Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa
File:                     9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa (raw, json)
Hash identifier:          Ck4IhA/LVj6yeY7ypf62CEmT7z98j+tSvQrn7SZ/UfQ=
Subject key identifier:   F4:11:04:11:32:A8:D5:A3:77:4D:22:F9:A5:46:8A:76:1F:06:9D:A4
Certificate issuer:       /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial:       018CC2DAFFF2ED0937858DD524BE98C0CC60
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa
Signing time:             Mon 01 Jan 2024 02:29:41 +0000
ROA not before:           Mon 01 Jan 2024 02:29:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     34182
IP address blocks:        91.238.144.0/24 maxlen: 24
                          2001:67c:938::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:ff:f2:ed:09:37:85:8d:d5:24:be:98:c0:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
        Validity
            Not Before: Jan  1 02:29:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f411041132a8d5a3774d22f9a5468a761f069da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:a2:8e:6b:47:19:72:0f:1e:6d:ac:f1:cb:
                    13:f5:c8:5f:64:9f:0e:87:8c:3a:54:c4:c7:d3:42:
                    e0:08:7e:65:c2:03:fe:4c:9d:49:aa:d8:96:33:02:
                    af:c8:5c:ad:09:a0:6f:87:a9:16:f9:65:f1:1c:25:
                    c8:f5:59:24:72:c4:17:19:12:74:95:97:fa:40:b9:
                    66:5a:f0:49:83:48:51:bf:c8:8b:f9:b2:67:52:dd:
                    cb:e4:f2:2b:29:c4:40:86:bf:1b:40:7f:14:c3:d2:
                    55:d7:dc:d4:bf:49:8b:92:4c:a8:53:dc:af:ce:dd:
                    11:56:61:16:a6:e6:c7:85:23:40:ae:3a:be:32:46:
                    32:72:80:d2:e8:ec:85:57:1f:8b:ee:a6:33:51:9f:
                    f5:7b:df:e8:8e:01:ce:33:26:44:ee:d9:6e:0e:6a:
                    cd:d7:26:26:bb:f8:ce:d2:9b:bb:a3:c7:9b:85:71:
                    f1:03:17:37:6b:08:4e:f4:cd:4c:46:62:58:63:29:
                    fa:8b:75:6d:8a:42:7c:5b:14:44:0a:97:35:90:eb:
                    7a:d1:7c:0a:f2:aa:8a:8d:d6:4d:96:31:89:ea:b2:
                    c5:ff:c3:c1:78:88:9d:e8:e4:80:74:eb:c1:e0:ee:
                    ff:31:cf:1f:76:c7:5e:10:8c:9d:81:e5:39:4c:1b:
                    7b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:11:04:11:32:A8:D5:A3:77:4D:22:F9:A5:46:8A:76:1F:06:9D:A4
            X509v3 Authority Key Identifier:
                keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/9BEEETKo1aN3TSL5pUaKdh8GnaQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.238.144.0/24
                IPv6:
                  2001:67c:938::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:fc:f6:07:c2:64:85:6c:65:09:45:28:e2:32:3a:43:e3:
         c0:76:9a:31:d6:60:47:b6:4a:8c:d0:0e:81:b3:b7:0e:a9:e9:
         13:5d:97:78:c9:22:e5:f9:6c:1c:c7:94:9b:d6:80:38:86:0a:
         3c:b7:7b:0a:36:76:40:87:41:bb:e7:4b:3b:b1:50:52:c4:3b:
         3c:cb:32:bd:4d:e1:e6:43:58:bf:ea:fa:cd:22:1d:ac:49:ff:
         9f:cc:ff:49:18:a8:7a:40:32:64:43:6f:81:5f:31:22:ec:fc:
         69:b6:61:fb:d1:cc:87:08:86:00:09:e4:35:bf:05:47:51:97:
         24:53:f6:57:4b:3c:21:5e:0b:47:66:b3:c9:77:14:2c:0a:1b:
         95:e4:9e:ec:4a:40:f8:94:12:05:87:a2:9f:85:9d:2c:a4:55:
         0f:b6:45:35:b5:97:40:8e:01:de:fc:7b:36:c0:13:2f:7c:13:
         2e:c3:be:84:9f:30:56:55:91:14:a3:67:e3:cf:dc:d7:60:6b:
         19:a0:4b:93:2d:e7:ff:04:b9:e8:d8:f4:15:74:47:1e:8e:7b:
         8a:ef:df:70:af:6d:8b:04:84:14:f7:16:61:80:07:f7:f1:5c:
         61:d1:37:fd:27:07:45:e0:83:00:75:8f:50:70:70:4a:2e:3c:
         bb:73:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----