Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/0tct9C-fZxSPDjCLqL9m3Imw1cw.roa
File:                     0tct9C-fZxSPDjCLqL9m3Imw1cw.roa (raw, json)
Hash identifier:          6mOzape01YyuAE8XqcvVTnYwP/e6cx6Z7uflIr5ZKGY=
Subject key identifier:   D2:D7:2D:F4:2F:9F:67:14:8F:0E:30:8B:A8:BF:66:DC:89:B0:D5:CC
Certificate issuer:       /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial:       018CC4933A2DC151C6FFE6561D9A27E6755F
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/0tct9C-fZxSPDjCLqL9m3Imw1cw.roa
Signing time:             Mon 01 Jan 2024 10:30:32 +0000
ROA not before:           Mon 01 Jan 2024 10:30:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208197
IP address blocks:        194.9.63.0/24 maxlen: 24
                          2a12:4640::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:3a:2d:c1:51:c6:ff:e6:56:1d:9a:27:e6:75:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
        Validity
            Not Before: Jan  1 10:30:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=d2d72df42f9f67148f0e308ba8bf66dc89b0d5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f4:c4:43:64:34:ae:69:fd:96:29:bf:e5:68:
                    c1:3a:d1:4a:eb:6e:37:b7:7b:1d:c3:56:68:23:e8:
                    6a:97:69:fb:a7:68:26:6b:55:18:55:ef:f7:0b:68:
                    db:4a:86:94:1f:fa:0d:a7:2c:49:56:50:35:41:b3:
                    73:ac:c3:92:fa:06:41:80:45:1c:1d:02:73:79:91:
                    1c:76:9e:f1:6f:56:1b:9d:5c:dc:8b:e9:98:8d:5d:
                    32:e0:ba:5f:a4:85:c3:ae:7d:8d:3e:59:73:93:2c:
                    e8:4a:6a:37:a9:86:91:5f:70:1c:6a:b0:00:75:ab:
                    c6:e5:09:21:82:a1:28:f6:ba:06:70:be:8e:0c:4a:
                    81:1d:9b:23:e7:ba:df:5b:7f:0f:28:9d:f3:d6:c5:
                    bc:93:94:9c:d2:3e:bf:96:34:29:14:43:54:7f:0f:
                    bd:de:a6:d5:b4:bf:59:24:5b:d8:83:d4:5c:a0:89:
                    d6:ac:ba:cc:36:5d:db:12:e8:37:a0:48:1d:19:7a:
                    cc:36:b6:37:82:59:aa:3d:dd:20:62:0b:de:03:36:
                    69:f8:4d:13:e7:34:3d:71:e0:3b:db:41:f2:b0:a5:
                    4d:db:b6:57:fc:41:d7:50:92:60:6d:ff:cc:2f:0c:
                    ca:6a:86:f1:7b:9f:04:b4:60:38:07:9e:9f:cc:62:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D7:2D:F4:2F:9F:67:14:8F:0E:30:8B:A8:BF:66:DC:89:B0:D5:CC
            X509v3 Authority Key Identifier:
                keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/0tct9C-fZxSPDjCLqL9m3Imw1cw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.9.63.0/24
                IPv6:
                  2a12:4640::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:d8:c8:dc:cc:09:2b:ec:55:de:09:e5:39:64:ba:85:de:ef:
         df:2e:c3:43:15:de:28:93:67:e7:fd:db:9d:94:52:7e:b9:1a:
         54:7a:f4:1b:5f:13:55:1b:4f:ec:30:53:76:42:3b:db:40:7e:
         21:9d:fa:6f:fc:82:ef:9d:1e:11:5b:e1:e9:44:af:af:17:f6:
         61:cf:90:a7:22:d0:bf:dd:10:f4:82:b9:0b:f4:d0:3f:ff:d6:
         a7:1a:6d:86:79:df:c1:28:42:46:33:62:41:ca:b1:54:fd:8f:
         32:67:c0:18:43:e7:c1:08:0c:b3:6e:5f:58:59:5e:61:13:df:
         77:24:53:5a:a4:2b:ed:69:4f:fb:fa:2d:2c:af:b3:a4:4d:6b:
         17:07:d2:53:37:92:c5:80:56:46:a6:b2:f9:30:12:5b:b8:77:
         d1:89:67:c1:79:81:16:4c:e6:06:60:84:b8:8c:7a:cb:19:53:
         a7:ed:0b:b6:19:da:b5:d2:a9:56:27:b9:71:2b:a0:5b:7f:2f:
         78:9d:97:b6:f3:45:b5:ff:24:bc:59:07:53:9e:01:2b:51:36:
         8b:03:78:8a:5c:56:f2:de:f3:a8:7f:dc:70:b9:be:95:68:62:
         73:96:bf:59:28:94:6d:4a:fa:e4:67:aa:21:25:86:bb:2d:9e:
         58:d4:3f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----