:e2:45:69:fb:a1:9d:9c:e3:9f:
         2a:d7:b6:cf:44:73:cd:1b:ec:b1:f8:73:52:45:32:b0:51:cf:
         a9:75:d6:f5:1f:91:46:b0:bb:5c:e3:49:f9:59:51:90:54:86:
         5a:9e:8c:3c:fe:38:04:ab:58:79:6b:19:b6:aa:7a:f1:d6:d1:
         91:c2:21:e2:2a:b6:3e:0f:ff:0b:97:19:d6:fc:03:76:2d:88:
         13:4d:f9:4d:82:c4:fb:d9:6d:10:3f:a8:c8:de:54:14:e8:9e:
         8a:3c:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----