Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1m-c9o2SNEB-jAPh7pAKUNFqHIc.roa
File:                     1m-c9o2SNEB-jAPh7pAKUNFqHIc.roa (raw, json)
Hash identifier:          Lmsn4UuRfDPrgfkp/PD5ZbZ35Y9LiXvuMBQWRJnDNf0=
Subject key identifier:   D6:6F:9C:F6:8D:92:34:40:7E:8C:03:E1:EE:90:0A:50:D1:6A:1C:87
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       01928FED635495B783630336B3E48FD730DC
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1m-c9o2SNEB-jAPh7pAKUNFqHIc.roa
Signing time:             Tue 15 Oct 2024 11:25:52 +0000
ROA not before:           Tue 15 Oct 2024 11:25:52 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214032
IP address blocks:        78.128.119.0/24 maxlen: 24
                          2a01:8740:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:8f:ed:63:54:95:b7:83:63:03:36:b3:e4:8f:d7:30:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: Oct 15 11:25:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d66f9cf68d9234407e8c03e1ee900a50d16a1c87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:76:f9:b2:49:ff:b2:f2:ca:d7:a6:8f:b2:
                    81:ad:42:0b:58:c3:46:ee:c9:93:51:30:c6:93:e3:
                    f8:17:9f:db:fc:ea:92:0b:bb:7d:8f:56:7f:87:19:
                    60:98:50:b7:87:bc:4c:e8:b6:db:7a:00:73:0a:64:
                    c5:c6:19:31:04:b7:f7:e9:dd:77:a6:eb:d3:25:f3:
                    08:9c:56:eb:59:2c:26:39:0b:a4:7b:e8:89:0f:46:
                    1e:fd:df:00:13:45:10:a4:20:8e:ae:26:fa:e2:ac:
                    66:26:4d:f8:df:dc:a8:e9:bb:7e:89:7f:ab:45:2c:
                    40:7b:bf:f3:d4:01:5a:3a:a9:1b:60:97:f0:28:29:
                    a6:be:64:5a:d3:72:38:05:8d:17:af:50:d7:5a:f3:
                    22:64:93:73:f9:94:00:fe:ac:b4:7c:82:7c:93:3f:
                    72:4d:a5:67:28:05:2a:ec:f6:ce:6f:2f:8c:27:11:
                    c2:64:d6:58:ea:54:ad:a5:9f:99:ea:62:ee:49:09:
                    8d:b1:d5:2b:d7:84:bd:65:d2:a4:96:cc:19:80:07:
                    7e:53:2b:71:0e:ce:97:b3:10:32:88:0d:62:d4:e9:
                    f7:da:4e:6e:e6:6e:48:1b:31:2e:6b:5c:db:e9:7f:
                    ec:e0:d1:30:12:33:1d:84:fc:26:55:29:b1:b0:b8:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:9C:F6:8D:92:34:40:7E:8C:03:E1:EE:90:0A:50:D1:6A:1C:87
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/1m-c9o2SNEB-jAPh7pAKUNFqHIc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.128.119.0/24
                IPv6:
                  2a01:8740:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:0f:98:59:53:dd:db:65:c1:28:b1:75:03:d1:a5:c1:54:ca:
         09:6b:ee:fc:a2:35:a2:67:dd:41:93:b8:12:e4:d4:0d:68:fc:
         0c:40:03:ee:3b:10:d8:88:14:59:ee:df:65:b4:18:76:e5:47:
         e9:00:a1:f8:0a:20:85:72:06:bf:58:87:61:88:e8:51:bd:82:
         45:77:da:7e:84:5f:b7:3a:17:8b:13:e5:a6:76:75:60:53:67:
         c9:b6:28:fe:f2:9a:4a:f4:9f:c1:2a:72:55:e2:2e:cb:7f:99:
         7d:1c:2e:5b:5f:69:82:bf:cc:fd:ed:4f:d9:4f:a4:2e:ac:46:
         c6:cf:8a:9d:65:06:7c:29:0a:1a:59:99:3c:5b:1d:a2:82:98:
         6c:2f:d6:75:6d:ce:20:87:80:2a:88:b9:3d:01:ec:0e:65:8f:
         6a:cc:8a:2f:06:6c:51:e5:cd:64:91:9c:1b:c0:b4:7c:4e:a8:
         79:83:35:d8:a7:2c:89:ff:72:88:19:78:d2:ef:9b:02:12:c9:
         c0:24:9e:1f:c4:9f:68:99:86:f5:da:d1:8a:a2:40:d0:b0:f1:
         35:c3:b4:8a:fe:00:fa:62:c8:59:a2:87:9d:e6:7e:26:ad:3f:
         99:e4:72:47:ec:5c:8e:4b:99:82:fc:c4:bd:28:7f:27:e2:5b:
         92:a4:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----