Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/1IMbVxxQaMV20B5dpJJh-5AaMRo.roa
File:                     1IMbVxxQaMV20B5dpJJh-5AaMRo.roa (raw, json)
Hash identifier:          +68hfPuz9GT6w7TMwEJIZla/TrlwaJjsanzyS5SOr5M=
Subject key identifier:   D4:83:1B:57:1C:50:68:C5:76:D0:1E:5D:A4:92:61:FB:90:1A:31:1A
Certificate issuer:       /CN=5a97979db726fe3e693db92d4fa18fd741be7699
Certificate serial:       018FBFA748F76E1BB2C8A53D708C400754B7
Authority key identifier: 5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/1IMbVxxQaMV20B5dpJJh-5AaMRo.roa
Signing time:             Tue 28 May 2024 14:42:42 +0000
ROA not before:           Tue 28 May 2024 14:42:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215008
IP address blocks:        62.106.85.0/24 maxlen: 24
                          2a13:4ec0::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bf:a7:48:f7:6e:1b:b2:c8:a5:3d:70:8c:40:07:54:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a97979db726fe3e693db92d4fa18fd741be7699
        Validity
            Not Before: May 28 14:42:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d4831b571c5068c576d01e5da49261fb901a311a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:b8:f6:18:da:0d:a8:c6:af:04:78:49:c9:
                    86:10:3f:3a:23:2f:13:d7:c9:91:53:c7:3a:ba:f1:
                    34:fc:8a:8c:58:df:7f:ee:15:16:5e:2f:97:0e:3c:
                    3e:1f:1d:19:86:6c:f4:7d:eb:d9:27:7f:4d:d5:f3:
                    52:9c:70:13:d6:28:13:95:97:d3:5d:26:2f:09:4b:
                    73:34:5d:20:5a:51:90:02:ff:11:87:cd:f3:1b:35:
                    d7:6c:91:10:76:b4:f3:98:8c:8d:79:19:fc:d3:19:
                    53:f3:2d:26:68:40:65:75:12:ba:01:81:e9:e8:97:
                    2f:2c:41:6b:54:b9:d8:8f:67:e4:82:87:14:9a:40:
                    9a:45:3b:bf:9f:73:5f:39:a5:4a:98:4c:79:f4:c2:
                    de:1f:50:43:10:b3:45:15:fd:03:e2:c6:c0:53:3d:
                    d2:34:3c:a6:6e:fd:0d:13:74:10:58:a2:fd:a4:cb:
                    8e:c7:98:7e:b2:07:9b:43:dc:e1:ae:96:06:55:80:
                    46:c0:8a:91:06:b2:9d:ac:e1:bb:67:df:2b:42:2c:
                    3a:32:06:5f:fd:f7:6d:66:32:f3:9e:2c:1c:6f:0f:
                    9f:2e:c1:df:2c:91:26:b4:ce:24:dc:88:bc:2c:bc:
                    2e:20:7f:02:5f:0d:be:45:1e:07:7b:fd:41:99:2c:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:1B:57:1C:50:68:C5:76:D0:1E:5D:A4:92:61:FB:90:1A:31:1A
            X509v3 Authority Key Identifier:
                keyid:5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/1IMbVxxQaMV20B5dpJJh-5AaMRo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.85.0/24
                IPv6:
                  2a13:4ec0::/29

    Signature Algorithm: sha256WithRSAEncryption
         6f:bd:53:c9:54:27:6e:cd:a4:0c:da:97:0e:c3:81:b3:b0:9b:
         97:6a:28:ee:91:53:fa:4f:ba:92:d9:22:49:02:38:bd:99:70:
         4e:4a:35:51:b8:33:f9:55:9b:97:8d:7e:95:f9:91:00:a8:fc:
         ea:71:99:61:16:52:06:8c:54:e3:8d:aa:d1:51:13:d2:a8:0a:
         06:5c:36:f2:c4:7e:ff:a1:29:d8:78:fc:be:33:75:54:7a:1d:
         2d:d1:e9:87:a1:0c:1a:8a:49:aa:5a:93:a8:69:12:6a:00:66:
         41:62:95:54:59:0d:06:ff:62:d0:af:3b:e4:9d:43:66:8e:ae:
         c4:0f:86:fd:95:6e:08:35:8e:76:7d:cf:62:31:b6:1a:28:d5:
         3b:47:f2:4f:83:18:99:3d:6f:da:71:0c:ed:2c:9f:bc:59:f0:
         a7:bc:f6:3d:ea:53:d9:d4:e4:73:14:78:d0:06:53:a9:6c:26:
         d9:7f:1e:35:2b:a2:76:96:73:3c:ad:eb:63:05:df:b4:cd:6b:
         56:65:01:46:fd:54:6e:8b:70:54:9c:29:57:e8:12:32:c8:37:
         0a:1c:3e:a9:f1:40:2e:c0:5f:88:97:01:78:99:00:cb:60:8d:
         f5:65:d4:f4:08:7a:bc:57:23:7c:0e:b6:71:9b:44:62:fc:f8:
         45:0f:6a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----