Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/d7E4iyie1l75_Naeqjb8ufmcPc0.roa
File:                     d7E4iyie1l75_Naeqjb8ufmcPc0.roa (raw, json)
Hash identifier:          ubzg9pOBWpUGlN5MjZvWpnhkC0mO3ymuJ5OSt+ll3/o=
Subject key identifier:   77:B1:38:8B:28:9E:D6:5E:F9:FC:D6:9E:AA:36:FC:B9:F9:9C:3D:CD
Certificate issuer:       /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial:       018CFE5D5D7E0625C94F7298EB9271F3A55F
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/d7E4iyie1l75_Naeqjb8ufmcPc0.roa
Signing time:             Fri 12 Jan 2024 15:49:40 +0000
ROA not before:           Fri 12 Jan 2024 15:49:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25135
IP address blocks:        2a01:840::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:fe:5d:5d:7e:06:25:c9:4f:72:98:eb:92:71:f3:a5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
        Validity
            Not Before: Jan 12 15:49:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=77b1388b289ed65ef9fcd69eaa36fcb9f99c3dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:46:6c:a5:fa:a7:6a:45:a2:88:51:b7:ef:
                    8a:68:9d:a1:91:f0:cd:63:19:75:a5:3c:ce:a3:e3:
                    28:f3:c6:81:bc:8d:4b:2b:5b:2d:ef:f8:51:d5:e5:
                    86:6a:5e:d8:65:e0:e0:48:8a:44:59:18:d4:d9:e1:
                    a2:5f:e9:8b:72:02:80:5d:20:ca:fa:2e:1f:14:f6:
                    88:92:f4:54:15:59:5a:9d:b2:28:b2:d1:4e:00:d7:
                    ac:93:b4:7e:10:f3:e2:e4:8d:87:90:b6:bd:4a:89:
                    6f:5b:a0:f1:57:6e:14:87:9c:c5:c0:76:59:ba:ec:
                    94:1e:7a:aa:21:87:51:9b:ad:34:a1:36:1f:4f:42:
                    e7:3c:2b:66:51:2b:c3:ad:80:5f:ea:6f:79:a8:fe:
                    92:cf:d8:30:eb:c4:73:5d:c0:11:34:bc:38:4c:4f:
                    6b:c4:40:3b:6b:72:e7:22:12:ef:35:94:b3:f6:54:
                    3c:30:12:cf:03:71:34:4f:92:65:cf:f5:0e:0a:27:
                    24:19:eb:3e:f9:26:9c:4c:47:56:7d:8d:ed:51:5a:
                    29:9b:e4:c1:8f:71:e6:1c:a8:16:49:87:95:39:b6:
                    dd:64:43:cb:51:fd:0a:43:da:ed:6d:3e:40:c9:57:
                    7b:7f:1e:67:54:da:5e:15:88:67:a9:ef:dd:93:de:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B1:38:8B:28:9E:D6:5E:F9:FC:D6:9E:AA:36:FC:B9:F9:9C:3D:CD
            X509v3 Authority Key Identifier:
                keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/d7E4iyie1l75_Naeqjb8ufmcPc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:12:db:0e:c9:cb:6f:af:8b:67:c2:c4:ad:4a:cf:e7:13:8f:
         74:43:b5:e2:70:3e:d0:eb:98:3e:58:ec:e6:53:dd:a0:5d:04:
         9f:49:12:91:9e:58:bb:ec:c7:4b:17:12:53:56:bc:90:d3:e2:
         9e:1c:18:bd:94:a0:cb:2b:92:2d:8a:8e:68:d5:d3:a7:ca:5b:
         55:0a:f9:1c:56:04:e9:42:0e:64:cb:8f:55:2c:ef:e8:66:7d:
         7c:c2:ef:49:08:6e:dd:5f:2e:b6:17:56:30:65:e0:b4:46:9c:
         28:b4:92:64:93:ce:73:16:a8:89:de:a5:d5:11:f6:0e:d4:d4:
         a6:2d:2d:86:2c:d2:4e:15:3d:20:40:b5:5c:da:53:6c:4a:ad:
         78:3f:8b:de:01:96:ba:86:31:92:44:aa:5f:f3:91:01:97:93:
         61:67:4e:f9:f3:97:87:d2:7e:19:d7:16:9e:a5:6b:33:28:e2:
         2d:ed:ee:40:37:be:88:a0:58:aa:bb:85:2a:f5:8d:56:b9:0e:
         bc:32:94:b0:55:98:9a:38:c7:77:96:91:97:1b:80:c0:fe:5c:
         0f:c9:1c:91:60:a8:f0:41:25:91:ff:a1:ae:c5:a6:cd:ca:6b:
         a5:d9:1b:b7:ec:7e:a5:cd:ad:e7:69:66:97:26:46:65:3d:8f:
         7f:35:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----