Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/8FrDT_iyFaSPwstQPHjQgpgElc8.roa
File:                     8FrDT_iyFaSPwstQPHjQgpgElc8.roa (raw, json)
Hash identifier:          rmcDU6EFCsq2oBqXIhgl2nXgp2/KymIiyI6/FRrStjA=
Subject key identifier:   F0:5A:C3:4F:F8:B2:15:A4:8F:C2:CB:50:3C:78:D0:82:98:04:95:CF
Certificate issuer:       /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial:       01904F624D50A8CDDCE122167E70FF9F6E43
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/8FrDT_iyFaSPwstQPHjQgpgElc8.roa
Signing time:             Tue 25 Jun 2024 12:32:40 +0000
ROA not before:           Tue 25 Jun 2024 12:32:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     396560
IP address blocks:        81.19.195.30/32 maxlen: 32
                          81.19.195.31/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:4f:62:4d:50:a8:cd:dc:e1:22:16:7e:70:ff:9f:6e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
        Validity
            Not Before: Jun 25 12:32:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f05ac34ff8b215a48fc2cb503c78d082980495cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:32:ac:69:9f:5f:08:4c:79:d8:a5:62:7e:77:
                    99:c2:68:c7:87:63:bd:fb:bd:3b:78:88:81:ef:b1:
                    c0:fe:20:47:8e:f9:f3:c6:f9:1e:4f:6b:6f:0e:60:
                    98:b6:fc:5a:5f:89:a8:c5:19:91:05:6f:ae:cf:c2:
                    a6:49:77:ca:ea:2e:86:62:de:e7:52:f3:12:e3:a8:
                    72:1f:73:aa:22:1a:6d:f0:fb:2c:91:2d:f2:50:3c:
                    f5:b7:07:70:a4:01:38:0b:18:1d:11:3d:58:48:04:
                    63:1c:f0:77:68:f4:e1:ff:15:d6:0b:5c:32:12:e1:
                    43:79:74:74:9f:cc:54:ed:0e:b0:ad:d5:bd:ee:11:
                    50:77:ca:1e:2d:e4:59:01:c6:1a:34:dc:65:f1:35:
                    d3:18:67:4b:7f:e5:13:c0:23:b6:0f:04:ee:51:7f:
                    d8:e3:47:37:d0:bc:f4:07:7b:58:09:1c:f2:9f:43:
                    42:27:49:d3:95:27:8a:8f:90:f7:42:63:c0:52:33:
                    2b:07:f8:55:4d:de:6e:62:26:ce:fa:fd:50:e6:10:
                    a7:d0:5c:b1:ac:e1:5e:ae:92:8d:ec:75:77:3f:21:
                    af:b1:66:2f:13:05:7a:e5:03:86:06:7b:34:22:41:
                    bf:f0:b4:48:99:ef:d8:cb:1b:8a:a9:24:07:38:5c:
                    f0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5A:C3:4F:F8:B2:15:A4:8F:C2:CB:50:3C:78:D0:82:98:04:95:CF
            X509v3 Authority Key Identifier:
                keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/8FrDT_iyFaSPwstQPHjQgpgElc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.19.195.30/31

    Signature Algorithm: sha256WithRSAEncryption
         18:96:76:54:79:79:a3:23:b2:42:22:a4:81:f1:bc:67:7c:20:
         bc:2d:51:50:3e:dc:68:a9:6e:86:98:1d:07:60:04:38:17:47:
         46:d9:1b:10:bc:d3:5b:e3:f5:c4:f9:0d:f2:e9:f5:f1:a2:91:
         79:5a:e1:4c:51:22:78:31:8f:ce:36:8b:4c:3a:7f:b3:9e:d7:
         44:cc:b6:e2:dd:0d:4d:e2:89:8e:9e:de:dd:8b:5c:1b:5d:9f:
         e5:d8:5c:02:e8:24:62:9a:f0:e5:22:3f:1e:5a:56:ff:c1:81:
         6f:e0:98:31:3b:98:12:4d:4a:6c:e0:b3:db:c3:78:ce:16:f0:
         c8:3d:c1:66:55:27:d3:03:68:6c:96:07:7e:36:13:f7:bd:5d:
         c3:ff:79:93:2d:44:71:8e:ca:6a:cd:6a:94:fe:64:49:8b:7b:
         66:f8:71:60:6b:19:48:47:85:be:1d:63:ad:bf:81:84:40:ae:
         a4:00:d8:05:0e:3e:88:ca:c3:19:ac:0b:1a:ba:95:7b:e9:54:
         f0:3b:2d:9c:3e:ce:d9:f7:65:14:f5:5f:cd:8a:9a:c0:d0:0a:
         66:1f:ad:22:30:25:cf:47:d0:3f:86:f2:6f:3e:7d:8f:d3:aa:
         72:5d:fe:11:7d:95:4f:d0:70:2f:71:f6:85:e8:71:7f:51:f0:
         8b:84:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----