Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa
File:                     n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa (raw, json)
Hash identifier:          dWbv1GG/jQzKpma9gu6kceYWhj/EHTcaQc0fgb99c/Q=
Subject key identifier:   9F:94:82:C5:F0:41:39:26:D5:F8:4D:E0:A6:E1:A2:D4:9E:4A:B5:A5
Certificate issuer:       /CN=ba4c685efa6a2c1045637f027a325c0aec79c015
Certificate serial:       018CC2DB3CCAFC132A76D7188A0411724D59
Authority key identifier: BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa
Signing time:             Mon 01 Jan 2024 02:29:56 +0000
ROA not before:           Mon 01 Jan 2024 02:29:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8075
IP address blocks:        185.117.183.0/24 maxlen: 24
                          2a03:52a0:183::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:3c:ca:fc:13:2a:76:d7:18:8a:04:11:72:4d:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4c685efa6a2c1045637f027a325c0aec79c015
        Validity
            Not Before: Jan  1 02:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9f9482c5f0413926d5f84de0a6e1a2d49e4ab5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:d1:c3:54:80:e0:f4:0a:64:9e:c2:1e:a7:
                    da:59:56:23:ee:b6:95:9a:d9:5d:84:67:73:7c:a8:
                    84:cd:d4:c1:4e:11:05:4c:63:5d:dd:26:73:e0:60:
                    2f:76:a0:15:77:a4:09:05:98:4e:aa:4b:a9:fc:ba:
                    cc:8c:02:c3:1f:30:d6:d8:ee:dd:8d:9f:35:75:91:
                    2b:c9:81:95:d5:57:52:24:0d:95:41:a6:e3:65:0f:
                    ff:38:ee:35:4d:a2:18:41:20:6e:49:11:90:b2:3a:
                    07:1d:2d:ed:5a:0d:6f:1f:b5:5a:3d:6c:5f:1f:5f:
                    12:c2:f4:6d:15:42:e8:fa:56:e3:5a:95:02:3e:2d:
                    44:4d:68:ca:c7:9d:da:63:55:7e:9c:24:ee:ea:10:
                    82:03:80:93:8a:c1:4a:4a:27:e7:65:3f:b6:fe:d8:
                    7f:3d:06:42:90:0d:68:f6:3b:29:7b:63:61:27:fc:
                    71:64:75:a3:51:4f:f7:28:85:fe:8d:7b:ae:f6:8f:
                    80:45:ed:0b:64:67:94:f4:bb:be:82:77:aa:75:70:
                    3e:f8:94:1c:93:cc:7f:56:f6:aa:ee:d1:19:2f:22:
                    bd:19:f5:40:80:af:5f:36:82:54:1a:31:b3:5b:93:
                    a7:0c:02:f2:cf:98:90:ce:21:65:5d:c5:10:7b:0e:
                    b0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:94:82:C5:F0:41:39:26:D5:F8:4D:E0:A6:E1:A2:D4:9E:4A:B5:A5
            X509v3 Authority Key Identifier:
                keyid:BA:4C:68:5E:FA:6A:2C:10:45:63:7F:02:7A:32:5C:0A:EC:79:C0:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukxoXvpqLBBFY38CejJcCux5wBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/n5SCxfBBOSbV-E3gpuGi1J5KtaU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/42872a-5617-4ec2-ab8d-c8604720642d/1/ukxoXvpqLBBFY38CejJcCux5wBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.183.0/24
                IPv6:
                  2a03:52a0:183::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:e8:11:90:db:30:2a:f2:d6:3e:6f:cc:a7:91:29:92:63:35:
         2e:80:31:d3:87:41:4e:04:54:35:3a:e6:37:d7:d3:fe:63:30:
         09:91:bd:06:d2:0c:fc:93:2b:71:91:cd:84:0f:1e:7e:8d:43:
         bf:82:22:aa:ed:e8:88:5c:c0:e5:70:e7:41:a2:91:e6:f8:0b:
         f3:ce:5f:e5:a0:a0:79:30:49:3c:42:be:50:c8:ef:30:0b:86:
         6d:74:54:86:78:7a:57:d4:99:9d:cb:c2:8d:ac:8c:b1:07:a9:
         44:50:f5:f4:50:2d:55:4d:a4:66:7b:d5:ad:a8:1b:e3:4e:27:
         76:b2:04:ad:c2:a6:73:36:9a:50:55:4e:0c:77:55:9f:87:0d:
         bf:41:ae:64:27:5f:42:53:4b:dc:77:67:e6:a5:f0:49:03:48:
         52:31:c0:b2:30:6b:2c:ca:f2:9f:d8:7d:db:90:de:cb:51:2d:
         6f:0a:91:4e:72:aa:40:b1:2e:f6:a6:49:a6:3f:73:eb:e0:47:
         03:94:68:4b:2b:8a:c9:95:e8:b0:0b:1b:b2:4c:a9:66:85:ed:
         71:4e:42:fd:01:41:16:05:3b:70:7a:a9:67:ce:cf:17:9e:32:
         ee:eb:de:4b:af:3e:d8:19:1a:d4:d2:2d:e3:bc:cd:d9:a4:e3:
         5e:00:77:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----