Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Zol7mJzaqao5kdoBN78XY7mpZaY.roa
File:                     Zol7mJzaqao5kdoBN78XY7mpZaY.roa (raw, json)
Hash identifier:          leLar2UZYH7kjDgztQTDqDDdDoNObvxLJNtwMUVHM2Y=
Subject key identifier:   66:89:7B:98:9C:DA:A9:AA:39:91:DA:01:37:BF:17:63:B9:A9:65:A6
Certificate issuer:       /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial:       018CC801927C71E9BB5128D1CE013E5C08BA
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Zol7mJzaqao5kdoBN78XY7mpZaY.roa
Signing time:             Tue 02 Jan 2024 02:29:55 +0000
ROA not before:           Tue 02 Jan 2024 02:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        185.141.193.0/24 maxlen: 24
                          2a04:ac0:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:92:7c:71:e9:bb:51:28:d1:ce:01:3e:5c:08:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
        Validity
            Not Before: Jan  2 02:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66897b989cdaa9aa3991da0137bf1763b9a965a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:14:4a:d2:b5:67:3c:d2:1e:1d:d0:d2:d7:
                    ca:34:29:f0:a6:52:25:0c:85:31:62:bb:af:e4:e9:
                    79:cf:ac:59:48:8e:34:24:65:0f:c6:c9:3e:1a:65:
                    d2:1a:86:b1:45:54:37:d4:7b:55:ed:0b:0a:aa:f0:
                    ac:7f:2b:23:45:84:80:4f:2b:d0:9f:25:5e:b1:76:
                    0b:58:38:96:fb:ea:5c:f4:fe:42:a3:2b:8d:7a:1f:
                    7b:8a:0f:aa:6c:f2:29:34:e0:96:31:5e:e2:89:6c:
                    da:eb:5c:b0:06:59:4f:9e:24:a3:21:6c:77:47:71:
                    c3:6d:07:f0:06:e1:6d:60:bb:d3:7c:55:a0:bc:a7:
                    91:76:a3:81:bc:fc:d8:11:b4:3f:d4:e0:ee:bd:a2:
                    be:2d:21:af:f6:35:a5:c8:bf:4d:8a:7b:bc:28:a9:
                    30:a3:d1:94:33:db:46:2e:8f:be:d0:a1:dd:ab:ca:
                    47:ee:19:d7:15:da:8e:03:bd:6b:37:de:57:35:3d:
                    7d:03:b0:0b:7b:03:84:87:e4:14:c7:f4:bd:cf:77:
                    4f:06:4c:81:89:71:a6:c4:e9:5d:b6:1a:3d:5a:d6:
                    7f:9c:7c:5a:1e:33:1c:63:d8:0e:73:a9:84:13:65:
                    a2:9e:7f:e0:f8:1e:42:25:19:eb:30:e5:95:42:6f:
                    b1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:89:7B:98:9C:DA:A9:AA:39:91:DA:01:37:BF:17:63:B9:A9:65:A6
            X509v3 Authority Key Identifier:
                keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Zol7mJzaqao5kdoBN78XY7mpZaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.141.193.0/24
                IPv6:
                  2a04:ac0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:5f:43:2c:e6:64:28:c8:54:25:21:10:87:14:e6:c3:38:cd:
         39:bb:62:3d:24:bc:c8:3a:9c:86:a4:a1:3e:76:a6:68:67:8b:
         34:7a:c1:9f:93:2e:ad:76:07:22:33:79:19:d7:41:95:d8:7d:
         e2:25:69:3c:e4:22:2d:43:7d:e4:0d:75:7f:25:ea:a4:c8:82:
         11:1a:33:1b:25:85:50:2b:ce:ba:07:97:1a:b9:51:0e:92:e6:
         2a:31:3d:28:2c:5c:10:f5:2c:9f:23:0e:92:97:8d:e0:6d:e5:
         4a:01:e7:9b:d2:73:ce:6d:3f:f5:41:c0:04:b9:e9:e1:51:bf:
         bd:50:42:1c:16:9c:04:99:b3:3f:98:1f:48:78:85:87:17:34:
         96:0a:84:d0:48:50:3f:55:26:3a:ac:37:29:35:c3:8e:c2:11:
         2b:0f:4a:6f:a3:ed:5e:7b:da:aa:ed:6c:36:7b:15:37:65:df:
         80:0f:2a:52:3d:97:69:47:75:4e:d0:77:99:fc:ed:64:e3:b9:
         6c:6c:4e:1f:f1:f3:c3:d9:06:c0:7a:08:fd:fa:4a:5b:98:05:
         bf:75:af:14:a3:2a:d4:30:9d:0c:83:70:43:1d:fc:b9:84:8d:
         0a:84:94:1e:0e:a6:a8:f4:2c:4b:31:c6:e7:1e:30:db:cc:a8:
         c9:1a:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----