Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8ev07ko75fEqRXNtirPSafssy-k.roa
File:                     8ev07ko75fEqRXNtirPSafssy-k.roa (raw, json)
Hash identifier:          7o1lQs109FFLrasfwNQX/ZWgg1TLg0ftwHxCBap6b5Y=
Subject key identifier:   F1:EB:F4:EE:4A:3B:E5:F1:2A:45:73:6D:8A:B3:D2:69:FB:2C:CB:E9
Certificate issuer:       /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial:       018CC6B8EC8F310BFE671BA73BAAF6AEDDF1
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8ev07ko75fEqRXNtirPSafssy-k.roa
Signing time:             Mon 01 Jan 2024 20:30:57 +0000
ROA not before:           Mon 01 Jan 2024 20:30:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210633
IP address blocks:        2a0c:9a40:8170::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b8:ec:8f:31:0b:fe:67:1b:a7:3b:aa:f6:ae:dd:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
        Validity
            Not Before: Jan  1 20:30:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f1ebf4ee4a3be5f12a45736d8ab3d269fb2ccbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:30:b4:10:2c:0a:f6:01:77:ca:db:7f:03:
                    8b:38:ba:5c:3b:5b:7a:47:41:8b:63:b1:18:31:77:
                    9c:ff:ff:13:e3:d8:95:a4:6b:ad:92:f4:c8:5a:64:
                    30:59:9b:d8:58:ef:e6:83:11:26:30:d9:a0:90:8b:
                    68:19:f5:19:1f:ce:da:84:8b:17:16:84:31:52:bc:
                    6d:63:13:74:4d:28:1f:ff:38:bd:d5:d9:16:17:d7:
                    40:3e:15:c4:1b:05:76:13:19:5c:bf:3d:fd:6c:d7:
                    e9:0b:2e:e6:a4:9b:f8:da:41:9e:ce:34:c7:b2:ca:
                    72:75:72:39:81:fe:12:c6:ab:58:f3:af:b6:1e:36:
                    da:2b:59:95:65:cd:9c:6e:fd:15:aa:4e:34:d7:31:
                    7d:34:60:06:75:90:02:a0:42:2b:cc:d5:44:de:19:
                    ec:9a:08:e8:46:e7:39:d6:f9:e9:94:59:d7:4d:38:
                    98:9d:ec:86:79:5b:ea:0f:d1:fd:e9:65:5a:e2:fe:
                    8f:6b:1b:6f:9c:4f:a1:3d:a3:f5:94:bf:04:eb:76:
                    3e:69:99:46:b7:8b:77:0a:2a:0e:eb:2d:e0:9e:32:
                    ec:63:19:7f:88:6d:02:92:97:fe:ae:ae:90:1e:c8:
                    54:45:ba:6f:81:df:f8:fd:03:2f:47:b1:af:f1:40:
                    0d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EB:F4:EE:4A:3B:E5:F1:2A:45:73:6D:8A:B3:D2:69:FB:2C:CB:E9
            X509v3 Authority Key Identifier:
                keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/8ev07ko75fEqRXNtirPSafssy-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:9a40:8170::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:72:d6:93:d9:6f:07:f2:9d:5c:c7:66:34:43:f1:24:13:33:
         c3:09:2a:76:db:d8:be:ae:a3:8b:d0:e9:1a:9e:f4:9f:d8:8f:
         c8:5b:be:cb:2d:7c:aa:93:80:d6:98:ab:42:f6:2f:8c:b7:6a:
         dd:eb:c7:c2:69:82:f8:e3:c0:0d:f8:5a:48:af:ea:d0:db:75:
         4d:a4:b3:f7:d5:8d:ce:b2:7f:8b:cc:57:2e:8f:68:3b:52:e3:
         ce:ed:f2:bf:27:0c:5e:50:66:18:73:dc:13:42:e0:8e:b6:ff:
         72:65:af:f0:ed:2e:c3:1e:d3:e5:ba:e7:7c:58:64:49:f7:00:
         d9:14:1f:32:b4:e6:fe:90:1f:11:7f:c0:1e:f3:17:4b:f8:a6:
         d2:b0:ce:60:e4:5b:27:fa:b7:3c:01:2b:8c:ef:7d:71:40:27:
         37:d2:6c:d4:23:a7:06:b7:6c:9d:54:99:aa:fb:6b:a7:7e:cc:
         10:38:cf:5c:85:73:b7:0e:fe:9e:14:5c:48:15:31:81:ae:3f:
         e6:a1:2e:8a:db:2c:57:93:95:62:91:f2:35:83:cf:c3:13:df:
         32:4e:dc:45:59:44:76:1b:a9:9f:9a:b6:f2:8e:20:f7:60:cb:
         2f:97:1f:05:ef:6e:c5:5e:4a:7b:f2:56:9d:9b:b8:70:de:29:
         3f:f5:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----