Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/gM6NWVLYEGEkNvuAunx5Tq2hq0g.roa
File:                     gM6NWVLYEGEkNvuAunx5Tq2hq0g.roa (raw, json)
Hash identifier:          SH0FkK9u7kJGN/7iWbpq2AHdgOARD1LrK6BfbCPyTlg=
Subject key identifier:   80:CE:8D:59:52:D8:10:61:24:36:FB:80:BA:7C:79:4E:AD:A1:AB:48
Certificate issuer:       /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
Certificate serial:       019351040F56218CD47D6F9C8C55C017941F
Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/gM6NWVLYEGEkNvuAunx5Tq2hq0g.roa
Signing time:             Thu 21 Nov 2024 23:17:20 +0000
ROA not before:           Thu 21 Nov 2024 23:17:20 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215629
IP address blocks:        2001:67c:da0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:04:0f:56:21:8c:d4:7d:6f:9c:8c:55:c0:17:94:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc
        Validity
            Not Before: Nov 21 23:17:20 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=80ce8d5952d810612436fb80ba7c794eada1ab48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:10:26:96:f0:27:97:c8:54:57:f8:0d:e8:
                    a2:18:cd:e6:d7:67:91:a8:b9:36:22:e9:97:d6:39:
                    85:06:4d:43:81:89:2b:00:a4:48:e1:30:97:67:90:
                    8b:d4:f4:c6:ad:a1:f9:f4:c0:94:a5:e5:56:72:e9:
                    85:08:01:31:e8:dd:a1:f2:9e:ca:cb:40:2d:49:58:
                    ce:0d:d8:80:1f:2e:ce:27:e0:b2:e5:7c:55:6e:7c:
                    ee:15:2b:31:aa:92:b4:a7:ee:82:8a:66:07:ff:96:
                    17:4f:90:dc:e3:16:64:da:9e:6b:24:f9:9a:be:f1:
                    4a:63:35:80:94:97:21:6e:36:86:7d:c3:e3:12:6d:
                    c8:34:af:2f:8c:0d:11:67:5e:98:c3:4b:2b:26:88:
                    97:da:f5:ea:db:d0:e4:6a:13:f2:bd:dc:fb:81:e8:
                    11:67:ef:e3:13:43:b0:95:fd:a6:5d:a9:9c:d5:e4:
                    c8:41:59:d2:62:6c:fe:8a:35:fd:4a:c1:9e:27:2f:
                    b2:93:c4:42:98:4a:d1:ff:f1:da:4a:b7:6d:49:33:
                    6c:e8:b1:91:27:9e:9f:a4:da:b1:9c:9e:41:04:dc:
                    6d:78:90:bd:f7:86:d6:c3:a1:b0:52:6b:7a:bb:5d:
                    36:9e:94:25:40:51:19:23:05:fa:12:1f:b4:c4:46:
                    55:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CE:8D:59:52:D8:10:61:24:36:FB:80:BA:7C:79:4E:AD:A1:AB:48
            X509v3 Authority Key Identifier:
                keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/gM6NWVLYEGEkNvuAunx5Tq2hq0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:da0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:b0:61:bf:05:b6:fa:97:1d:52:58:37:cd:99:c2:6a:a4:17:
         9f:02:83:f1:1c:af:e0:82:75:4a:91:8e:60:6c:0d:f2:c7:23:
         d8:9f:09:da:4f:d4:da:b0:8a:75:b1:10:a3:2b:bc:37:d4:37:
         83:48:c1:3b:86:84:d2:4c:54:f0:08:e2:5c:da:52:0c:b3:95:
         42:b7:40:6e:c4:26:e6:97:84:9b:af:aa:6d:04:6e:43:9b:6c:
         4b:c6:5c:93:e1:3e:de:8b:a3:00:45:cf:3a:f8:ac:22:60:9e:
         dd:0a:45:83:d2:cd:9d:f5:9d:39:18:1e:ae:be:ca:25:01:c6:
         39:e7:7f:62:b2:af:a0:be:39:f4:94:4f:09:d8:ff:75:6c:02:
         03:9e:db:eb:d6:37:12:02:a9:82:d5:65:56:e2:16:ea:7d:93:
         95:30:50:9c:de:65:bf:63:47:e2:53:b7:5b:df:f9:4f:e6:74:
         df:ef:cd:36:09:4c:75:a6:e0:7b:a2:75:60:1e:7a:df:34:73:
         47:78:75:3b:c6:d7:c2:05:09:45:79:8a:88:82:32:08:6d:2a:
         84:e3:23:82:ab:85:37:8f:6a:55:cc:65:43:ec:b3:39:30:b2:
         32:77:d4:b2:13:f8:49:b4:ac:bf:b9:af:36:43:d5:e5:0b:aa:
         11:39:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----