Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IQWcDsqv0JwfxARfsY8k35G35vk.roa
File:                     IQWcDsqv0JwfxARfsY8k35G35vk.roa (raw, json)
Hash identifier:          CeCLFN10kSHw1J1zgkCGpH0wio7hk6zjr2SWExutoNs=
Subject key identifier:   21:05:9C:0E:CA:AF:D0:9C:1F:C4:04:5F:B1:8F:24:DF:91:B7:E6:F9
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       018CC5011EC5F84667059E4F70C713EA4A4F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IQWcDsqv0JwfxARfsY8k35G35vk.roa
Signing time:             Mon 01 Jan 2024 12:30:34 +0000
ROA not before:           Mon 01 Jan 2024 12:30:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197854
IP address blocks:        45.130.200.0/24 maxlen: 24
                          2a10:7401::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:1e:c5:f8:46:67:05:9e:4f:70:c7:13:ea:4a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Jan  1 12:30:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=21059c0ecaafd09c1fc4045fb18f24df91b7e6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:76:83:d9:ce:2e:71:09:82:c1:f8:e4:64:
                    a0:dc:16:9a:e7:52:4a:41:bf:92:f1:2c:7d:11:cf:
                    8f:e5:f9:c8:b7:1a:a1:cf:6b:fa:3a:f3:8f:19:65:
                    46:7d:72:aa:b3:e1:ca:d9:39:40:09:3f:37:df:7f:
                    a0:39:1d:c7:01:8f:b0:35:f0:23:95:58:38:19:a9:
                    20:41:ac:80:27:da:1f:18:9a:8f:0d:f2:21:0b:9a:
                    9f:6c:94:75:a4:f0:59:da:be:fe:9a:44:98:3d:a3:
                    92:76:c2:e0:91:10:53:92:69:f1:3d:b0:25:04:e0:
                    d2:90:5a:5a:c8:6e:65:2b:39:3f:a1:82:14:dc:fd:
                    25:26:71:1c:71:d3:f5:b1:60:66:d8:e9:6b:a1:ed:
                    10:52:c5:2c:17:c6:a9:3f:6e:18:97:b3:3e:2a:8a:
                    45:bd:9d:b8:b9:d4:5a:42:b0:7c:a8:de:c2:4d:18:
                    c5:d6:bc:e9:33:86:88:78:41:3e:0b:96:83:e9:2e:
                    dc:b6:36:95:c6:ae:85:91:3b:04:6e:a0:c0:e3:c0:
                    2a:86:6b:51:e4:7a:cc:25:b0:56:94:58:49:31:10:
                    a2:3f:38:42:13:24:5c:49:e1:d2:7f:1e:12:45:25:
                    a0:fa:a5:82:44:44:e9:63:f1:2f:e0:1e:69:2b:0a:
                    c8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:05:9C:0E:CA:AF:D0:9C:1F:C4:04:5F:B1:8F:24:DF:91:B7:E6:F9
            X509v3 Authority Key Identifier:
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IQWcDsqv0JwfxARfsY8k35G35vk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.200.0/24
                IPv6:
                  2a10:7401::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:9a:07:bd:6a:0c:af:c6:57:e4:34:07:da:f5:22:a4:7a:47:
         30:5c:e8:d7:0b:2b:4d:20:37:80:91:3b:9f:f1:f9:9b:03:8e:
         41:73:70:ef:67:0f:85:7c:0f:95:17:9c:7a:b8:9d:12:a5:4b:
         92:14:3b:73:f6:8e:9a:57:ea:84:c0:8b:b9:b2:08:a6:48:39:
         e1:32:ad:80:12:42:f9:42:f2:69:31:19:3e:22:db:4c:79:19:
         df:4e:f2:de:f9:34:3f:70:79:1b:72:74:af:21:d4:93:d1:6c:
         f2:74:2b:77:61:ad:d8:3d:31:f4:72:c2:be:3e:7a:1e:e4:9a:
         66:35:a2:a5:71:d9:07:18:b9:e0:26:24:77:2b:06:4f:50:b4:
         45:8f:44:eb:03:cc:9a:74:3d:bc:02:d3:d1:6d:1f:c1:47:b2:
         9d:a6:08:65:cc:fd:6b:c6:50:6e:f7:e2:02:73:cb:f4:01:9b:
         e3:6b:72:60:1b:0a:8f:49:ce:f8:36:56:57:fd:a4:33:54:14:
         bb:04:ac:e8:f8:47:f6:41:1d:30:9e:51:82:8f:68:d3:4e:e6:
         40:23:ca:1a:15:67:1e:cf:b9:5a:4a:56:a2:d6:8f:62:db:f4:
         f0:79:c6:a6:0f:98:7e:65:82:9d:8d:e2:50:cf:68:d5:bf:3e:
         69:c2:ce:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----