Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/e4uQmAUQkEeylpEyBl9FPTIAEkA.roa
File:                     e4uQmAUQkEeylpEyBl9FPTIAEkA.roa (raw, json)
Hash identifier:          sVSsrsZX/H/UlpvcgJIVrhXmt+G3Aidanzii2dawldQ=
Subject key identifier:   7B:8B:90:98:05:10:90:47:B2:96:91:32:06:5F:45:3D:32:00:12:40
Certificate issuer:       /CN=c8c2c7314593042cf74210f7f03be7106c224f89
Certificate serial:       018CC2DAE63346E2290E623845CC7BB18CAF
Authority key identifier: C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/e4uQmAUQkEeylpEyBl9FPTIAEkA.roa
Signing time:             Mon 01 Jan 2024 02:29:34 +0000
ROA not before:           Mon 01 Jan 2024 02:29:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209286
IP address blocks:        185.233.219.0/24 maxlen: 25
                          2a10:4e40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:da:e6:33:46:e2:29:0e:62:38:45:cc:7b:b1:8c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c2c7314593042cf74210f7f03be7106c224f89
        Validity
            Not Before: Jan  1 02:29:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7b8b909805109047b2969132065f453d32001240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:56:2e:f8:33:a1:e6:ef:13:3d:a9:f8:cc:
                    66:34:88:3e:31:3d:4e:cb:8c:36:f8:d4:43:c3:93:
                    c0:a1:65:d2:be:61:e0:bc:d1:33:36:fb:56:60:39:
                    d9:d7:ae:92:59:7e:fa:4a:ae:fb:d5:da:a4:56:47:
                    1a:7e:fb:df:b9:69:87:48:0a:c8:ba:6d:da:a4:c7:
                    a6:3e:14:15:e5:a5:ae:1b:c3:1f:f7:25:31:e1:5e:
                    d3:b4:f9:e7:25:9a:ed:5f:6d:f4:64:a5:27:b5:b9:
                    bc:30:18:d7:9e:15:95:3f:27:9e:d1:41:e5:93:cf:
                    5b:c2:8c:03:94:24:62:de:44:77:70:5e:c6:da:65:
                    e8:0c:50:0f:5c:34:ce:d2:36:54:9a:87:7f:f9:e5:
                    b1:b9:5b:c6:aa:32:8a:7c:9a:01:ce:b5:95:59:e5:
                    20:62:0f:0d:4a:09:51:5f:51:79:27:d6:67:43:a5:
                    81:4e:54:19:b5:14:43:01:79:a0:8a:63:c0:52:ac:
                    1b:e4:a1:d4:15:e9:d0:5a:40:26:87:fa:f6:55:47:
                    c4:9c:7f:00:46:1b:56:cc:d4:6d:8d:39:94:49:ab:
                    7c:5e:f1:78:cd:6b:29:28:5b:77:40:7f:b1:fc:02:
                    a6:25:dc:e1:0a:e2:c0:ee:6a:19:f7:2e:81:97:87:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8B:90:98:05:10:90:47:B2:96:91:32:06:5F:45:3D:32:00:12:40
            X509v3 Authority Key Identifier:
                keyid:C8:C2:C7:31:45:93:04:2C:F7:42:10:F7:F0:3B:E7:10:6C:22:4F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMLHMUWTBCz3QhD38DvnEGwiT4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/e4uQmAUQkEeylpEyBl9FPTIAEkA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b2dbe0-04c5-41ba-ac62-3a53d0ef8b5a/1/yMLHMUWTBCz3QhD38DvnEGwiT4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.233.219.0/24
