Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/1gxd8nuArTW51glECizj2B2u20A.roa
File:                     1gxd8nuArTW51glECizj2B2u20A.roa (raw, json)
Hash identifier:          jttAaNvz+uWu9hH3uZjmnG8cQhm8N0YzZPp/n11Wj90=
Subject key identifier:   D6:0C:5D:F2:7B:80:AD:35:B9:D6:09:44:0A:2C:E3:D8:1D:AE:DB:40
Certificate issuer:       /CN=d3d4e0da68c1446689419d103711b191ded567f4
Certificate serial:       018CC2DB3B73475B3CCBC310D783CDEA2927
Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/1gxd8nuArTW51glECizj2B2u20A.roa
Signing time:             Mon 01 Jan 2024 02:29:56 +0000
ROA not before:           Mon 01 Jan 2024 02:29:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3249
IP address blocks:        45.139.107.0/24 maxlen: 24
                          2a13:cec0::/48 maxlen: 48
                          2a13:cec1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:db:3b:73:47:5b:3c:cb:c3:10:d7:83:cd:ea:29:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4
        Validity
            Not Before: Jan  1 02:29:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d60c5df27b80ad35b9d609440a2ce3d81daedb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:8e:0c:6b:d1:1b:ea:38:2b:3c:3c:83:af:
                    34:31:52:7d:6e:50:22:c8:74:0b:71:7a:4e:dd:fd:
                    e9:04:29:a7:ef:90:13:b3:f7:41:70:e5:4a:20:9b:
                    44:94:c1:17:74:d2:ec:b7:36:71:96:52:63:2d:e8:
                    6b:82:ed:6f:88:e4:22:95:63:27:5c:3d:e1:d7:63:
                    f6:c0:88:76:17:2e:b3:1a:f5:35:c7:41:dd:92:89:
                    64:59:de:b4:8d:92:5b:7d:57:b6:4a:d2:1c:32:f5:
                    1a:bd:7d:fa:56:0e:b4:5d:5d:d6:da:34:46:55:48:
                    69:82:ee:ff:43:5e:45:f5:39:58:ea:12:9b:50:ae:
                    5b:cf:f9:ae:7b:3e:eb:d0:a2:c8:a6:86:39:34:1c:
                    ad:d1:9c:a2:2f:5f:36:eb:06:a7:b6:6c:35:61:44:
                    05:d8:7a:b2:59:df:e7:2f:31:dc:37:4e:53:7c:c4:
                    6a:73:80:14:c3:04:67:c3:3d:0b:c0:ff:c0:20:4a:
                    2f:b1:3a:9f:77:4b:32:3f:6f:04:db:b9:7b:38:f7:
                    3f:2b:48:86:ab:be:81:0e:b1:51:01:d2:00:07:51:
                    31:97:a8:f8:15:e1:bc:91:75:da:82:3a:9e:18:53:
                    57:32:a4:43:60:04:bf:b4:f6:0f:15:05:c7:1a:12:
                    0f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0C:5D:F2:7B:80:AD:35:B9:D6:09:44:0A:2C:E3:D8:1D:AE:DB:40
            X509v3 Authority Key Identifier:
                keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/1gxd8nuArTW51glECizj2B2u20A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.107.0/24
                IPv6:
                  2a13:cec0::/48
                  2a13:cec1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:0f:33:39:c5:b5:a0:59:77:07:22:66:50:e5:a5:84:80:3d:
         e1:38:73:1c:93:58:75:f5:32:37:17:5e:61:04:60:c4:97:d2:
         1b:44:30:24:a7:fe:27:8b:4e:ec:8f:fa:f3:60:0f:ac:55:e6:
         89:a6:1b:ee:fc:60:95:38:63:db:9f:c8:99:18:95:a5:cc:4d:
         a1:ba:8a:c0:f1:81:5c:ed:09:8b:bb:ba:58:6b:26:df:41:6d:
         34:16:0b:10:60:24:11:12:59:35:27:bb:17:a9:3a:41:e5:b6:
         ea:ac:c5:87:16:3f:40:d9:30:3e:d3:93:51:67:82:d3:50:4c:
         d4:ee:c0:05:40:87:78:01:05:a4:a6:6d:44:9b:1a:dd:d8:e0:
         74:d0:17:b9:f7:08:5d:91:f2:a7:1c:5a:fb:fa:f2:2a:d1:f4:
         36:02:2d:a2:a8:92:01:ce:b4:dd:3a:75:dc:64:d2:da:2c:98:
         e1:dc:62:cd:d3:3c:cc:87:2e:96:60:30:9a:68:36:ba:f8:7a:
         bc:f7:5e:ed:17:20:98:e0:d7:09:39:4e:ba:cc:3c:1e:18:af:
         f6:99:f3:78:9e:85:1e:93:b8:2d:3a:54:27:67:40:10:3d:a0:
         ca:44:5e:dd:4b:98:ec:b2:ac:65:d7:9b:fb:5b:63:aa:36:07:
         28:94:dc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----