Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/2b2lKA9X7MrA9IgFM1sQSfvIgMM.roa
File:                     2b2lKA9X7MrA9IgFM1sQSfvIgMM.roa (raw, json)
Hash identifier:          P/DG7UbyypPujnLV3uG+0rlFAVZBhWEsHG4Bx/Jl2Fo=
Subject key identifier:   D9:BD:A5:28:0F:57:EC:CA:C0:F4:88:05:33:5B:10:49:FB:C8:80:C3
Certificate issuer:       /CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
Certificate serial:       018CC8DF2F269385AE8D016D4D85DC3F4CD6
Authority key identifier: 13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/2b2lKA9X7MrA9IgFM1sQSfvIgMM.roa
Signing time:             Tue 02 Jan 2024 06:31:58 +0000
ROA not before:           Tue 02 Jan 2024 06:31:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202376
IP address blocks:        2.59.166.0/24 maxlen: 24
                          2.59.167.0/24 maxlen: 24
                          2a09:f541::/32 maxlen: 32
                          2a09:f540::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:2f:26:93:85:ae:8d:01:6d:4d:85:dc:3f:4c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13edf4be313ae1c1be69881e2e4447ef2bf0b196
        Validity
            Not Before: Jan  2 06:31:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d9bda5280f57eccac0f48805335b1049fbc880c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a2:a6:49:d8:bb:bb:ac:d4:cb:6f:ac:cc:e6:
                    64:79:ed:bb:f4:8a:9e:8b:e3:aa:31:d3:2e:5e:9e:
                    12:f2:ea:ae:20:33:fb:6b:c3:fc:9c:f3:2d:44:34:
                    68:02:50:9a:9b:fe:b8:04:0d:ea:00:47:00:84:6f:
                    a0:25:1b:c0:0f:ec:62:0d:4a:55:b6:1b:7e:b7:23:
                    f4:7e:03:19:d0:74:9f:60:c1:aa:2b:22:fe:68:a7:
                    bf:0b:da:1d:a0:67:b2:7e:c0:93:38:db:3d:1b:ec:
                    a7:fb:66:c8:7f:58:51:af:e9:38:cd:a7:90:d6:0b:
                    35:13:17:50:97:bb:73:d1:09:f1:4c:60:29:ac:5e:
                    34:83:77:e7:00:cb:a5:5e:04:4a:70:c8:e6:cc:4a:
                    38:be:ea:07:c6:66:91:74:ab:89:df:d7:3c:f5:5f:
                    d2:e1:42:9e:f7:5e:cd:88:4d:71:41:1d:77:bc:8b:
                    9e:10:bf:44:9e:0a:7a:b9:44:d2:dd:b4:f9:0e:d9:
                    76:8c:49:8d:f9:d7:9f:f4:92:97:1d:c2:88:18:71:
                    c4:5f:3a:6d:66:e8:ed:24:20:3b:dd:74:07:82:61:
                    0e:54:79:e4:ad:59:c9:52:3a:16:eb:21:56:9c:d9:
                    35:0d:c4:86:a5:77:f2:14:c0:3e:0a:77:d6:a5:90:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BD:A5:28:0F:57:EC:CA:C0:F4:88:05:33:5B:10:49:FB:C8:80:C3
            X509v3 Authority Key Identifier:
