Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/w-r9Ew0IIrxhDjNMU2Ip87jIwFk.roa
File:                     w-r9Ew0IIrxhDjNMU2Ip87jIwFk.roa (raw, json)
Hash identifier:          8KQZb7GYsVixIwNbDFxseW3bdy0fX82eHSBnZCQDuV8=
Subject key identifier:   C3:EA:FD:13:0D:08:22:BC:61:0E:33:4C:53:62:29:F3:B8:C8:C0:59
Certificate issuer:       /CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
Certificate serial:       018CC348FF0A1851EE80705B9DC713321C91
Authority key identifier: EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/w-r9Ew0IIrxhDjNMU2Ip87jIwFk.roa
Signing time:             Mon 01 Jan 2024 04:29:50 +0000
ROA not before:           Mon 01 Jan 2024 04:29:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42184
IP address blocks:        185.153.140.0/22 maxlen: 24
                          2a0f:8880::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:ff:0a:18:51:ee:80:70:5b:9d:c7:13:32:1c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc8402f2faab304879ff712cfcbf5ae52b6699c
        Validity
            Not Before: Jan  1 04:29:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c3eafd130d0822bc610e334c536229f3b8c8c059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:1e:a5:2d:ce:82:b0:9d:ae:cc:e6:ab:bb:
                    b1:4a:68:52:04:56:bc:2e:60:8c:2e:56:a1:84:c8:
                    34:e5:a3:50:c8:a0:c8:22:c5:a6:24:e4:9a:be:0f:
                    40:48:c7:04:a5:cd:fa:08:75:c6:86:f9:94:69:cf:
                    7f:69:57:b1:b9:bf:eb:60:40:1b:27:c5:b7:b1:65:
                    fa:d2:e6:7f:93:16:f2:f9:c0:d4:1a:4b:bf:ec:84:
                    ee:1f:3d:86:a0:ad:7e:28:05:2a:7c:66:34:bd:00:
                    d7:1d:20:a0:28:c4:ee:57:07:8c:cd:df:b8:7c:11:
                    4f:86:dc:c0:00:73:95:23:d0:35:10:f0:dc:93:e6:
                    6a:bc:d1:7a:00:c9:d2:f3:ee:3c:61:15:27:ef:79:
                    01:80:37:07:41:f3:40:9b:35:be:6d:47:9c:b6:87:
                    6d:8d:2b:c9:41:8f:75:4e:e2:7f:37:e3:c9:84:1c:
                    f1:c6:b3:1b:54:49:38:4d:b7:36:cb:ec:e9:14:ad:
                    0b:53:cf:c6:bd:3e:c8:a9:89:de:89:66:f2:5d:58:
                    44:db:68:a9:72:f1:8a:d4:cb:61:91:5c:cd:28:d0:
                    b3:f2:bf:e8:62:fd:96:68:73:ee:7c:3f:11:e8:df:
                    32:b6:0f:63:f0:89:8a:8c:94:8a:d6:0e:87:ba:a5:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:FD:13:0D:08:22:BC:61:0E:33:4C:53:62:29:F3:B8:C8:C0:59
            X509v3 Authority Key Identifier:
                keyid:EC:C8:40:2F:2F:AA:B3:04:87:9F:F7:12:CF:CB:F5:AE:52:B6:69:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MhALy-qswSHn_cSz8v1rlK2aZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/w-r9Ew0IIrxhDjNMU2Ip87jIwFk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/003d6d-bbbf-4091-8c2d-ffa7f280d253/1/7MhALy-qswSHn_cSz8v1rlK2aZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.153.140.0/22
                IPv6:
                  2a0f:8880::/29

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:d6:b8:73:83:92:68:b7:aa:36:6f:44:6f:20:7b:32:1e:
         cf:84:55:52:7f:c3:ea:33:d9:b9:eb:ac:1d:39:f9:ca:ec:0f:
         7f:f8:26:df:81:84:63:f2:30:47:7a:8f:f1:22:b1:8d:b9:cd:
         fb:de:5f:8c:42:df:c9:f9:92:08:07:6f:37:7d:20:dd:97:c5:
         91:5b:84:eb:f5:b5:a2:28:ee:96:7a:6f:39:e5:55:6b:28:82:
         dd:b4:8e:76:57:4a:64:37:51:f1:26:85:e1:b1:cd:1b:7b:70:
         5b:2a:72:3f:bb:06:85:fe:8f:22:6e:f6:94:d8:a4:1b:1c:71:
         f5:5c:00:38:c0:bb:27:19:17:93:9c:19:ee:29:c2:86:0a:3e:
         d3:66:22:e4:2a:e9:3e:8a:58:6d:cb:cc:98:4b:27:56:cf:cb:
         bb:61:ca:e5:32:15:b3:99:d1:f1:f8:da:95:3a:ea:33:1f:88:
         52:7a:9e:84:de:ca:98:02:36:92:da:7f:cd:5a:b6:d0:89:74:
         21:51:33:41:ae:34:f2:af:c4:81:06:6d:c3:8a:45:66:d4:3e:
         e8:a7:2a:5f:f0:30:60:16:a9:63:8c:59:9a:3d:97:14:b4:89:
         b6:3a:18:08:9b:0c:02:66:60:4e:eb:40:c4:0a:f6:e2:57:33:
         60:62:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----