Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/T7lfUiBU8XXsiGDYOlSEyfoYGqM.roa
File:                     T7lfUiBU8XXsiGDYOlSEyfoYGqM.roa (raw, json)
Hash identifier:          kOhisWvusBnQVOD9UJz4UEDiNaRiUNK4F0BhgKXG31I=
Subject key identifier:   4F:B9:5F:52:20:54:F1:75:EC:88:60:D8:3A:54:84:C9:FA:18:1A:A3
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       018CC5014C13685FEFE879B80E090D472792
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/T7lfUiBU8XXsiGDYOlSEyfoYGqM.roa
Signing time:             Mon 01 Jan 2024 12:30:45 +0000
ROA not before:           Mon 01 Jan 2024 12:30:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7922
IP address blocks:        2a03:2880:d001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:01:4c:13:68:5f:ef:e8:79:b8:0e:09:0d:47:27:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Jan  1 12:30:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4fb95f522054f175ec8860d83a5484c9fa181aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:8a:e1:6d:ef:81:b2:57:d8:11:c7:55:5b:
                    2b:21:26:2e:c4:fc:e1:e9:6e:30:47:d0:1f:46:c7:
                    a0:70:09:99:a1:cb:94:78:3c:08:37:76:84:3a:83:
                    41:fb:10:e6:42:b2:52:37:d9:05:b8:6a:f0:a7:d3:
                    61:36:f1:fb:fb:b7:18:16:6a:a6:41:5f:2f:c0:5a:
                    77:4a:8e:3c:18:23:f8:1b:98:fb:cc:8d:a6:7e:e0:
                    70:f5:e1:e1:c7:1f:33:4e:17:42:9c:16:9d:86:94:
                    bd:d1:58:38:ce:2a:ac:e9:7b:be:83:76:59:74:51:
                    81:56:91:42:f6:53:29:6f:fe:e9:6c:ff:05:df:3c:
                    ba:95:63:3d:19:bd:d3:8b:a9:9a:40:a1:81:b6:ea:
                    ec:3b:68:a2:cb:d1:9a:91:8c:24:1a:91:b3:8f:a0:
                    7e:9f:86:fb:87:3e:20:b8:d1:80:54:2c:d3:cf:f7:
                    90:7a:ec:e7:16:a2:fe:eb:ee:c7:b8:5f:9d:52:ee:
                    3d:ac:94:ae:49:c7:a2:ab:61:fe:71:68:96:ad:e8:
                    ad:dc:6f:49:ab:38:73:56:9b:6f:4c:57:67:fd:35:
                    2f:c4:09:30:67:95:37:59:95:d4:1b:df:1a:ed:e8:
                    3b:84:ed:8a:cb:78:e4:8b:28:7e:f9:9f:e3:8a:97:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B9:5F:52:20:54:F1:75:EC:88:60:D8:3A:54:84:C9:FA:18:1A:A3
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/T7lfUiBU8XXsiGDYOlSEyfoYGqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a03:2880:d001::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:44:1c:61:dd:9d:14:e9:9f:49:64:d3:52:aa:d7:06:a1:18:
         d9:26:e7:e9:f8:8e:4e:66:ed:76:1e:59:e7:88:39:45:41:2c:
         36:2e:45:ff:0a:7a:d0:b2:59:01:fc:ee:3a:0c:b7:48:10:63:
         b6:3b:90:ec:ca:d8:44:eb:fb:64:83:5a:4f:33:89:3c:94:d8:
         68:62:19:55:68:be:ea:0f:7a:a3:41:5a:65:3f:34:07:62:8d:
         5e:f8:34:ed:fc:90:00:1a:72:a2:09:59:34:0d:f3:32:bd:ed:
         0a:bf:48:9d:8a:32:ac:1a:7a:3b:a8:1a:d7:4f:8f:0c:d4:c0:
         85:9b:ca:ad:ea:5c:34:f2:3d:0f:77:f9:cc:03:55:ef:12:45:
         51:80:b6:f5:3a:cb:61:e6:7d:bf:74:5f:56:cd:a6:82:36:79:
         2a:3a:fc:6e:ff:85:f3:4d:3a:57:d0:67:40:3d:52:03:94:2f:
         06:ea:33:46:cc:f2:5a:ba:52:2b:ed:92:15:13:f9:91:de:4b:
         55:19:f9:f6:1c:7e:9f:ae:d8:13:d9:40:32:99:3e:60:aa:03:
         e4:f8:3e:a2:e9:79:ab:19:25:6d:a5:13:34:5b:39:81:d6:54:
         9c:1f:88:69:e4:74:94:35:ae:1f:cc:ea:d9:bf:f9:93:a1:1a:
         f1:7e:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----