                keyid:13:ED:F4:BE:31:3A:E1:C1:BE:69:88:1E:2E:44:47:EF:2B:F0:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-30vjE64cG-aYgeLkRH7yvwsZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/2b2lKA9X7MrA9IgFM1sQSfvIgMM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/3e6f96-0cf8-4d66-84ba-b41335b00587/1/E-30vjE64cG-aYgeLkRH7yvwsZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.59.166.0/23
                IPv6:
                  2a09:f540::/31

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:08:d4:35:5f:e4:7c:33:ca:b9:ad:45:9e:5b:95:5e:41:
         3b:44:af:d1:4d:d5:34:b1:23:26:4a:8c:31:06:e4:f0:7b:d8:
         df:4f:80:b9:e4:01:42:31:cc:94:c4:5f:61:f7:00:7c:16:d3:
         45:d7:21:20:00:af:76:90:f5:03:44:0c:fb:23:2d:71:23:ed:
         60:c2:75:11:56:07:9c:29:75:c3:5a:e5:88:ff:e0:92:4f:96:
         9e:43:84:60:30:e7:14:54:41:f3:64:82:9c:6f:28:f0:29:f4:
         da:8e:26:0b:0d:b2:b6:25:50:45:59:97:57:55:39:a9:b8:50:
         56:9a:1d:9f:16:85:8e:f4:89:39:a0:e1:ed:3b:90:bd:9c:5b:
         a1:a3:8c:aa:72:87:3c:c8:e2:8b:02:f8:68:e5:6e:d1:1f:e0:
         c0:2b:17:59:f6:5a:46:3c:fc:fd:12:a0:53:fb:f5:4c:09:70:
         60:8b:2d:c7:44:79:c6:6e:f2:65:82:d8:9d:bc:66:b1:1e:ed:
         26:98:6a:3a:2f:59:54:b3:dd:5e:b2:10:52:32:1e:99:43:3d:
         78:d8:12:23:66:4c:df:fc:d1:25:68:14:44:92:bc:09:e1:3c:
         e1:0f:e6:6a:37:1b:24:98:18:3c:4d:de:65:90:d0:53:97:27:
         c2:ad:b5:11
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzI3y8mk4WujQFtTYXcP0zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWRmNGJlMzEzYWUxYzFiZTY5ODgxZTJlNDQ0N2VmMmJm
MGIxOTYwHhcNMjQwMTAyMDYzMTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWJkYTUyODBmNTdlY2NhYzBmNDg4MDUzMzViMTA0OWZiYzg4MGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqKmSdi7u6zUy2+szOZkee279Iqe
i+OqMdMuXp4S8uquIDP7a8P8nPMtRDRoAlCam/64BA3qAEcAhG+gJRvAD+xiDUpV
tht+tyP0fgMZ0HSfYMGqKyL+aKe/C9odoGeyfsCTONs9G+yn+2bIf1hRr+k4zaeQ
1gs1ExdQl7tz0QnxTGAprF40g3fnAMulXgRKcMjmzEo4vuoHxmaRdKuJ39c89V/S
4UKe917NiE1xQR13vIueEL9Engp6uUTS3bT5Dtl2jEmN+def9JKXHcKIGHHEXzpt
ZujtJCA73XQHgmEOVHnkrVnJUjoW6yFWnNk1DcSGpXfyFMA+CnfWpZCtcwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFNm9pSgPV+zKwPSIBTNbEEn7yIDDMB8GA1UdIwQY
MBaAFBPt9L4xOuHBvmmIHi5ER+8r8LGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEt
YjQxMzM1YjAwNTg3LzEvMmIybEtBOVg3TXJBOUlnRk0xc1FTZnZJZ01NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zZTZmOTYtMGNmOC00ZDY2LTg0YmEtYjQxMzM1YjAwNTg3
LzEvRS0zMHZqRTY0Y0ctYVlnZUxrUkg3eXZ3c1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBAjumMA0E
AgACMAcDBQEqCfVAMA0GCSqGSIb3DQEBCwUAA4IBAQAq5AjUNV/kfDPKua1FnluV
XkE7RK/RTdU0sSMmSowxBuTwe9jfT4C55AFCMcyUxF9h9wB8FtNF1yEgAK92kPUD
RAz7Iy1xI+1gwnURVgecKXXDWuWI/+CST5aeQ4RgMOcUVEHzZIKcbyjwKfTajiYL
DbK2JVBFWZdXVTmpuFBWmh2fFoWO9Ik5oOHtO5C9nFuho4yqcoc8yOKLAvho5W7R
H+DAKxdZ9lpGPPz9EqBT+/VMCXBgiy3HRHnGbvJlgtidvGaxHu0mmGo6L1lUs91e
shBSMh6ZQz142BIjZkzf/NElaBREkrwJ4TzhD+ZqNxskmBg8Td5lkNBTlyfCrbUR
-----END CERTIFICATE-----