Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/gMXKuYY3VUIeAtmGhOy7amjQBjc.roa
File:                     gMXKuYY3VUIeAtmGhOy7amjQBjc.roa (raw, json)
Hash identifier:          /ZXDIIFpfz3sPGstO361xbkLo1P5DyMJp94M8/NceMQ=
Subject key identifier:   80:C5:CA:B9:86:37:55:42:1E:02:D9:86:84:EC:BB:6A:68:D0:06:37
Certificate issuer:       /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial:       018CC86F705325CC7A05006CCD8661B33116
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/gMXKuYY3VUIeAtmGhOy7amjQBjc.roa
Signing time:             Tue 02 Jan 2024 04:29:55 +0000
ROA not before:           Tue 02 Jan 2024 04:29:55 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     6697
IP address blocks:        2a10:641::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Jun 2024 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:6f:70:53:25:cc:7a:05:00:6c:cd:86:61:b3:31:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
        Validity
            Not Before: Jan  2 04:29:55 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=80c5cab9863755421e02d98684ecbb6a68d00637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:f5:2e:67:22:25:d0:47:6b:1d:0e:3f:53:
                    89:e4:24:aa:77:bc:70:e5:54:c7:69:4b:12:e1:5a:
                    7f:73:72:9c:01:61:12:62:53:7d:42:ae:6b:27:96:
                    4c:62:4b:41:64:d4:3e:ce:75:03:ab:96:30:86:af:
                    65:5f:ad:67:03:68:94:91:94:ee:d8:c6:10:e4:1e:
                    94:32:23:3e:8c:30:19:ee:d1:52:ce:a3:b2:32:a4:
                    f8:2d:63:27:1e:53:c5:7f:17:da:db:e0:dc:92:ef:
                    00:79:24:5e:d0:d1:39:a9:b2:62:d6:c6:a1:23:58:
                    52:31:b0:c7:da:2f:8e:27:09:c5:49:7d:41:6d:93:
                    e4:90:9e:77:9c:a5:03:99:96:55:dc:a4:b5:71:73:
                    27:fa:96:5f:6b:a4:6f:f8:4d:2c:3d:69:15:b2:34:
                    63:c0:b7:8e:41:71:2d:ed:fb:ce:69:42:4b:2d:dc:
                    bd:e8:b5:f0:f4:ce:db:0f:a7:02:b9:10:49:8e:a7:
                    8e:7e:2f:3d:27:61:0a:a1:12:66:03:a1:98:fa:c2:
                    1b:e3:68:32:f1:4a:0d:ea:3e:17:39:af:12:12:8c:
                    ec:57:fb:39:94:c7:83:84:ab:96:47:bf:66:84:a0:
                    6f:b8:f5:dd:be:fc:6b:f2:cd:c2:aa:2a:cc:74:67:
                    78:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C5:CA:B9:86:37:55:42:1E:02:D9:86:84:EC:BB:6A:68:D0:06:37
            X509v3 Authority Key Identifier:
                keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/gMXKuYY3VUIeAtmGhOy7amjQBjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:641::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:aa:9d:1b:a8:d1:0b:3e:18:be:e1:25:19:a7:87:eb:24:cd:
         67:d6:a7:12:c6:df:b5:c6:bf:f0:ca:d7:98:b2:18:33:d6:15:
         fe:ba:0a:2a:a2:47:59:2d:ea:93:1c:cc:7a:31:26:c8:5d:2a:
         50:40:33:d5:3b:66:9a:6e:ae:ed:7e:d4:29:96:97:30:33:b3:
         bb:a0:f3:c6:dd:2f:da:db:a8:ae:8c:1e:9f:7b:3e:8f:d4:fb:
         ae:a7:a4:7c:28:22:d7:e3:96:45:f5:77:9b:32:48:bd:0c:ac:
         c9:db:e6:5b:f2:62:0e:c2:2c:ad:f7:8b:7a:c1:7d:b0:b7:70:
         27:42:87:5d:41:b0:8b:5b:86:81:db:05:c2:bc:af:bb:75:ec:
         23:6a:d4:9e:28:6b:de:62:bb:50:76:5e:68:d8:fd:a3:71:80:
         a8:50:55:10:6a:86:a1:44:dc:b1:22:4f:bc:69:38:27:cb:e9:
         7a:77:84:1e:a2:8a:72:9d:51:22:dc:de:83:d6:09:e7:df:88:
         80:5f:ad:60:cd:39:d9:05:48:00:90:38:e6:af:c7:c0:41:93:
         e5:5c:2a:3c:00:bd:17:dc:91:5d:36:f5:2b:19:dd:8a:1c:1d:
         f7:a1:3a:f3:aa:16:a0:3c:96:cb:42:f5:5d:c9:94:af:c7:b1:
         e1:76:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----