Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c0db4c-acfb-48ef-8f31-0b2ec6eef01f/1/41CF1sZvlxwAho4bTaA8-Z5wqfc.roa
File:                     41CF1sZvlxwAho4bTaA8-Z5wqfc.roa (raw, json)
Hash identifier:          LTUhwxKgxuWGYTpK4sR0w0bdXfbIPR44lz5ySTn9hHw=
Subject key identifier:   E3:50:85:D6:C6:6F:97:1C:00:86:8E:1B:4D:A0:3C:F9:9E:70:A9:F7
Certificate issuer:       /CN=eba9b39492eb16e7b76e9809651ce5335f30f64f
Certificate serial:       018CC348E481A5920D4D0FE05A949A3FEB95
Authority key identifier: EB:A9:B3:94:92:EB:16:E7:B7:6E:98:09:65:1C:E5:33:5F:30:F6:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/66mzlJLrFue3bpgJZRzlM18w9k8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c0db4c-acfb-48ef-8f31-0b2ec6eef01f/1/41CF1sZvlxwAho4bTaA8-Z5wqfc.roa
Signing time:             Mon 01 Jan 2024 04:29:43 +0000
ROA not before:           Mon 01 Jan 2024 04:29:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209432
IP address blocks:        2001:678:954::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c0db4c-acfb-48ef-8f31-0b2ec6eef01f/1/66mzlJLrFue3bpgJZRzlM18w9k8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c0db4c-acfb-48ef-8f31-0b2ec6eef01f/1/66mzlJLrFue3bpgJZRzlM18w9k8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/66mzlJLrFue3bpgJZRzlM18w9k8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:48:e4:81:a5:92:0d:4d:0f:e0:5a:94:9a:3f:eb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eba9b39492eb16e7b76e9809651ce5335f30f64f
        Validity
            Not Before: Jan  1 04:29:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e35085d6c66f971c00868e1b4da03cf99e70a9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1d:4a:e5:e1:f2:a6:d8:ef:4d:d2:33:a8:19:
                    2f:98:ec:7c:1a:fa:2d:62:db:ff:3c:e0:df:37:39:
                    22:8a:d6:43:a4:bb:34:62:f9:db:34:5c:10:09:15:
                    dd:f3:97:de:7b:90:04:4a:05:8b:85:70:0b:90:f8:
                    85:33:c1:6e:52:8c:4c:38:a7:7c:35:82:dd:53:6f:
                    1f:26:84:77:c2:98:7a:af:b8:d5:b5:ab:d3:03:a0:
                    99:bf:4f:de:ae:41:33:ef:b3:da:05:7f:5b:c0:34:
                    5c:74:c0:b1:2d:13:75:c1:be:ed:30:a4:d2:8f:89:
                    d5:4e:2c:7e:65:bc:a7:55:f4:92:d2:0c:a9:44:22:
                    d4:23:3c:ca:2e:a6:79:2c:1d:7c:29:00:d7:e1:e3:
                    27:36:3b:ce:70:12:5e:a9:a1:cd:59:b8:62:b0:56:
                    57:9b:bc:8b:98:6d:c6:3b:10:53:d3:28:a5:94:7f:
                    33:85:db:36:5d:b8:c3:5d:9b:8c:cc:26:51:4d:6e:
                    b1:14:96:84:17:03:fa:c7:ec:a4:6e:ee:c8:ec:fa:
                    78:24:fc:b3:59:bc:20:35:b8:39:ea:1d:88:ee:6e:
                    61:10:2e:ae:d7:fa:ff:6c:a2:39:7d:7d:44:4d:48:
                    54:17:70:a4:94:14:23:19:d6:73:eb:7a:33:5b:d6:
                    37:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:50:85:D6:C6:6F:97:1C:00:86:8E:1B:4D:A0:3C:F9:9E:70:A9:F7
            X509v3 Authority Key Identifier:
                keyid:EB:A9:B3:94:92:EB:16:E7:B7:6E:98:09:65:1C:E5:33:5F:30:F6:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66mzlJLrFue3bpgJZRzlM18w9k8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0db4c-acfb-48ef-8f31-0b2ec6eef01f/1/41CF1sZvlxwAho4bTaA8-Z5wqfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c0db4c-acfb-48ef-8f31-0b2ec6eef01f/1/66mzlJLrFue3bpgJZRzlM18w9k8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:954::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:eb:9a:a6:c2:e7:c5:14:6d:b3:37:99:ed:18:f5:2d:8b:4c:
         2d:30:cb:b2:a0:d1:24:0a:99:23:56:44:9f:35:b8:c6:b1:56:
         15:4b:4f:51:75:78:6e:91:bc:c2:41:4f:92:13:fd:14:ed:0e:
         02:b0:9e:58:a7:0f:ec:92:42:ca:a1:1e:b0:63:5f:1e:d0:04:
         6e:85:aa:e6:b6:f6:f8:55:1c:bb:71:ed:99:36:29:c3:ef:cc:
         f0:e9:59:63:7d:da:4c:43:85:2a:d6:58:c0:fb:2d:a8:aa:6a:
         16:c5:22:b2:f7:12:b4:95:28:35:fa:3a:01:b0:fe:c8:3c:7e:
         75:ff:34:33:e3:b9:a4:05:b0:18:e5:41:3f:1e:46:47:5c:78:
         d1:62:f9:8b:16:c3:71:5e:13:9c:f6:24:fb:8f:b4:98:6b:1e:
         f9:28:d1:df:54:e6:9f:aa:2b:9b:1d:53:5f:83:2f:dc:34:8a:
         a9:53:a5:da:cd:f2:90:93:15:e2:76:a2:8b:c5:70:2e:9b:81:
         5f:66:07:32:9c:94:f5:54:69:33:16:7d:a3:ee:8e:5d:ef:18:
         f5:91:ea:1f:44:23:4b:73:38:7d:fc:f1:2b:c3:b1:40:a5:fe:
         ab:fa:64:a9:43:65:8a:e4:91:c6:d0:ea:0d:b2:2d:b0:61:af:
         f2:c4:8e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----