Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/84Y7T475VPF0BJarkUVoc_AiRd8.roa
File:                     84Y7T475VPF0BJarkUVoc_AiRd8.roa (raw, json)
Hash identifier:          7oekIr7rzxBCZReGsWYydUN6/as96gJkK2vBl9b6zwU=
Subject key identifier:   F3:86:3B:4F:8E:F9:54:F1:74:04:96:AB:91:45:68:73:F0:22:45:DF
Certificate issuer:       /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Certificate serial:       018CC802FFD3FB5FE132B8FA0CAF4A8B02DC
Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/84Y7T475VPF0BJarkUVoc_AiRd8.roa
Signing time:             Tue 02 Jan 2024 02:31:28 +0000
ROA not before:           Tue 02 Jan 2024 02:31:28 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48603
IP address blocks:        45.147.92.0/24 maxlen: 24
                          45.147.93.0/24 maxlen: 24
                          2a0f:f800::/29 maxlen: 31

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:02:ff:d3:fb:5f:e1:32:b8:fa:0c:af:4a:8b:02:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
        Validity
            Not Before: Jan  2 02:31:28 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f3863b4f8ef954f1740496ab91456873f02245df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:00:b3:f6:eb:80:22:b7:64:30:73:60:62:1e:
                    78:48:f0:00:1e:ec:ad:01:c4:51:3c:c7:34:cf:f1:
                    ae:c9:66:03:f3:c0:57:f4:a5:d9:21:05:b4:64:08:
                    6d:be:39:4a:49:4b:8a:e9:3c:98:8b:c4:ba:fd:cf:
                    70:3d:41:b1:e4:bc:25:47:39:b6:4e:84:82:0b:92:
                    73:d1:55:dd:97:c9:11:84:f3:6b:e4:65:7c:2d:fc:
                    ce:9f:75:40:62:13:64:49:d4:54:9f:1e:99:59:58:
                    0e:8c:2b:53:3c:e5:35:f4:80:d6:1f:65:32:2e:d1:
                    92:c1:e8:51:ee:25:30:01:f9:32:ed:5b:11:b3:17:
                    80:90:f0:5d:66:95:96:67:3c:ac:9e:84:7f:cc:e2:
                    cf:01:eb:ac:fe:08:e1:50:4c:b5:04:69:94:c6:3c:
                    b4:c3:31:a6:85:55:5b:44:c3:77:10:a4:d8:49:32:
                    c3:9f:5c:b4:84:2e:28:05:8e:6c:45:7d:68:65:0b:
                    58:8b:7e:55:6d:15:64:ea:1d:76:32:ef:48:cb:02:
                    ff:5f:e4:f7:c7:53:ab:bb:eb:60:6f:03:72:c7:c9:
                    0e:50:83:50:79:28:6d:ad:8b:a0:9c:29:ae:6d:92:
                    d9:1e:69:23:59:2b:41:32:2b:c5:fa:86:94:aa:82:
                    71:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:3B:4F:8E:F9:54:F1:74:04:96:AB:91:45:68:73:F0:22:45:DF
            X509v3 Authority Key Identifier:
                keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/84Y7T475VPF0BJarkUVoc_AiRd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.92.0/23
                IPv6:
                  2a0f:f800::/29

    Signature Algorithm: sha256WithRSAEncryption
         ce:76:3c:4e:4b:ec:80:95:fd:34:82:92:bf:49:30:f8:0a:17:
         ce:f1:47:a8:7e:b9:fa:9b:51:e5:4f:1a:a8:01:7a:28:de:6f:
         47:e4:e3:64:25:c1:d0:df:fb:cd:5a:72:42:70:33:0b:bc:ab:
         7b:48:29:43:ff:31:81:98:73:a2:a2:c9:b9:16:ca:ca:1a:cc:
         83:f1:ce:e9:0d:4f:42:d7:b1:36:35:c1:37:c4:3e:15:71:c0:
         ad:91:97:13:45:75:93:c8:a3:53:d7:53:ae:53:62:db:43:a3:
         6d:40:75:08:12:7d:ff:0d:b4:ed:2e:32:0b:9e:be:44:c4:20:
         fe:b3:91:fa:90:e8:4f:24:3c:8d:2a:62:c1:1e:76:9e:b6:75:
         bb:2d:21:a4:5f:99:fc:e7:d7:38:23:1d:24:3b:07:5c:39:59:
         82:bd:bd:64:e6:8f:81:9d:d6:1f:b8:99:d4:92:d0:65:88:2e:
         81:d5:b5:e3:a7:03:17:59:26:b1:bc:7b:2f:2e:dd:9e:ca:95:
         9f:98:58:89:ed:30:18:c6:76:ee:dc:c3:1a:c5:95:74:c7:6d:
         3e:66:ac:80:86:b8:6b:c6:e7:af:46:b9:ba:d2:be:54:05:86:
         cf:59:46:b2:97:a4:b0:e7:07:f4:86:f2:67:1a:e3:5d:bb:29:
         eb:fb:bb:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----