                IPv6:
                  2a10:4e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:95:5e:d1:a8:e0:76:41:6e:6b:23:c1:fe:9a:e6:38:28:d5:
         de:61:1a:bc:18:4d:d6:50:2e:ad:15:3a:60:9a:9b:33:a6:42:
         2c:1c:6f:b9:c2:07:ea:7d:28:f9:5e:f0:f1:fa:bd:c4:09:31:
         39:87:c5:5e:19:79:99:81:a7:c3:ca:fe:31:57:81:31:c0:a5:
         53:7f:75:8e:88:47:89:ca:f7:6c:bf:a0:1e:c6:a3:62:ec:52:
         f5:41:5f:ab:1e:d6:07:10:a9:65:11:a2:1f:0b:28:6d:c7:d0:
         ac:4b:35:88:64:30:f4:50:2b:8d:10:33:47:de:ea:ad:5c:27:
         c8:ab:7b:00:67:2b:68:66:5c:3b:78:c0:ae:69:05:21:e5:a8:
         4a:4d:19:5a:41:d2:f4:67:99:28:71:3d:aa:78:67:6f:ee:68:
         ca:69:2f:95:a2:15:6c:8b:65:1f:5b:16:c4:54:8d:09:19:ea:
         23:fb:6c:3d:77:11:50:cd:8b:40:d0:71:33:bc:d2:7f:79:e0:
         15:d0:33:df:97:f3:0b:a1:86:b5:fc:1f:ef:71:e9:71:14:33:
         0d:fd:75:73:da:b5:68:76:b0:52:af:72:71:c0:a9:91:e5:e1:
         a3:cb:a3:6e:53:e1:e9:79:53:87:8e:f8:d9:25:90:c0:c8:2d:
         42:83:b9:7b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzC2uYzRuIpDmI4Rcx7sYyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4YzJjNzMxNDU5MzA0MmNmNzQyMTBmN2YwM2JlNzEwNmMy
MjRmODkwHhcNMjQwMTAxMDIyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjhiOTA5ODA1MTA5MDQ3YjI5NjkxMzIwNjVmNDUzZDMyMDAxMjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqVWLvgzoebvEz2p+MxmNIg+MT1O
y4w2+NRDw5PAoWXSvmHgvNEzNvtWYDnZ166SWX76Sq771dqkVkcafvvfuWmHSArI
um3apMemPhQV5aWuG8Mf9yUx4V7TtPnnJZrtX230ZKUntbm8MBjXnhWVPyee0UHl
k89bwowDlCRi3kR3cF7G2mXoDFAPXDTO0jZUmod/+eWxuVvGqjKKfJoBzrWVWeUg
Yg8NSglRX1F5J9ZnQ6WBTlQZtRRDAXmgimPAUqwb5KHUFenQWkAmh/r2VUfEnH8A
RhtWzNRtjTmUSat8XvF4zWspKFt3QH+x/AKmJdzhCuLA7moZ9y6Bl4fDOQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHuLkJgFEJBHspaRMgZfRT0yABJAMB8GA1UdIwQY
MBaAFMjCxzFFkwQs90IQ9/A75xBsIk+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjIt
M2E1M2QwZWY4YjVhLzEvZTR1UW1BVVFrRWV5bHBFeUJsOUZQVElBRWtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9iMmRiZTAtMDRjNS00MWJhLWFjNjItM2E1M2QwZWY4YjVh
LzEveU1MSE1VV1RCQ3ozUWhEMzhEdm5FR3dpVDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuenbMA8E
AgACMAkDBwAqEE5AAAAwDQYJKoZIhvcNAQELBQADggEBAJyVXtGo4HZBbmsjwf6a
5jgo1d5hGrwYTdZQLq0VOmCamzOmQiwcb7nCB+p9KPle8PH6vcQJMTmHxV4ZeZmB
p8PK/jFXgTHApVN/dY6IR4nK92y/oB7Go2LsUvVBX6se1gcQqWURoh8LKG3H0KxL
NYhkMPRQK40QM0fe6q1cJ8irewBnK2hmXDt4wK5pBSHlqEpNGVpB0vRnmShxPap4
Z2/uaMppL5WiFWyLZR9bFsRUjQkZ6iP7bD13EVDNi0DQcTO80n954BXQM9+X8wuh
hrX8H+9x6XEUMw39dXPatWh2sFKvcnHAqZHl4aPLo25T4el5U4eO+NklkMDILUKD
uXs=
-----END CERTIFICATE-----