Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/r2iL_vycBtnZcrKFB53C0L4TLSA.roa
File:                     r2iL_vycBtnZcrKFB53C0L4TLSA.roa (raw, json)
Hash identifier:          svOIFUas+I90031d6I9m9byTmGQM3OA9A8xZ3lEKiCk=
Subject key identifier:   AF:68:8B:FE:FC:9C:06:D9:D9:72:B2:85:07:9D:C2:D0:BE:13:2D:20
Certificate issuer:       /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial:       0190FA41A55E20842D01A3348B0A03E4A42D
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/r2iL_vycBtnZcrKFB53C0L4TLSA.roa
Signing time:             Sun 28 Jul 2024 16:52:04 +0000
ROA not before:           Sun 28 Jul 2024 16:52:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215687
IP address blocks:        193.56.200.0/23 maxlen: 24
                          193.56.226.0/23 maxlen: 24
                          2a13:4300::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 19:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:fa:41:a5:5e:20:84:2d:01:a3:34:8b:0a:03:e4:a4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
        Validity
            Not Before: Jul 28 16:52:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=af688bfefc9c06d9d972b285079dc2d0be132d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ae:c0:76:aa:3e:2c:b8:da:cd:fa:12:c8:67:
                    bd:b8:b2:c8:ee:a4:7c:48:42:1f:fa:ba:1d:ea:92:
                    50:cf:6b:7d:b9:cf:54:a6:54:17:b7:b2:72:94:99:
                    7a:c4:e4:14:23:8d:9b:ea:c7:88:39:d1:fa:56:91:
                    05:51:d4:0b:d8:48:e6:b4:b8:e5:55:04:21:63:41:
                    c0:a7:28:a6:fd:e7:6d:d2:a1:0f:9c:96:02:d4:79:
                    77:df:f7:08:8d:6e:0a:0b:d2:7d:b3:5a:eb:ec:ee:
                    c4:31:0f:66:fa:15:9f:af:a9:f6:3a:c6:14:28:a3:
                    6d:7b:2d:7b:9f:f3:73:8d:1c:ef:ea:08:e6:d0:5a:
                    63:a6:89:de:ed:fb:8f:96:c8:3e:b1:06:63:a9:4b:
                    6b:8c:26:ba:48:66:49:d5:a4:95:82:dc:55:63:99:
                    6d:90:0e:df:c9:72:ec:02:d8:23:da:e2:01:85:37:
                    19:2a:90:e1:85:fb:79:ca:49:59:8e:51:c7:43:1d:
                    72:8e:52:ec:3c:c0:c1:df:b9:4e:8a:29:8d:80:dd:
                    e7:f9:2b:92:36:6a:2d:36:dc:22:eb:ff:ff:28:af:
                    7a:ee:e4:65:4b:b7:ff:6c:68:55:20:fe:77:2c:0e:
                    ce:d2:0c:83:94:5c:8f:39:ef:85:f3:a1:7e:fa:d5:
                    01:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:68:8B:FE:FC:9C:06:D9:D9:72:B2:85:07:9D:C2:D0:BE:13:2D:20
            X509v3 Authority Key Identifier:
                keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/r2iL_vycBtnZcrKFB53C0L4TLSA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.56.200.0/23
