Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/QsLg4gQDfCaC3952ARnUy-hW0Us.roa
File:                     QsLg4gQDfCaC3952ARnUy-hW0Us.roa (raw, json)
Hash identifier:          lOOhr2qKBSExe6cGp3cjuIrs1ehes2K/eNGMV496PAY=
Subject key identifier:   42:C2:E0:E2:04:03:7C:26:82:DF:DE:76:01:19:D4:CB:E8:56:D1:4B
Certificate issuer:       /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial:       018FE4B2173C2D934864D60F0F72316390B2
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/QsLg4gQDfCaC3952ARnUy-hW0Us.roa
Signing time:             Tue 04 Jun 2024 19:20:27 +0000
ROA not before:           Tue 04 Jun 2024 19:20:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     50766
IP address blocks:        185.51.21.0/24 maxlen: 24
                          2a13:dbc0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e4:b2:17:3c:2d:93:48:64:d6:0f:0f:72:31:63:90:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
        Validity
            Not Before: Jun  4 19:20:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=42c2e0e204037c2682dfde760119d4cbe856d14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:46:77:88:d5:7f:38:05:18:59:d0:8e:63:
                    08:5c:96:c3:0e:16:bb:40:6f:c1:7e:b9:e1:88:ca:
                    c1:f9:2c:1d:8f:c9:be:c3:74:63:34:4f:37:f8:37:
                    90:fa:de:9f:50:a6:c6:40:7d:50:7c:3e:7f:31:91:
                    92:4f:8d:58:c4:05:89:6d:2b:72:50:66:76:eb:55:
                    55:ba:36:a7:37:49:f9:df:31:f4:03:c0:04:1e:90:
                    a6:54:68:f7:b1:ad:97:68:25:b7:90:9c:91:cd:4e:
                    73:88:8a:6d:c0:64:71:38:10:e5:7a:0f:b4:c4:00:
                    83:8d:77:7f:c3:86:54:06:c1:9c:55:a3:41:e5:99:
                    79:b7:2b:8b:63:43:87:e4:c8:bd:9a:87:d9:65:2f:
                    4a:04:59:d0:d1:c3:af:21:35:56:93:49:e9:dc:f0:
                    58:bf:d6:79:3f:eb:81:f1:67:a6:0f:f8:f1:d2:e4:
                    43:b7:09:17:4f:79:04:28:8f:7f:8d:c5:d2:28:35:
                    2b:32:1a:eb:8d:22:9b:9a:1e:a5:1f:6d:b8:1a:31:
                    08:9b:0a:ab:6a:97:1d:20:e5:ef:3d:2c:58:3b:79:
                    0f:b4:6d:2c:b4:84:65:80:4d:24:01:6e:3e:e0:c4:
                    b8:f8:25:22:e1:5c:4b:f6:86:c9:c0:d0:c5:d3:48:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C2:E0:E2:04:03:7C:26:82:DF:DE:76:01:19:D4:CB:E8:56:D1:4B
            X509v3 Authority Key Identifier:
                keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/QsLg4gQDfCaC3952ARnUy-hW0Us.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.21.0/24
                IPv6:
                  2a13:dbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:a3:18:37:ee:69:28:10:ea:77:52:d8:c1:67:c0:09:9e:e0:
         10:e7:9e:6f:da:65:c5:79:d3:f9:03:a4:88:7d:2a:5e:66:5b:
         e4:72:86:41:0f:3a:29:7a:2d:83:e8:a2:a7:e1:45:e5:ce:00:
         ac:fe:47:6d:86:42:96:9e:dd:3d:9c:53:e5:6c:7b:60:a3:c8:
         40:42:f7:70:24:a8:73:03:01:44:5f:86:bd:bc:6a:b7:a4:8f:
         5a:17:80:f1:16:3f:03:9c:59:04:34:a7:09:c6:3c:1e:60:5a:
         22:e8:52:c9:56:b0:7f:a9:b1:6e:f3:64:b7:e2:d5:70:07:83:
         a1:a6:f2:82:43:05:01:c2:8d:93:b4:e1:eb:8e:e9:a6:0a:a2:
         0a:95:27:88:9e:b1:cb:1b:d6:87:9f:c8:86:69:5e:b0:c8:97:
         0f:a1:fa:ff:7b:b3:27:a4:55:ce:79:aa:d9:85:2c:9e:c0:ef:
         9c:79:1f:0f:87:12:54:b2:eb:f5:2d:04:05:38:bd:39:f9:3b:
         87:9e:70:b5:f3:19:cd:e3:51:31:f5:35:20:e6:a5:f3:ac:56:
         0a:d4:be:7a:68:68:04:10:90:4c:29:22:ad:b8:e0:dd:51:d0:
         2e:ad:12:eb:7c:4e:86:5d:e8:d4:14:1c:b0:53:4b:20:79:00:
         35:eb:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----