Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa
File:                     VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa (raw, json)
Hash identifier:          YKAGL5PCKD5l8c8jAf3LNU8r4oZFr4gcsZJNcdEIiLs=
Subject key identifier:   55:F1:FE:8D:9F:1C:38:A0:FB:55:B8:2B:A5:82:9A:0A:6E:EC:7F:08
Certificate issuer:       /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial:       018CC9BB918ED8A054B5D2E8FACC04ABA6FD
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa
Signing time:             Tue 02 Jan 2024 10:32:42 +0000
ROA not before:           Tue 02 Jan 2024 10:32:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     8426
IP address blocks:        5.253.180.0/24 maxlen: 24
                          2a09:58c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bb:91:8e:d8:a0:54:b5:d2:e8:fa:cc:04:ab:a6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
        Validity
            Not Before: Jan  2 10:32:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=55f1fe8d9f1c38a0fb55b82ba5829a0a6eec7f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:4a:e9:1d:1b:4f:1a:d2:8a:5e:73:35:81:
                    f5:03:e1:15:5b:c2:09:c8:fe:c5:f3:57:92:1c:a8:
                    ab:fc:3f:7e:b9:ef:5e:46:67:78:2d:79:22:99:cf:
                    0f:03:98:c5:38:23:7b:cf:c7:b5:86:3e:d3:95:7e:
                    97:42:39:5f:ea:c3:02:03:f9:0a:6f:88:a6:1d:80:
                    b6:32:f8:f8:ec:7f:de:a3:fc:51:c5:28:1a:4f:79:
                    b2:8a:25:be:23:38:0f:0a:03:24:21:a1:3f:79:1e:
                    14:cb:79:f0:df:b8:06:32:e0:bd:70:eb:98:b8:2a:
                    14:c5:d7:5b:91:89:09:18:eb:8b:a0:80:d9:6a:b5:
                    bc:5f:26:78:0e:40:f9:71:c3:dc:cf:33:8f:73:c9:
                    29:ae:f3:68:90:01:ec:99:6d:16:ec:b2:e3:ba:54:
                    60:3d:e9:4b:cb:75:ef:66:b6:f3:ed:a3:d8:1e:a7:
                    f7:80:cd:52:5d:65:d8:42:5a:8b:d3:8a:ed:95:11:
                    18:ab:a1:eb:68:e0:f7:87:6d:ec:d5:40:80:42:a0:
                    f9:e8:db:2f:7a:ed:78:59:7c:e7:a0:7d:ef:63:4f:
                    f2:66:00:87:64:f6:15:0b:df:ee:7b:6c:c5:5f:38:
                    2a:a8:7e:95:84:af:2e:42:7a:ac:ca:22:59:9a:ca:
                    a1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F1:FE:8D:9F:1C:38:A0:FB:55:B8:2B:A5:82:9A:0A:6E:EC:7F:08
            X509v3 Authority Key Identifier:
                keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/VfH-jZ8cOKD7VbgrpYKaCm7sfwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.180.0/24
                IPv6:
                  2a09:58c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:d4:e5:58:5f:1e:4d:43:a9:55:75:a7:28:1a:83:bc:6b:34:
         16:45:f8:98:75:b7:f8:4c:5c:51:d8:00:14:b7:ce:4f:f4:cc:
         6f:a7:81:a2:e5:b0:98:27:a5:21:89:6c:7a:ab:3e:7c:0e:28:
         84:07:24:b9:e5:39:c6:d2:62:62:a4:ff:08:a1:dd:34:e5:52:
         3c:a1:2a:da:5a:5d:41:3b:04:cd:e7:9e:c9:41:4c:91:75:a1:
         8f:97:56:50:53:94:bb:ed:4e:2b:76:16:11:65:9e:55:8e:10:
         a7:02:78:b9:e7:08:ad:90:82:78:dc:c0:b3:d6:dc:0e:81:b1:
         58:e7:ad:bb:76:79:d7:37:71:2a:19:9c:86:72:90:b8:cd:c3:
         92:8f:11:04:05:22:3c:8b:9b:ca:e9:34:b6:0c:a0:aa:c7:2f:
         00:60:41:ab:e7:3a:af:c9:8f:72:0d:8f:a9:3f:47:78:c9:32:
         8d:47:d8:d8:b3:27:62:e2:bd:95:76:e3:f0:51:9d:83:a2:71:
         76:68:67:77:8d:c1:ba:32:b4:c7:2e:1d:96:d4:9b:56:42:54:
         d2:4b:8c:2f:78:bc:ec:36:1f:a5:d0:4a:2e:b7:d2:c5:cd:ba:
         e1:d2:fa:1d:26:91:ef:85:3d:7b:d7:c5:dc:46:f1:7c:a3:09:
         ef:87:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----