                  193.56.226.0/23
                IPv6:
                  2a13:4300::/29

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:86:62:6e:d1:08:cd:16:6e:20:6c:8a:02:e5:49:97:a4:
         a8:20:89:9f:c8:b3:0b:b5:df:97:e9:01:8e:85:50:dd:c1:7e:
         d8:47:67:20:07:a2:95:50:d3:a3:08:a6:bd:fe:8f:27:5e:76:
         28:43:f2:b0:08:40:ae:d7:3f:72:c3:a9:08:57:f0:08:9c:3c:
         7d:50:03:1d:e4:4a:40:ef:9f:e1:71:55:87:93:a3:b5:0e:65:
         54:e3:1f:73:13:22:3c:ca:b6:e8:4d:b6:29:cb:4d:15:82:0b:
         e4:58:ea:f7:d4:0d:a0:d1:5b:51:4a:26:37:ff:ce:f5:90:84:
         4a:c6:c7:bc:cc:de:70:67:8c:a4:78:10:37:f2:13:f8:07:1d:
         c7:6d:cf:06:4e:b4:57:0e:ee:9e:63:6a:d0:aa:1e:9f:45:07:
         0c:2f:02:a0:59:93:09:1d:35:f2:3e:c0:db:87:a9:57:7b:06:
         13:e5:f6:c6:cf:c7:9a:19:3e:4d:c0:d8:76:0c:84:78:22:9f:
         9c:49:38:f3:8e:75:18:44:06:09:0c:e5:bc:e0:22:da:22:43:
         f7:53:c8:d8:a9:90:0b:6f:d4:1d:81:19:27:ef:1b:ca:c0:99:
         60:ad:96:94:23:d7:99:6a:10:8a:d2:ff:47:24:79:16:74:9b:
         19:21:e5:0a
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZD6QaVeIIQtAaM0iwoD5KQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMjlhNGIzZjBhM2FmOGJiZWQ2MDI5YThiMjY1ZGM5MzIw
NGU3ZGUwHhcNMjQwNzI4MTY1MjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjY4OGJmZWZjOWMwNmQ5ZDk3MmIyODUwNzlkYzJkMGJlMTMyZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K7Adqo+LLjazfoSyGe9uLLI7qR8
SEIf+rod6pJQz2t9uc9UplQXt7JylJl6xOQUI42b6seIOdH6VpEFUdQL2EjmtLjl
VQQhY0HApyim/edt0qEPnJYC1Hl33/cIjW4KC9J9s1rr7O7EMQ9m+hWfr6n2OsYU
KKNtey17n/NzjRzv6gjm0Fpjpone7fuPlsg+sQZjqUtrjCa6SGZJ1aSVgtxVY5lt
kA7fyXLsAtgj2uIBhTcZKpDhhft5yklZjlHHQx1yjlLsPMDB37lOiimNgN3n+SuS
NmotNtwi6///KK967uRlS7f/bGhVIP53LA7O0gyDlFyPOe+F86F++tUB2wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFK9oi/78nAbZ2XKyhQedwtC+Ey0gMB8GA1UdIwQY
MBaAFP8ppLPwo6+LvtYCmosmXckyBOfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYt
Y2FmMmY3YTViNWY0LzEvcjJpTF92eWNCdG5aY3JLRkI1M0MwTDRUTFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9kN2E0ODQtM2Q0YS00OGJmLWI1MTYtY2FmMmY3YTViNWY0
LzEvX3lta3NfQ2pyNHUtMWdLYWl5WmR5VElFNTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwTjIAwQB
wTjiMA0EAgACMAcDBQMqE0MAMA0GCSqGSIb3DQEBCwUAA4IBAQAVHYZibtEIzRZu
IGyKAuVJl6SoIImfyLMLtd+X6QGOhVDdwX7YR2cgB6KVUNOjCKa9/o8nXnYoQ/Kw
CECu1z9yw6kIV/AInDx9UAMd5EpA75/hcVWHk6O1DmVU4x9zEyI8yrboTbYpy00V
ggvkWOr31A2g0VtRSiY3/871kIRKxse8zN5wZ4ykeBA38hP4Bx3Hbc8GTrRXDu6e
Y2rQqh6fRQcMLwKgWZMJHTXyPsDbh6lXewYT5fbGz8eaGT5NwNh2DIR4Ip+cSTjz
jnUYRAYJDOW84CLaIkP3U8jYqZALb9QdgRkn7xvKwJlgrZaUI9eZahCK0v9HJHkW
dJsZIeUK
-----END CERTIFICATE-----