Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/SBU2D1fv9-zKSTvXVOcCjj9xQVE.roa
File:                     SBU2D1fv9-zKSTvXVOcCjj9xQVE.roa (raw, json)
Hash identifier:          mlwImh9bGHkjLtwmbNB4w77DcXm7sRDKnJXDtwB03/s=
Subject key identifier:   48:15:36:0F:57:EF:F7:EC:CA:49:3B:D7:54:E7:02:8E:3F:71:41:51
Certificate issuer:       /CN=daa523d5b893c925ec3a82601f9274582cefc6f0
Certificate serial:       018EF751F05F0D9600E3B197B404B602D2AB
Authority key identifier: DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/SBU2D1fv9-zKSTvXVOcCjj9xQVE.roa
Signing time:             Fri 19 Apr 2024 17:05:26 +0000
ROA not before:           Fri 19 Apr 2024 17:05:26 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216105
IP address blocks:        2001:67c:d4c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f7:51:f0:5f:0d:96:00:e3:b1:97:b4:04:b6:02:d2:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa523d5b893c925ec3a82601f9274582cefc6f0
        Validity
            Not Before: Apr 19 17:05:26 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4815360f57eff7ecca493bd754e7028e3f714151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:bd:11:98:e3:a7:39:34:f4:e3:ee:c3:4d:80:
                    25:de:c3:05:02:9e:50:1a:19:06:f6:37:3c:9e:a4:
                    15:d5:53:4f:11:ac:dc:55:64:34:9d:3c:a4:e6:2b:
                    cd:c1:b6:87:8a:a4:97:30:d2:df:d2:b9:f0:8a:1f:
                    d3:5f:ed:f7:84:92:66:84:41:99:cd:24:46:2d:3f:
                    75:ea:ae:40:a0:ec:ac:d7:ea:7f:94:f7:7e:ce:e9:
                    7d:6c:d2:99:db:bd:6d:5f:f6:ac:17:07:38:fb:f5:
                    33:d6:0b:90:01:e9:3f:f3:e7:b0:d0:e3:e0:95:fd:
                    02:8d:30:62:78:80:c4:35:77:98:ef:9d:46:00:57:
                    17:3b:29:b5:a6:8f:d6:23:c5:b7:f4:3f:6d:52:65:
                    50:9a:fa:9a:87:e0:72:74:20:c4:a6:2e:1c:ba:dc:
                    84:40:4b:94:02:e7:e6:8d:58:7b:22:2b:20:65:fa:
                    33:a4:37:03:96:a3:ea:b4:2b:22:fe:fb:7d:fb:cb:
                    54:e2:db:76:89:2f:a8:18:10:64:77:eb:48:a6:2c:
                    a5:86:94:a3:19:54:a3:1a:fe:f5:68:89:19:da:e7:
                    a5:41:dc:2a:09:79:0e:10:13:80:a6:f5:20:b0:16:
                    30:6f:42:c7:74:6b:01:4e:dd:04:65:10:26:f8:e0:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:15:36:0F:57:EF:F7:EC:CA:49:3B:D7:54:E7:02:8E:3F:71:41:51
            X509v3 Authority Key Identifier:
                keyid:DA:A5:23:D5:B8:93:C9:25:EC:3A:82:60:1F:92:74:58:2C:EF:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qUj1biTySXsOoJgH5J0WCzvxvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/SBU2D1fv9-zKSTvXVOcCjj9xQVE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/7e7eb4-6e56-4caf-8edb-a450295a490d/1/2qUj1biTySXsOoJgH5J0WCzvxvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:d4c::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:e4:4f:68:44:17:35:85:45:8a:02:3f:3d:38:a4:42:07:
         68:b5:fc:9f:37:c5:72:4e:29:ba:92:69:f3:13:41:eb:80:c8:
         86:07:e4:27:7f:6b:60:82:77:e2:b9:b9:e1:3c:4f:85:24:a0:
         e4:30:f4:69:7a:5d:2b:1f:26:6e:5e:5c:97:9f:b8:ad:ac:c4:
         64:77:3e:eb:0c:3a:ba:bc:e5:a8:49:18:35:24:22:07:9e:36:
         fd:26:49:7a:72:f8:5b:be:7d:0e:53:ee:0c:58:90:8e:ba:a4:
         bf:03:c8:dd:d9:c1:bf:7b:65:ca:40:a3:22:ed:dd:b8:16:a7:
         ad:e6:a9:6d:61:89:e6:74:34:06:11:7e:17:d2:7b:74:af:10:
         70:7a:95:f6:48:dd:d1:70:2a:e0:af:6b:06:e2:42:b3:14:aa:
         9f:69:bb:f7:a4:aa:40:1e:5e:14:aa:1f:aa:36:6f:5b:a0:00:
         92:02:04:1e:e3:11:26:38:c3:74:96:08:9a:3c:48:a6:0d:8b:
         23:99:37:16:b5:d4:c0:9a:14:60:57:3b:86:f1:0a:4e:a5:eb:
         79:c4:9a:0f:83:32:72:88:24:dc:cf:6b:1b:44:df:77:91:9a:
         b9:f0:2d:74:e0:d2:92:7e:68:44:b0:ee:e5:ce:52:35:70:17:
         75:90:18:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----