Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/QugycpULQh-gXxmbxJJyhyXodBc.roa
File:                     QugycpULQh-gXxmbxJJyhyXodBc.roa (raw, json)
Hash identifier:          stJ0RgFSUMZ+VJYCDPlk1gzwzU3qFcoTmuuFzfVzk8k=
Subject key identifier:   42:E8:32:72:95:0B:42:1F:A0:5F:19:9B:C4:92:72:87:25:E8:74:17
Certificate issuer:       /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial:       018CC26D7661DE3C273A976CE8D7C7E34EEB
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/QugycpULQh-gXxmbxJJyhyXodBc.roa
Signing time:             Mon 01 Jan 2024 00:30:02 +0000
ROA not before:           Mon 01 Jan 2024 00:30:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201273
IP address blocks:        185.161.249.0/24 maxlen: 24
                          2a12:8340::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:76:61:de:3c:27:3a:97:6c:e8:d7:c7:e3:4e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
        Validity
            Not Before: Jan  1 00:30:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=42e83272950b421fa05f199bc492728725e87417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f8:c5:51:f4:f0:3b:b4:6d:39:ef:3a:b1:ab:
                    67:dd:1b:ed:2b:1e:47:80:b2:0d:93:3b:7a:db:10:
                    f1:33:50:aa:97:12:21:4e:40:b7:b1:ee:30:4c:52:
                    3f:b6:30:18:fc:c5:cd:7b:13:b7:28:f6:96:83:f8:
                    eb:6f:f8:ce:0e:72:f5:de:3a:42:21:e2:23:2b:3d:
                    fd:32:db:ae:30:c4:cc:95:bd:dd:3b:67:bd:9e:24:
                    0d:15:4d:41:19:b4:ff:be:db:c2:77:c6:c0:e7:a4:
                    26:4c:14:51:46:19:0a:99:bf:57:6d:45:bd:e6:db:
                    6d:ce:3d:6d:7a:aa:ed:86:1c:76:79:e2:6d:91:08:
                    61:bf:3f:bc:be:a0:07:91:9f:91:a1:2a:44:f3:ae:
                    04:41:f0:6b:10:74:b5:c7:2e:94:f6:61:03:2d:18:
                    8e:64:38:e6:90:47:f8:dc:bd:eb:b0:19:77:07:07:
                    d1:3e:84:fe:14:92:fd:ce:df:d6:a7:91:a2:c0:9e:
                    15:2a:c9:05:a6:ac:ae:41:ca:72:82:44:07:9e:a5:
                    b0:d1:6e:db:0d:0b:89:13:7e:50:df:8b:54:ba:ef:
                    c9:88:ea:73:91:ce:73:8f:c4:9e:22:63:99:40:f7:
                    6b:44:e6:67:e6:47:53:b2:dc:24:ec:81:d2:eb:a2:
                    ed:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E8:32:72:95:0B:42:1F:A0:5F:19:9B:C4:92:72:87:25:E8:74:17
            X509v3 Authority Key Identifier:
                keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/QugycpULQh-gXxmbxJJyhyXodBc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.161.249.0/24
                IPv6:
                  2a12:8340::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:10:ba:f8:b2:2d:8f:cb:ae:d4:28:0c:ec:04:7e:21:14:63:
         99:b9:82:89:b8:50:62:2c:fa:65:2d:08:a8:d7:9a:63:6d:64:
         61:d5:1b:d3:8b:ea:94:bd:df:68:7d:1b:3d:9f:79:a3:65:2f:
         9d:c4:61:94:47:f9:d5:d4:0d:98:8b:6d:ba:91:e1:e0:89:6d:
         97:06:2b:59:1f:56:bb:b5:23:8f:48:38:c5:d8:43:cd:7c:1e:
         23:8d:c1:d7:6e:c6:1e:6e:60:51:17:e8:5f:d2:95:89:1d:c6:
         cf:c4:75:20:6a:c9:f5:2f:76:cb:c5:99:77:c3:76:fe:91:d8:
         df:3f:47:0d:80:d2:47:a3:43:1e:1e:d5:a1:cc:a8:3e:15:00:
         c5:cf:93:36:8d:83:b6:fb:b3:59:1a:cd:6b:96:dc:17:03:df:
         91:88:5f:78:ed:d9:29:db:52:c0:ed:49:c5:fc:3d:9a:d4:ae:
         90:c6:ee:da:bf:4e:42:d6:a6:4a:bc:f1:ef:3e:ac:b3:a8:a1:
         6b:a6:d1:2e:1d:49:4f:25:32:ba:50:94:e4:8a:f1:71:60:f5:
         4b:80:8e:6f:74:91:e4:0d:dc:5d:37:68:fa:d3:9c:74:7e:74:
         d3:6c:fc:a5:46:34:0f:e5:83:b5:9e:f7:fb:6a:30:87:b3:86:
         c8:51:f7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----