Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/1-av5a6gJpoJHZ_N_6MDa4Tc6nVo.roa
File:                     1-av5a6gJpoJHZ_N_6MDa4Tc6nVo.roa (raw, json)
Hash identifier:          spfdsMcTsewX5m5o7eQd6vQaIlFc8/l0bgvBTIXtP2Y=
Subject key identifier:   F9:AB:F9:6B:A8:09:A6:82:47:67:F3:7F:E8:C0:DA:E1:37:3A:9D:5A
Certificate issuer:       /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial:       018CC86EF009067FD080E91ED1EE93ACBBCB
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/1-av5a6gJpoJHZ_N_6MDa4Tc6nVo.roa
Signing time:             Tue 02 Jan 2024 04:29:22 +0000
ROA not before:           Tue 02 Jan 2024 04:29:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     205219
IP address blocks:        217.197.100.0/24 maxlen: 24
                          2a09:b7c0::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 17:05:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6e:f0:09:06:7f:d0:80:e9:1e:d1:ee:93:ac:bb:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
        Validity
            Not Before: Jan  2 04:29:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f9abf96ba809a6824767f37fe8c0dae1373a9d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:8a:3c:64:19:14:8d:a2:6c:a6:96:2b:93:
                    e2:84:19:33:25:00:34:69:bd:e9:dd:e2:0e:d4:9c:
                    0b:ef:2d:2e:e9:35:57:7e:f8:1e:fc:2a:d1:15:2a:
                    dd:da:3e:21:a1:fb:ee:ee:a8:29:23:4f:70:98:be:
                    b5:1b:4e:0c:66:e0:d9:f3:37:9a:03:22:ce:b6:a3:
                    1a:c4:4b:d6:32:21:24:0f:db:aa:23:98:b7:6b:c2:
                    0e:a4:09:ef:a4:76:9a:04:45:c9:14:f9:be:f3:71:
                    e6:0a:57:86:6e:dc:ba:81:eb:ad:0b:d9:c7:1c:b9:
                    6a:9d:3d:82:d5:78:43:2e:0d:b4:17:6c:f5:aa:6c:
                    3a:e8:89:b4:34:b6:fc:b4:21:c9:93:d1:d3:f4:2e:
                    6a:bc:bc:ae:b5:cd:c4:0b:79:c1:4f:e8:22:6b:41:
                    63:3f:7e:fe:89:55:61:00:dc:2b:80:e1:3f:8c:a7:
                    4d:b9:18:6a:6a:1c:77:53:e8:6e:38:ab:ed:bb:d4:
                    8e:53:d2:da:7b:00:b5:63:d9:a7:ba:64:75:4a:3c:
                    b1:44:3b:13:ae:91:a9:71:a5:fa:9b:18:9e:07:71:
                    30:b8:52:84:e7:0e:24:9f:2c:89:45:ab:39:21:05:
                    3c:eb:b7:fd:0c:73:eb:7a:bc:cb:8a:24:16:2b:0d:
                    55:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AB:F9:6B:A8:09:A6:82:47:67:F3:7F:E8:C0:DA:E1:37:3A:9D:5A
            X509v3 Authority Key Identifier:
                keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/1-av5a6gJpoJHZ_N_6MDa4Tc6nVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.197.100.0/24
                IPv6:
                  2a09:b7c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         0a:b0:3d:09:23:0e:ad:a2:58:ab:46:a9:45:a2:9b:62:c0:5c:
         7a:4d:73:4a:5c:31:40:5d:4d:92:fb:a5:a4:9e:1f:f8:03:88:
         32:b8:05:31:7c:e4:dc:1d:2a:e7:26:7c:27:3d:db:88:59:97:
         30:56:71:0b:50:18:9c:aa:5e:bf:23:2b:b5:b7:ac:67:a6:17:
         02:96:7d:99:c7:27:bf:a7:70:9b:e7:92:64:4f:77:a2:cd:ef:
         b9:ee:99:3c:33:a2:99:fe:5d:c4:a3:ea:58:35:1c:50:19:fc:
         6a:38:3a:f6:26:60:3b:d0:c4:ba:4c:2a:70:1a:66:52:d4:fb:
         6c:b5:ac:31:1b:ac:8b:00:f8:64:ad:68:61:9e:b7:17:ef:d1:
         fa:85:54:73:ff:2f:51:ba:a7:b7:f6:f2:91:8e:73:69:26:48:
         3e:b4:9f:1b:e4:73:85:40:5b:7e:6a:80:c0:4f:f2:c5:88:b2:
         5d:c7:e3:0f:24:f1:a3:ff:c9:1b:b5:67:f9:84:ae:01:58:71:
         ca:ad:8e:7c:11:cb:8d:f1:3e:de:6f:3c:ac:80:b1:4e:95:ff:
         41:70:54:cb:1c:bb:8b:70:15:56:0d:54:ec:eb:b2:f2:7e:7e:
         42:d7:aa:fa:bf:15:0b:46:a7:fa:e1:5d:f1:38:78:5e:c2:27:
         d1:75:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----