Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/cvcLaP-LPHONQ_8ZDCSmbUrtrPI.roa
File:                     cvcLaP-LPHONQ_8ZDCSmbUrtrPI.roa (raw, json)
Hash identifier:          hgW0Sj9RRbSr9/BMXRz2/SPprLumLT9tao8TpTxdd4I=
Subject key identifier:   72:F7:0B:68:FF:8B:3C:73:8D:43:FF:19:0C:24:A6:6D:4A:ED:AC:F2
Certificate issuer:       /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial:       018CC86F09E10C509E77E2A743F14AC7B66D
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/cvcLaP-LPHONQ_8ZDCSmbUrtrPI.roa
Signing time:             Tue 02 Jan 2024 04:29:29 +0000
ROA not before:           Tue 02 Jan 2024 04:29:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199468
IP address blocks:        46.254.111.0/24 maxlen: 24
                          2a11:c900::/29 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 22:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:09:e1:0c:50:9e:77:e2:a7:43:f1:4a:c7:b6:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
        Validity
            Not Before: Jan  2 04:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=72f70b68ff8b3c738d43ff190c24a66d4aedacf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:96:50:b2:73:f2:4b:ba:98:d7:8c:75:e5:
                    71:cc:76:39:53:e1:dc:ff:b4:8f:ae:e6:ab:7a:24:
                    b7:f7:02:4b:a5:5d:9c:8c:f7:c6:8e:1f:e5:a1:53:
                    5c:29:28:d5:19:0a:f0:9b:7a:aa:e5:a0:fb:ff:09:
                    2a:fa:53:5c:83:47:5d:fe:fb:7d:4d:cb:89:c6:4e:
                    5f:90:e1:80:65:91:8a:2e:86:13:23:d2:4c:b8:40:
                    2e:47:2b:03:1e:a9:e6:6b:71:1f:47:64:b1:ea:7d:
                    51:19:50:2a:c1:f5:f9:5f:c6:47:35:67:87:9f:a0:
                    19:82:bb:f2:a0:d7:8c:e1:1d:1a:00:b1:97:2a:ea:
                    ce:97:42:a0:53:1d:8c:20:87:44:cd:fc:b5:26:74:
                    b8:65:a5:e0:a0:a8:6a:05:1c:5f:ff:e1:2f:e5:de:
                    0b:c3:e2:05:8a:a2:80:e0:fe:8f:96:6e:19:b4:02:
                    9f:2d:a4:40:12:14:a1:67:57:a0:f1:db:42:4b:26:
                    b4:bf:a9:ea:8c:a6:df:bc:38:36:25:17:11:06:33:
                    63:ae:5f:27:f7:0a:de:b1:03:c1:cd:f8:bc:0c:2e:
                    c5:2c:b7:02:a8:9d:da:33:10:bb:71:bd:60:af:77:
                    dd:21:c1:c0:ec:66:bd:42:15:b8:a9:ec:f6:96:10:
                    33:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F7:0B:68:FF:8B:3C:73:8D:43:FF:19:0C:24:A6:6D:4A:ED:AC:F2
            X509v3 Authority Key Identifier:
                keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/cvcLaP-LPHONQ_8ZDCSmbUrtrPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.254.111.0/24
                IPv6:
                  2a11:c900::/29

    Signature Algorithm: sha256WithRSAEncryption
         5c:b5:0d:2a:2e:34:b8:f0:e7:c2:2d:a4:45:93:dd:12:68:2c:
         63:95:7c:31:7c:a9:6c:80:fe:76:50:90:36:1a:9e:58:75:8c:
         ef:99:b0:6d:25:42:4d:b3:02:1f:2e:20:68:ae:1b:82:4a:67:
         3f:0b:db:17:61:51:0a:40:76:6f:bc:5f:2d:ba:34:dd:8f:50:
         0f:29:64:76:23:26:9c:f5:df:24:07:d8:e1:e2:63:63:b5:a5:
         96:c4:63:d2:13:77:2f:dd:74:5e:ef:02:19:81:22:64:65:07:
         00:ef:a8:7c:50:11:9a:9f:1c:58:45:f0:73:0e:74:14:72:4a:
         b1:b7:84:d4:1d:93:1d:2d:a9:8c:e9:91:a8:a2:72:9b:e4:ef:
         d1:b7:c7:22:32:16:69:11:cf:82:11:a5:97:85:de:d7:00:f3:
         00:63:57:9a:83:bc:c1:72:ca:3c:8a:cc:3f:48:88:8f:b5:3f:
         61:a3:6b:05:41:94:ee:d5:82:14:db:36:97:63:91:30:df:59:
         37:ab:47:57:9b:55:93:1a:b5:a1:12:19:c9:0f:df:c0:f8:63:
         fa:94:99:a0:e7:b6:34:a9:b8:b7:3c:22:08:03:44:e4:ec:70:
         cf:14:d2:42:2a:6a:e1:e2:ff:11:e3:d6:e4:14:44:0f:85:72:
         0f:96:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----