Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/8X_7nUr4KOgK2RkTveGii6hWVYY.roa
File:                     8X_7nUr4KOgK2RkTveGii6hWVYY.roa (raw, json)
Hash identifier:          IRtoqhjSd2VrbK8AmxXDd7U03uXEoK1qOfQXk5MoyT4=
Subject key identifier:   F1:7F:FB:9D:4A:F8:28:E8:0A:D9:19:13:BD:E1:A2:8B:A8:56:55:86
Certificate issuer:       /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial:       018CC794E38C3845265BB2C8A3165B3DB65A
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/8X_7nUr4KOgK2RkTveGii6hWVYY.roa
Signing time:             Tue 02 Jan 2024 00:31:12 +0000
ROA not before:           Tue 02 Jan 2024 00:31:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208094
IP address blocks:        45.141.55.0/24 maxlen: 24
                          2a05:4741:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 21:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:94:e3:8c:38:45:26:5b:b2:c8:a3:16:5b:3d:b6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
        Validity
            Not Before: Jan  2 00:31:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f17ffb9d4af828e80ad91913bde1a28ba8565586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:94:fb:41:4e:aa:a6:24:59:b6:cb:00:ea:76:
                    ab:5b:08:f4:d0:6b:e3:31:53:5a:39:e7:e0:51:51:
                    5f:f9:c2:04:98:79:a1:6c:c6:7d:d5:38:6c:5f:c4:
                    2e:6f:ab:e5:f7:f2:fe:5b:63:b5:8f:82:bb:91:9f:
                    55:3b:ce:b7:a9:d2:59:04:c9:21:d2:d9:f3:72:bf:
                    c8:ae:1d:3c:e7:c0:24:e3:fa:d1:ca:13:ed:08:44:
                    9b:42:48:2e:35:88:13:f1:c0:e6:63:2d:93:0a:7c:
                    30:ce:a5:54:20:0d:ea:00:7b:a5:a3:f5:d5:08:3e:
                    21:db:6e:e6:4f:dd:34:bd:62:b3:cf:f1:b3:45:ae:
                    c2:ed:af:4d:f8:72:ba:44:0d:49:9d:3e:c7:57:67:
                    f0:9a:00:47:b4:49:61:38:2f:ef:2d:ef:a1:75:8f:
                    4d:7e:b2:da:48:0c:5d:ac:ef:b2:5a:a9:f3:d5:56:
                    95:99:89:da:c3:9a:f2:a1:08:1e:19:61:8f:b3:20:
                    70:fa:d3:ba:37:c5:ad:82:24:c7:e7:a5:de:5e:d7:
                    fa:31:86:14:8e:04:8e:2f:c7:9f:af:fb:7e:50:01:
                    0b:f4:41:4a:88:75:5a:d1:0e:1d:7c:6e:69:0e:5c:
                    28:12:2c:28:f9:f8:5b:24:51:45:34:0d:64:92:b6:
                    f9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7F:FB:9D:4A:F8:28:E8:0A:D9:19:13:BD:E1:A2:8B:A8:56:55:86
            X509v3 Authority Key Identifier:
                keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/8X_7nUr4KOgK2RkTveGii6hWVYY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.55.0/24
                IPv6:
                  2a05:4741:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:a2:4f:fd:d3:90:97:76:54:88:10:1c:1e:b4:f1:04:97:ea:
         f4:53:db:c7:ce:45:2d:c0:5f:0a:3a:65:f9:34:be:6a:32:16:
         4b:68:2d:33:34:da:97:ce:92:d2:12:34:ea:72:e8:f0:4e:01:
         6f:7c:3a:3f:57:81:79:24:f7:95:59:a3:56:0a:72:8d:6e:ac:
         a7:c2:ae:b7:be:58:05:e2:63:82:69:dc:08:85:a6:28:51:b0:
         75:ce:f6:aa:52:8a:37:7a:91:4c:dd:7f:5c:ef:b6:53:bc:39:
         5d:d1:18:22:37:02:30:ac:8f:83:90:34:22:65:12:0a:a0:3a:
         a5:d7:67:3d:ed:b6:58:37:2b:6c:fe:fb:c8:14:2f:84:eb:e2:
         c9:cb:ee:6d:11:e8:f6:0e:9e:4a:f4:48:cd:25:e5:86:d5:83:
         3c:b9:7e:0b:c9:23:d5:fc:fc:7a:e2:e9:56:bf:e3:cb:f6:7c:
         1a:02:42:81:3d:00:0c:ed:d5:89:be:3b:06:f7:8d:40:44:3b:
         a8:8c:c1:b1:28:b9:8e:5b:97:46:42:e7:2e:77:9a:66:71:59:
         91:d6:85:49:ea:f8:55:a2:a6:8c:09:9d:ff:28:ba:9b:31:50:
         9c:11:b6:e7:30:49:e9:7e:f9:8c:12:b8:b3:53:6a:24:4c:25:
         47:0d:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----