Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/5uRWMNR-LW9U4xxPnUDHDTNIdTk.roa
File:                     5uRWMNR-LW9U4xxPnUDHDTNIdTk.roa (raw, json)
Hash identifier:          UvfgI7+FV40Bldx1eY9ZO4wWJCuVXb5sdP2HQ4TbB9k=
Subject key identifier:   E6:E4:56:30:D4:7E:2D:6F:54:E3:1C:4F:9D:40:C7:0D:33:48:75:39
Certificate issuer:       /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial:       018CE464EB078355447D78C587F0FBF37667
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/5uRWMNR-LW9U4xxPnUDHDTNIdTk.roa
Signing time:             Sun 07 Jan 2024 14:47:48 +0000
ROA not before:           Sun 07 Jan 2024 14:47:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202685
IP address blocks:        2a05:7840::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:e4:64:eb:07:83:55:44:7d:78:c5:87:f0:fb:f3:76:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
        Validity
            Not Before: Jan  7 14:47:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e6e45630d47e2d6f54e31c4f9d40c70d33487539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8e:a7:3b:b0:22:54:ef:4c:66:05:7d:7c:0b:
                    b2:bd:3f:cd:e9:41:06:02:f3:f0:44:4b:e4:fc:37:
                    65:7a:1d:b6:69:5b:ec:7f:78:6a:10:68:e1:48:fe:
                    b5:f2:01:09:95:8a:fe:41:d6:1b:be:71:61:86:39:
                    cf:6b:0a:3a:c3:cd:3f:0c:95:39:88:5a:a8:a4:4d:
                    a2:c1:05:42:1b:ce:f2:cb:a8:3d:0e:91:21:1b:e3:
                    16:7e:2c:bb:21:35:b1:2b:f7:9c:2e:a2:c0:2d:4b:
                    e2:f0:c4:2f:ab:95:37:41:1e:9a:a8:72:f2:f7:37:
                    2d:92:76:e4:5d:eb:3e:6b:4a:26:cc:41:4d:93:fa:
                    9e:0c:76:ed:ee:49:ae:f4:e2:76:de:4c:cc:01:b5:
                    9b:2e:fb:bc:b6:77:4a:d4:82:c9:12:ee:98:5b:3f:
                    06:03:6e:5f:9d:0f:17:36:15:9b:18:93:4d:d5:84:
                    ec:2e:1c:3b:93:03:fd:3d:36:92:43:5e:30:71:20:
                    78:aa:e2:02:40:d2:66:b6:59:01:74:08:25:84:0d:
                    ce:9e:9d:d0:3b:b4:b7:f6:d5:94:9d:3c:f1:20:45:
                    08:2c:d9:a8:7d:ec:bc:49:cb:a9:e2:af:7c:29:8a:
                    e5:55:42:90:1b:0a:3c:85:12:28:e5:b3:da:60:17:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E4:56:30:D4:7E:2D:6F:54:E3:1C:4F:9D:40:C7:0D:33:48:75:39
            X509v3 Authority Key Identifier:
                keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/5uRWMNR-LW9U4xxPnUDHDTNIdTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:7840::/29

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:39:44:b3:ba:51:66:6a:16:5d:fd:97:0f:98:f5:a3:4c:
         9c:57:ff:ec:55:0c:e0:13:f1:50:7d:88:50:1d:16:f8:29:7a:
         37:39:99:fb:23:a2:94:cb:10:18:ae:0e:27:49:a9:88:84:c2:
         0a:32:85:24:0d:51:21:f9:1a:51:ef:30:4d:34:ad:c5:ad:49:
         cd:36:dd:fa:5d:7a:55:2c:5f:3c:a7:7b:4d:5c:af:b6:03:25:
         8e:c3:b0:e3:ec:22:f1:a1:a1:b0:ae:b8:64:29:03:54:2c:c9:
         a6:c9:46:35:e4:5f:eb:8b:3f:2d:81:10:d3:40:e2:d0:fa:36:
         29:e3:11:f7:3e:3d:3d:de:e6:93:f6:01:33:de:06:18:3d:56:
         0d:98:37:52:0f:6f:b1:86:71:c8:a9:fd:64:2d:22:cf:f1:e0:
         d1:88:32:57:3f:82:89:9a:8d:70:81:27:5f:e1:3c:51:2d:ed:
         65:31:78:19:7e:dd:a5:0c:41:1d:48:3b:e3:e9:71:5a:6d:1f:
         8c:dd:72:9a:8b:db:92:39:c2:5d:26:7f:c5:07:d5:30:c0:0e:
         12:28:2a:90:30:10:7c:c0:20:62:fb:a8:10:6f:ef:41:d6:51:
         d6:46:6d:a0:a4:a2:6c:83:85:e6:36:57:d9:49:70:bc:8d:88:
         dd:fe:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----