Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/k43Vns8Jbsruig421RH-iw0YKkw.roa
File:                     k43Vns8Jbsruig421RH-iw0YKkw.roa (raw, json)
Hash identifier:          YeC4iy8SibCXOaCQ0yO0VcjKFaZmSnM4e94UCPQgWIk=
Subject key identifier:   93:8D:D5:9E:CF:09:6E:CA:EE:8A:0E:36:D5:11:FE:8B:0D:18:2A:4C
Certificate issuer:       /CN=5e4f1a32a37e083900aba561708e52ab234e3a38
Certificate serial:       018D3CE6BF1CB682EB2A907EA1117C13CDCF
Authority key identifier: 5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/k43Vns8Jbsruig421RH-iw0YKkw.roa
Signing time:             Wed 24 Jan 2024 19:16:11 +0000
ROA not before:           Wed 24 Jan 2024 19:16:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205032
IP address blocks:        185.100.164.0/22 maxlen: 22
                          2a0d:d0c6::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:3c:e6:bf:1c:b6:82:eb:2a:90:7e:a1:11:7c:13:cd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e4f1a32a37e083900aba561708e52ab234e3a38
        Validity
            Not Before: Jan 24 19:16:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=938dd59ecf096ecaee8a0e36d511fe8b0d182a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:51:3e:e1:81:17:f2:b4:60:c4:97:f6:eb:
                    97:6c:9a:1b:a0:11:3b:a8:fa:6f:e5:8c:35:7f:12:
                    3c:53:06:11:bc:9a:33:25:07:cc:f4:8d:5e:4e:59:
                    82:ac:ef:3e:97:d7:fe:cc:84:24:e9:3d:2d:a6:bc:
                    c8:1c:7f:b0:dd:1b:19:1c:a0:88:ce:4f:30:7f:60:
                    21:fb:6a:6a:23:9e:72:20:90:76:89:05:15:7f:1d:
                    ca:5f:bf:31:68:1e:02:8c:f9:bf:1d:8f:36:8b:51:
                    ff:0d:8e:8f:7d:7c:82:87:7d:d2:67:2b:a2:44:79:
                    e3:eb:96:49:c9:b7:4a:5c:98:b0:aa:74:63:3f:5e:
                    02:2f:a3:fc:8a:7a:44:03:40:b7:e2:eb:66:d1:d9:
                    ba:a6:9c:78:14:ca:0a:be:e0:03:17:e8:71:37:e8:
                    50:08:3d:ae:66:1c:79:f0:90:70:a7:21:de:75:b2:
                    02:81:08:eb:36:d3:7e:48:c2:36:dc:c4:a6:8f:fd:
                    b8:8b:b9:87:9a:aa:68:81:f9:67:bd:56:96:48:b7:
                    04:14:b7:c2:b9:91:3b:3a:6f:82:8e:16:9d:67:3d:
                    36:d4:ac:a7:dc:c7:5b:bd:7e:c9:d3:c8:2c:be:3d:
                    70:34:8a:d8:49:64:0a:a4:dc:9b:a0:60:df:8f:91:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8D:D5:9E:CF:09:6E:CA:EE:8A:0E:36:D5:11:FE:8B:0D:18:2A:4C
            X509v3 Authority Key Identifier:
                keyid:5E:4F:1A:32:A3:7E:08:39:00:AB:A5:61:70:8E:52:AB:23:4E:3A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/k43Vns8Jbsruig421RH-iw0YKkw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3ef921-29ed-40cf-b454-4c2acb78309e/1/Xk8aMqN-CDkAq6VhcI5SqyNOOjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.100.164.0/22
                IPv6:
                  2a0d:d0c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:f8:a2:87:ff:1e:14:a2:ea:f2:c8:b8:36:fd:fa:12:63:1e:
         a2:45:a8:e9:38:19:64:1f:82:2b:b3:89:ac:45:a2:7b:7f:49:
         0e:8b:ba:76:a0:a0:bb:c6:a5:61:72:b9:95:d0:7e:d3:95:2b:
         21:4d:bc:4f:a3:0b:91:2a:0b:b4:47:33:79:2a:53:f0:69:f8:
         a7:a2:94:d1:3d:5e:b9:75:6c:ca:2b:2f:60:1c:2d:1e:10:fc:
         78:bc:5f:da:6c:6a:18:3c:9d:ed:12:22:91:74:08:e9:98:89:
         61:cb:56:46:fa:3a:9e:29:46:28:12:cc:d5:b4:d2:ef:67:8d:
         80:41:d8:e3:2d:3d:e0:fa:4b:fe:5c:ba:08:e0:61:e1:95:23:
         00:9d:c3:c2:7f:b5:58:75:49:93:46:53:23:a6:da:63:e0:a7:
         b3:3e:05:50:0c:a7:2f:af:bb:70:3b:d0:b3:9f:7a:54:64:82:
         97:0e:89:2b:78:9c:d9:bd:a7:42:36:64:aa:15:ba:b8:ba:e8:
         d5:04:d6:d3:2e:a8:a8:d0:3e:08:ba:a7:c6:7c:d8:e7:8e:70:
         e2:7c:d5:d7:2f:d8:8a:e6:34:63:6b:a9:2b:4f:2b:df:0b:7c:
         d9:e3:7c:3e:e6:9b:c8:d7:df:17:a1:66:a2:3e:37:dc:4e:a9:
         2f:43:94:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----