Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ryjuRTsJFJSSzs2zomJ6YXTWf3w.roa
File:                     ryjuRTsJFJSSzs2zomJ6YXTWf3w.roa (raw, json)
Hash identifier:          +BUWFLzcEnKRz4n79bIZPomrBcY2rkqW5rpbByVG030=
Subject key identifier:   AF:28:EE:45:3B:09:14:94:92:CE:CD:B3:A2:62:7A:61:74:D6:7F:7C
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018CC86FA39698783E759A90060E83774191
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ryjuRTsJFJSSzs2zomJ6YXTWf3w.roa
Signing time:             Tue 02 Jan 2024 04:30:08 +0000
ROA not before:           Tue 02 Jan 2024 04:30:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        45.138.17.0/24 maxlen: 24
                          2a0f:e380::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:a3:96:98:78:3e:75:9a:90:06:0e:83:77:41:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  2 04:30:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=af28ee453b09149492cecdb3a2627a6174d67f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:92:28:4a:6a:88:5c:a5:ac:3c:3c:71:cf:63:
                    44:b4:95:42:9d:a3:5c:42:4a:4d:16:28:df:bb:53:
                    f8:b7:c8:dc:65:b4:1e:39:74:7e:d8:18:f0:e1:90:
                    0d:37:43:3d:3d:4b:af:ae:a7:26:fd:65:a1:7c:11:
                    42:ee:16:06:b9:3c:e3:4b:65:38:67:80:f2:5e:fb:
                    74:f8:db:25:1a:b8:df:44:38:b0:0b:4b:d7:83:d4:
                    7d:07:39:5d:71:23:27:a2:22:3c:58:3c:ca:3f:b1:
                    ec:ce:f8:18:0b:79:5a:a7:23:3a:68:66:89:7a:be:
                    35:e5:f3:2a:91:ab:fd:0c:53:93:25:e5:b9:70:be:
                    78:0b:05:21:ee:1a:0b:50:f3:f0:65:88:c7:4d:d2:
                    df:bf:21:82:29:f5:c3:95:3a:d6:67:8a:a0:f1:6e:
                    0e:6c:90:e0:cf:ea:35:59:91:fc:0d:6e:6a:71:c4:
                    b0:13:b3:41:39:95:e8:fd:e0:77:25:ba:83:51:b9:
                    64:93:44:c1:86:11:8f:b1:32:75:29:db:22:b8:d4:
                    f6:af:95:30:74:64:94:f6:9c:99:66:53:58:35:62:
                    38:f2:d7:4c:aa:e1:89:5c:11:5b:02:17:43:45:1c:
                    56:0c:97:de:61:51:37:ff:e5:0c:73:7f:c6:ae:ff:
                    23:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:28:EE:45:3B:09:14:94:92:CE:CD:B3:A2:62:7A:61:74:D6:7F:7C
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ryjuRTsJFJSSzs2zomJ6YXTWf3w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.17.0/24
                IPv6:
                  2a0f:e380::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:dd:5b:0d:66:89:d7:7e:61:be:81:12:dd:39:92:9d:89:c8:
         2a:6c:96:3d:69:b6:30:ff:d0:2a:ad:7a:e7:38:b8:16:9d:57:
         c7:d9:a2:73:7c:42:23:ca:9d:8d:f2:5a:78:af:6b:30:5e:a7:
         64:0a:73:08:0a:23:bd:0d:ef:44:42:19:2b:4a:5a:f6:b9:3d:
         b5:99:f9:44:08:21:ff:22:6b:65:17:6c:3f:e7:30:45:32:01:
         74:2e:cd:52:33:22:80:8c:f6:e2:8f:a8:68:22:b1:0d:6f:bc:
         53:ff:e3:bf:8f:68:4f:8e:6b:4a:ff:e2:12:cc:d0:2c:5f:d0:
         f3:5a:98:21:6d:86:d4:7e:7d:93:1e:92:b6:6d:93:0b:ab:94:
         73:bb:7b:31:fd:7f:33:c5:0b:0a:84:71:57:0e:fc:03:30:86:
         cc:25:07:67:c2:e3:d3:9b:e2:00:a1:9b:c6:81:24:bd:a7:21:
         bb:6f:4f:f1:e7:f9:a4:35:cb:2d:f3:5d:74:32:e6:39:81:12:
         0c:b7:c2:b1:75:79:64:5f:da:04:94:9d:1e:cc:4f:cf:62:cc:
         6a:43:01:67:08:67:cb:5e:e2:c6:41:b8:23:8b:af:fd:93:2d:
         29:8a:a4:19:17:d4:39:53:87:de:42:b2:64:44:d7:c1:3e:50:
         2f:61:13:f1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzIb6OWmHg+dZqQBg6Dd0GRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwMTAyMDQzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjI4ZWU0NTNiMDkxNDk0OTJjZWNkYjNhMjYyN2E2MTc0ZDY3ZjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJIoSmqIXKWsPDxxz2NEtJVCnaNc
QkpNFijfu1P4t8jcZbQeOXR+2Bjw4ZANN0M9PUuvrqcm/WWhfBFC7hYGuTzjS2U4
Z4DyXvt0+NslGrjfRDiwC0vXg9R9BzldcSMnoiI8WDzKP7HszvgYC3lapyM6aGaJ
er415fMqkav9DFOTJeW5cL54CwUh7hoLUPPwZYjHTdLfvyGCKfXDlTrWZ4qg8W4O
bJDgz+o1WZH8DW5qccSwE7NBOZXo/eB3JbqDUblkk0TBhhGPsTJ1KdsiuNT2r5Uw
dGSU9pyZZlNYNWI48tdMquGJXBFbAhdDRRxWDJfeYVE3/+UMc3/Grv8j+QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK8o7kU7CRSUks7Ns6JiemF01n98MB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvcnlqdVJUc0pGSlNTenMyem9tSjZZWFRXZjN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALYoRMA0E
AgACMAcDBQAqD+OAMA0GCSqGSIb3DQEBCwUAA4IBAQCy3VsNZonXfmG+gRLdOZKd
icgqbJY9abYw/9AqrXrnOLgWnVfH2aJzfEIjyp2N8lp4r2swXqdkCnMICiO9De9E
QhkrSlr2uT21mflECCH/ImtlF2w/5zBFMgF0Ls1SMyKAjPbij6hoIrENb7xT/+O/
j2hPjmtK/+ISzNAsX9DzWpghbYbUfn2THpK2bZMLq5Rzu3sx/X8zxQsKhHFXDvwD
MIbMJQdnwuPTm+IAoZvGgSS9pyG7b0/x5/mkNcst8110MuY5gRIMt8KxdXlkX9oE
lJ0ezE/PYsxqQwFnCGfLXuLGQbgji6/9ky0piqQZF9Q5U4feQrJkRNfBPlAvYRPx
-----END CERTIFICATE-----