Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/U_GtMP2x_0G5oZGJQBGEdVDGjsc.roa
File:                     U_GtMP2x_0G5oZGJQBGEdVDGjsc.roa (raw, json)
Hash identifier:          5Dh5I9/j3YNcyVSmsZ0m9ECaIGXYXbiI60TYaDDzlbQ=
Subject key identifier:   53:F1:AD:30:FD:B1:FF:41:B9:A1:91:89:40:11:84:75:50:C6:8E:C7
Certificate issuer:       /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial:       018CC26D62D78D663896724B0D842C25DCC9
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/U_GtMP2x_0G5oZGJQBGEdVDGjsc.roa
Signing time:             Mon 01 Jan 2024 00:29:57 +0000
ROA not before:           Mon 01 Jan 2024 00:29:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49367
IP address blocks:        185.213.21.0/24 maxlen: 24
                          185.213.20.0/24 maxlen: 24
                          2a11:840:23::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:62:d7:8d:66:38:96:72:4b:0d:84:2c:25:dc:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
        Validity
            Not Before: Jan  1 00:29:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=53f1ad30fdb1ff41b9a191894011847550c68ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:98:54:1d:d4:59:f5:69:2a:72:97:20:69:
                    23:22:09:8d:39:25:49:13:2d:c3:85:56:6b:48:b3:
                    39:13:7e:aa:e6:0b:6a:b4:e2:e6:e9:37:90:ac:5d:
                    76:38:b2:df:c2:09:cf:0b:f2:32:61:87:d0:35:89:
                    f8:0f:b4:33:6b:89:11:fb:15:b7:02:7d:b7:c0:a2:
                    b0:d6:1d:2f:28:d3:ea:5a:71:06:96:95:a5:78:9b:
                    89:e2:99:2e:25:b5:81:f0:a2:f0:65:17:38:d5:c7:
                    ea:6c:ea:48:ea:28:2b:cc:d8:27:bd:87:e3:64:91:
                    cb:a5:36:c0:fe:82:31:6c:ce:fa:a8:c4:bb:b4:23:
                    a8:f8:29:e1:9c:30:86:0a:61:a0:e8:58:43:dc:2f:
                    14:5f:bb:d1:11:0e:6f:e3:1e:cd:53:97:c5:dc:ba:
                    ea:67:bb:6d:9d:bf:ff:1a:70:cc:76:e1:c0:12:0c:
                    11:32:45:52:35:76:38:55:bb:67:c2:ff:70:8e:0b:
                    08:28:ac:1f:a8:9e:6e:fa:51:23:ec:6e:33:75:ec:
                    d8:31:41:4c:4f:4d:6c:54:03:ab:d6:02:f8:f4:c9:
                    09:d0:a9:5c:99:0b:33:2d:ff:cb:c4:a0:9b:97:f3:
                    9c:b2:1a:51:bf:86:1d:e8:ec:7a:9e:a4:19:69:24:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F1:AD:30:FD:B1:FF:41:B9:A1:91:89:40:11:84:75:50:C6:8E:C7
            X509v3 Authority Key Identifier:
                keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/U_GtMP2x_0G5oZGJQBGEdVDGjsc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.213.20.0/23
                IPv6:
                  2a11:840:23::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:46:db:78:68:87:e2:1e:3f:a5:4e:f6:69:ab:a0:df:f0:1e:
         46:b5:a9:8b:4d:1e:1f:3f:d0:fe:64:ed:73:2e:44:32:08:53:
         5c:39:ed:47:af:11:d9:c5:d3:b2:ae:0d:d0:4a:71:46:8b:14:
         27:a0:b3:bf:4f:78:8e:d5:e8:a0:0d:fa:6d:c8:a2:74:4f:81:
         09:8c:2a:c0:96:e5:d4:95:4b:9e:c1:30:c8:f8:38:bb:94:98:
         d3:56:df:c3:29:3d:c8:e6:d3:67:13:8c:85:ac:3e:e5:d1:38:
         60:74:8d:59:b9:09:de:89:84:42:9d:94:21:12:4a:ee:26:17:
         2e:a3:4e:cd:25:4f:cd:76:71:5c:4e:28:a5:cb:1d:3e:73:36:
         62:2a:6f:a8:78:f4:42:a4:f1:53:8b:17:de:20:a2:e5:f1:b8:
         31:34:5a:45:ba:ba:09:0f:1e:ed:7d:e0:77:c6:16:6c:12:a7:
         c8:93:cf:43:cd:75:fd:ac:92:fe:a8:d6:c8:96:99:75:22:aa:
         ae:cb:44:ec:bf:db:ef:12:8e:08:f8:08:78:36:d0:2e:3f:74:
         23:17:4b:af:7e:27:61:47:75:46:63:28:be:06:d1:ed:f3:4f:
         51:f5:28:8a:6b:73:7c:79:bd:bb:94:31:a1:b6:76:80:66:66:
         72:cb:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----