Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/I9DY8VT-KAurtxLIX6CQIadJ_B0.roa
File:                     I9DY8VT-KAurtxLIX6CQIadJ_B0.roa (raw, json)
Hash identifier:          mxxcv2uCMotRHKPk9FSatxUH44KgB6K4J+k22KU5FW8=
Subject key identifier:   23:D0:D8:F1:54:FE:28:0B:AB:B7:12:C8:5F:A0:90:21:A7:49:FC:1D
Certificate issuer:       /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial:       018CC3B70B411D77EBD59C6758DD11B8DD9E
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/I9DY8VT-KAurtxLIX6CQIadJ_B0.roa
Signing time:             Mon 01 Jan 2024 06:30:02 +0000
ROA not before:           Mon 01 Jan 2024 06:30:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197157
IP address blocks:        178.249.136.0/21 maxlen: 21
                          178.249.140.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:0b:41:1d:77:eb:d5:9c:67:58:dd:11:b8:dd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
        Validity
            Not Before: Jan  1 06:30:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=23d0d8f154fe280babb712c85fa09021a749fc1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:af:ec:41:05:f1:64:68:be:65:a0:39:5f:
                    b0:66:9e:20:76:f3:00:0a:42:d4:e4:6a:73:dc:15:
                    dc:97:9b:9a:8f:e9:8f:d1:5c:ed:99:f0:15:5c:99:
                    ac:51:9a:3e:ad:c5:76:7e:95:0c:4f:9a:d8:18:69:
                    fa:38:b4:23:43:9f:e6:e5:ea:fd:26:2b:1f:41:66:
                    0b:94:af:ed:c4:2c:92:4b:16:26:57:00:7a:72:4f:
                    b7:2f:e9:7e:10:de:4b:5a:cb:1b:dc:f3:1a:5c:d2:
                    a5:68:91:60:54:47:3c:d0:75:39:07:5a:85:c8:34:
                    78:b3:1b:76:8c:64:7b:dd:1a:77:f7:18:88:63:bb:
                    52:89:6b:51:c3:4a:06:71:ff:d3:b8:0e:66:b6:9f:
                    23:fe:6e:f5:63:90:d7:6b:82:6b:32:be:57:87:38:
                    f5:74:9b:e1:a4:07:4e:ba:2b:48:6e:d1:0c:12:77:
                    19:33:fb:bc:aa:58:79:58:62:c3:3e:72:f8:96:ad:
                    5b:01:32:5c:68:9e:ae:8d:72:c7:6e:0a:cb:1a:5c:
                    bf:5c:ec:2c:08:13:e5:37:fd:0c:b7:66:c3:33:b9:
                    53:f0:c0:35:62:42:dc:b2:23:07:0a:b5:79:7e:29:
                    36:13:d9:97:20:a7:ed:87:0b:5a:31:a2:45:90:1f:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D0:D8:F1:54:FE:28:0B:AB:B7:12:C8:5F:A0:90:21:A7:49:FC:1D
            X509v3 Authority Key Identifier:
                keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/I9DY8VT-KAurtxLIX6CQIadJ_B0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.249.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:9d:57:c5:63:ff:28:c1:0a:22:74:52:d1:b1:b4:13:d3:
         33:cd:b5:bc:4c:07:5d:e4:bf:fb:6d:31:ff:aa:8d:5e:92:f8:
         5a:77:e2:df:e7:f8:31:d8:61:3f:79:f9:d5:70:9d:44:7e:45:
         33:47:1d:d4:11:28:aa:6d:94:97:1f:96:5b:b3:ca:ff:8f:5e:
         8a:63:96:b4:2d:2e:5b:f9:85:f1:48:c0:6c:58:79:a2:0f:62:
         e8:7d:6b:f4:f3:6d:50:c1:44:d3:05:31:b7:64:16:74:f5:91:
         62:5b:9b:aa:ef:c8:5a:1f:22:dc:cc:42:14:b3:c0:a1:99:75:
         b5:60:e1:27:da:a0:d9:39:a9:cc:2b:e4:95:98:f8:ce:86:8a:
         47:13:d3:cf:3f:7a:b5:ca:8d:87:f1:7a:39:68:44:95:98:52:
         e3:87:95:29:32:fc:df:bc:5a:1f:60:aa:ad:61:46:5d:43:78:
         c8:2f:cf:f0:d8:c2:0c:b0:90:41:34:8a:41:62:1d:ab:6f:e6:
         bf:b0:a6:7d:96:7f:91:da:0e:b7:2d:f3:de:fb:65:99:df:8f:
         95:e7:d0:e6:8b:15:c7:17:f5:98:3b:34:27:0e:bc:5d:0f:d3:
         83:51:f2:5e:72:08:fc:f9:30:d2:7c:86:92:0a:41:20:70:f1:
         33:14:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----