Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/Ny-n9deG5AfM5sWz7Hn9pA380eo.roa
File:                     Ny-n9deG5AfM5sWz7Hn9pA380eo.roa (raw, json)
Hash identifier:          rzx9WIeETiPIQudPrDbKqrRjUNx9eRRPJJDjzuvnNhE=
Subject key identifier:   37:2F:A7:F5:D7:86:E4:07:CC:E6:C5:B3:EC:79:FD:A4:0D:FC:D1:EA
Certificate issuer:       /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial:       018CC8DF30595AF654AAED45829EDA095057
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/Ny-n9deG5AfM5sWz7Hn9pA380eo.roa
Signing time:             Tue 02 Jan 2024 06:31:59 +0000
ROA not before:           Tue 02 Jan 2024 06:31:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201575
IP address blocks:        193.228.1.0/24 maxlen: 24
                          2a12:e342::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:30:59:5a:f6:54:aa:ed:45:82:9e:da:09:50:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
        Validity
            Not Before: Jan  2 06:31:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=372fa7f5d786e407cce6c5b3ec79fda40dfcd1ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:7a:19:4c:ef:49:f8:74:3b:ed:4c:d9:dd:
                    e5:3f:dd:2d:d6:60:0a:46:28:f7:60:dc:80:cb:98:
                    62:a8:19:46:98:0e:88:79:f9:a5:68:ca:70:67:36:
                    70:be:f7:34:8c:0c:cf:c5:e0:e2:e5:6c:de:b8:b6:
                    94:f9:67:a0:be:50:44:fa:7e:93:28:ef:36:36:7d:
                    a9:b9:ca:2e:35:5d:7b:42:81:d6:a8:01:c1:f2:6b:
                    97:be:22:88:ee:d9:78:7c:75:03:f8:20:fe:b7:b5:
                    82:88:3a:0f:c3:42:5a:4b:0e:fb:c5:04:d2:01:0e:
                    c1:41:f8:a8:b8:4a:2e:50:cc:98:83:6b:03:f5:fc:
                    98:44:47:57:51:28:de:72:3e:82:6d:fa:dd:f8:be:
                    ff:26:9b:da:e8:16:e6:2b:8c:d8:24:d2:2c:c2:ab:
                    bb:ef:91:e0:ea:ee:3d:91:05:a5:22:72:b8:1f:ec:
                    af:d5:0e:40:d2:7b:c7:ec:37:39:5a:53:5c:ff:48:
                    5b:e2:fc:e2:77:62:07:cc:a1:0b:ff:ad:a6:d9:48:
                    19:f5:d9:c9:ae:84:f1:6c:3d:b5:33:66:fd:91:7b:
                    b9:8c:bf:30:ac:f1:75:39:08:d8:6f:fe:2d:ae:e5:
                    db:35:2f:c2:a9:10:93:ff:1b:37:bb:73:58:e0:ad:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2F:A7:F5:D7:86:E4:07:CC:E6:C5:B3:EC:79:FD:A4:0D:FC:D1:EA
            X509v3 Authority Key Identifier:
                keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/Ny-n9deG5AfM5sWz7Hn9pA380eo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.1.0/24
                IPv6:
                  2a12:e342::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:97:e4:43:91:93:02:3b:5c:09:71:aa:8b:50:30:b0:eb:42:
         2f:d8:3d:05:b5:e7:6a:d9:c8:35:6b:1a:77:d2:b8:12:5e:ac:
         3d:a4:11:be:71:70:21:2a:b2:e5:bb:fd:9a:2f:fa:6c:e0:75:
         c8:0c:c5:1f:d4:50:2b:d9:06:32:e8:d5:ae:36:28:fc:e8:84:
         9f:84:da:37:7d:a9:9e:b1:38:b8:3d:ce:2e:af:ea:fa:7d:fe:
         c3:e4:f3:79:e9:a7:24:6c:36:06:48:9e:e3:c5:92:ba:da:33:
         84:0a:0d:c6:ad:da:ca:72:98:cf:39:29:b4:b9:02:ae:85:48:
         1c:a0:a2:8c:3d:c0:87:81:a2:9a:5c:63:12:46:68:7e:43:47:
         52:7b:4a:41:73:68:f8:24:38:17:af:f6:e9:23:7a:75:17:2d:
         f4:69:d4:b4:2c:11:09:60:e4:59:f5:f0:b8:cf:36:54:a5:e3:
         13:81:9e:f3:c1:8e:7c:38:62:48:cf:c2:29:44:e2:cd:e9:b0:
         cf:c4:72:39:ab:56:0e:0e:a1:4c:0c:5a:ed:89:a4:54:9f:69:
         59:4d:1a:0c:73:93:93:53:8b:cf:25:c4:cd:85:cb:2b:e7:ec:
         d8:c9:a6:40:38:01:f6:c0:de:c1:98:11:1b:34:f3:a3:ea:0d:
         3c:3b:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----