Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/nyh3L1_fO9-0gtPACanLqE-8L6A.roa
File:                     nyh3L1_fO9-0gtPACanLqE-8L6A.roa (raw, json)
Hash identifier:          3ZfslFeCGwiSaXAFPs++rXWZnjwclEp0fgAs/mguHtQ=
Subject key identifier:   9F:28:77:2F:5F:DF:3B:DF:B4:82:D3:C0:09:A9:CB:A8:4F:BC:2F:A0
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       0196C77FE79C800DB76797EC841A5128BBA4
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/nyh3L1_fO9-0gtPACanLqE-8L6A.roa
Signing time:             Tue 13 May 2025 02:36:10 +0000
ROA not before:           Tue 13 May 2025 02:36:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     214143
IP address blocks:        45.134.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:7f:e7:9c:80:0d:b7:67:97:ec:84:1a:51:28:bb:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: May 13 02:36:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=9f28772f5fdf3bdfb482d3c009a9cba84fbc2fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:4c:c4:c0:21:c5:12:c4:09:c5:ed:ac:11:
                    3f:4d:cb:b6:a0:f4:6b:e4:11:fc:c3:4f:fa:67:7b:
                    70:4a:6e:d5:b4:6d:24:8f:9f:f6:16:db:4f:d3:aa:
                    69:32:0a:b9:dc:4f:9b:5d:93:0a:ea:f2:58:d1:a7:
                    ee:21:2c:eb:d1:bf:09:12:ea:d8:c8:3a:81:5d:fe:
                    56:35:06:f3:39:fc:3e:8a:ee:18:33:12:69:3d:75:
                    f1:a6:69:0c:d8:ef:4a:0e:30:0c:7f:47:39:93:d8:
                    ef:d4:37:c5:68:db:ed:7b:54:3e:23:7a:85:ae:f2:
                    9e:0e:39:ac:7d:de:43:cb:9f:7d:a3:18:eb:60:da:
                    e7:b8:40:b9:6f:48:52:9a:93:39:51:44:f5:da:9e:
                    1b:27:8b:c9:96:15:ff:fe:3c:6f:94:ef:98:8b:f2:
                    e8:08:7e:5a:a3:4f:1c:8e:8c:83:2f:c4:29:a7:68:
                    f5:c1:ac:8f:e0:d5:57:de:9d:ef:42:7e:e3:4d:30:
                    f4:51:d6:20:eb:92:69:1d:cc:d4:ab:bd:a7:66:56:
                    7e:b6:d4:1f:ea:12:f6:38:8f:00:c6:68:6e:83:fb:
                    eb:81:9f:80:e9:5d:db:be:50:49:ac:94:d0:f6:96:
                    79:e6:45:e2:17:74:13:9c:10:27:9b:f8:06:cf:6f:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:28:77:2F:5F:DF:3B:DF:B4:82:D3:C0:09:A9:CB:A8:4F:BC:2F:A0
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/nyh3L1_fO9-0gtPACanLqE-8L6A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:07:f1:7d:3a:c0:84:6b:93:8f:39:df:0d:49:d6:b1:32:
         b9:03:96:9d:ad:1c:e5:41:87:ae:25:2c:e9:08:3d:13:cb:8c:
         dc:0f:bc:30:4a:8a:70:0e:19:1e:d6:47:07:52:38:63:c4:da:
         18:14:49:a5:84:88:20:be:a9:02:5a:51:6e:74:5d:07:a7:50:
         0d:a9:f3:e5:7b:a0:59:23:5a:54:82:75:46:9b:b5:1a:ab:87:
         04:fb:2b:91:be:79:e6:d1:f4:e9:c1:48:a4:27:29:5b:5c:08:
         3c:4f:4b:ac:69:bf:ea:31:3c:34:40:6d:ec:41:f3:5a:f6:35:
         3d:7c:3f:2e:b7:a3:e4:7e:af:f5:60:22:7c:2b:36:f5:fc:6b:
         47:60:78:01:df:b0:8b:2c:9e:33:6c:19:33:f3:34:10:9c:64:
         54:bf:83:9f:70:c0:c5:6c:1f:5e:ee:7b:95:bc:5f:95:fe:ef:
         e7:27:31:09:be:d0:e7:4e:a3:69:51:73:92:ae:ed:6f:8d:a2:
         9e:33:4b:cf:8a:d6:3b:a7:17:bc:c2:4f:b7:7e:46:d6:b4:33:
         34:b5:02:23:3a:0c:cf:35:71:1c:ee:34:82:58:89:bd:3c:b7:
         b2:11:4c:43:ff:a2:a6:6c:9c:35:71:19:5f:f0:23:fa:3a:f3:
         2d:2c:c5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----