Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/T045RfCDzriGVETW5buIjQ3akpg.roa
File:                     T045RfCDzriGVETW5buIjQ3akpg.roa (raw, json)
Hash identifier:          V5/b7H+tvSSqKMd4/Uj4a8mLJh3yfq/1w1z5eZ3Cpvs=
Subject key identifier:   4F:4E:39:45:F0:83:CE:B8:86:54:44:D6:E5:BB:88:8D:0D:DA:92:98
Certificate issuer:       /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial:       018CCA2A19EE656B538715FAB2DD49E7980C
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/T045RfCDzriGVETW5buIjQ3akpg.roa
Signing time:             Tue 02 Jan 2024 12:33:25 +0000
ROA not before:           Tue 02 Jan 2024 12:33:25 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212647
IP address blocks:        31.172.96.0/21 maxlen: 21
                          2a01:a707::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2a:19:ee:65:6b:53:87:15:fa:b2:dd:49:e7:98:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
        Validity
            Not Before: Jan  2 12:33:25 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4f4e3945f083ceb8865444d6e5bb888d0dda9298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:11:49:76:22:fd:ad:fe:26:3f:54:70:c5:
                    a8:6d:cb:5c:85:3a:44:e6:84:eb:7c:f5:5a:04:df:
                    d2:7a:2d:b0:2a:c8:b0:6b:3b:18:7f:f9:ea:b6:f7:
                    d9:8a:04:a2:da:1e:3f:54:ae:37:77:9e:7c:f4:fa:
                    3f:dd:ca:5b:5a:1c:ac:4a:86:d6:57:ac:97:cb:39:
                    80:ec:85:74:2a:b6:41:38:0a:a1:7e:7a:c7:8f:76:
                    dd:a0:33:8b:1f:93:34:98:49:b9:2b:2b:59:34:23:
                    ab:b7:a5:2b:8f:35:32:37:f2:3c:d0:9a:33:69:be:
                    57:b3:df:4f:42:0f:c1:68:d0:e3:72:82:77:98:7d:
                    1a:a5:25:14:dd:42:e0:44:a0:78:6a:73:6f:1e:73:
                    09:d4:77:69:34:c1:4b:e7:ee:14:ff:f2:85:3d:af:
                    c8:94:3c:da:03:db:62:35:e3:97:91:db:b8:e8:37:
                    d9:d5:f1:68:31:ca:ba:5b:96:5f:a0:b2:fd:92:5c:
                    b1:fb:98:8b:ac:30:89:81:84:81:e1:54:f0:4b:e6:
                    60:e9:ad:e7:8d:09:1d:b1:c9:fc:9f:74:5a:71:72:
                    75:b9:4e:8f:dc:95:68:81:74:26:90:7d:18:35:58:
                    ab:63:34:b3:a9:1a:b5:ee:36:d3:ef:81:9d:11:aa:
                    48:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4E:39:45:F0:83:CE:B8:86:54:44:D6:E5:BB:88:8D:0D:DA:92:98
            X509v3 Authority Key Identifier:
                keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/T045RfCDzriGVETW5buIjQ3akpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.172.96.0/21
                IPv6:
                  2a01:a707::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:9d:51:03:86:3b:2d:85:b9:61:ba:58:a0:ce:ca:b2:bb:d4:
         6f:2b:61:bc:88:51:c8:26:f8:66:03:6a:a1:13:bc:54:99:41:
         cf:32:8a:24:a1:97:42:f8:d5:41:d5:eb:b7:eb:a8:84:4b:a5:
         40:5f:eb:4c:26:6a:1e:3e:36:c8:b0:40:0a:a9:08:b4:75:4b:
         64:34:18:7d:07:2d:76:63:30:5b:1e:f7:a0:6f:3a:31:eb:03:
         80:8c:59:f5:ad:3d:a0:03:82:7b:f5:14:b5:d2:7f:a0:6c:c6:
         d4:c3:3b:9d:3b:66:38:75:a6:37:55:45:cd:11:14:0b:5f:38:
         70:c4:2f:ee:19:52:6d:b5:3e:59:74:54:de:de:8a:c7:44:f8:
         4b:bb:79:1e:3c:12:ff:e3:0f:c4:31:85:9f:78:c8:e1:46:4b:
         ba:6c:a7:31:73:10:6a:17:69:78:5e:64:fa:19:2b:3d:5a:cc:
         a9:53:fc:c1:18:12:2d:59:a7:92:8c:e7:94:be:e7:5e:99:52:
         e2:0f:69:c3:1f:b3:55:18:0f:17:00:19:77:89:a6:36:f0:ac:
         f2:e4:5e:26:bd:79:c2:15:4d:f1:18:51:a7:f0:f3:c4:43:0b:
         5c:66:67:78:e1:c3:ea:0d:64:e0:ed:5f:a0:55:c7:2c:14:83:
         fc:69:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----