Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9L4cVualG0nrDdbGWVKhSG4JBqo.roa
File:                     9L4cVualG0nrDdbGWVKhSG4JBqo.roa (raw, json)
Hash identifier:          nKRP1ikJ2uAXuca1cZgic0RY+Exa29MgsQpQMS+MelE=
Subject key identifier:   F4:BE:1C:56:E6:A5:1B:49:EB:0D:D6:C6:59:52:A1:48:6E:09:06:AA
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       018D275A635F97E6B32D5F5FC942BC87ED9F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9L4cVualG0nrDdbGWVKhSG4JBqo.roa
Signing time:             Sat 20 Jan 2024 14:50:51 +0000
ROA not before:           Sat 20 Jan 2024 14:50:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210979
IP address blocks:        2a0d:6f80:4a21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:27:5a:63:5f:97:e6:b3:2d:5f:5f:c9:42:bc:87:ed:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: Jan 20 14:50:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f4be1c56e6a51b49eb0dd6c65952a1486e0906aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:46:41:fd:de:74:64:21:db:51:b9:c9:4c:
                    72:7a:54:8e:ab:cb:fa:d9:30:4e:8e:c7:e1:0d:ee:
                    42:c3:69:74:b3:f1:c5:42:f7:21:ca:e9:05:31:dc:
                    cb:df:86:28:19:03:3b:c8:36:21:7f:a1:a1:7f:85:
                    86:5c:a1:f5:f5:b5:f1:e9:71:ab:e7:42:23:05:7b:
                    3a:20:b6:34:7f:fd:36:e5:59:29:b1:5c:90:a9:ba:
                    90:86:aa:87:18:66:20:26:d3:94:c5:83:5c:10:97:
                    71:ec:69:32:9d:84:d7:ef:d1:8f:da:c5:df:c9:19:
                    e7:e7:2a:96:7b:4c:bf:cc:77:3a:1d:b6:8d:d0:fd:
                    36:eb:1e:c5:3a:d9:28:bc:8e:63:b2:17:18:5f:1b:
                    e8:c0:04:0b:e2:b2:ca:31:66:31:cc:aa:99:c3:c7:
                    f3:28:92:68:d8:b7:c3:36:e6:fa:2a:0b:da:d1:62:
                    db:95:3e:12:bb:6a:a7:61:6f:cc:40:ce:e8:2b:5a:
                    1e:22:1d:2b:07:2f:68:75:5b:47:8f:f9:a9:77:41:
                    de:b1:76:37:f9:be:bd:9c:11:f9:1f:1a:01:39:2f:
                    16:2b:da:8a:40:8b:c5:aa:ab:e0:4b:29:73:c6:6a:
                    02:50:e8:16:d9:21:49:d8:09:29:56:eb:b9:23:d5:
                    3f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BE:1C:56:E6:A5:1B:49:EB:0D:D6:C6:59:52:A1:48:6E:09:06:AA
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/9L4cVualG0nrDdbGWVKhSG4JBqo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0d:6f80:4a21::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:94:3e:55:93:35:cd:93:68:e2:df:3b:d3:75:56:4b:df:77:
         82:37:f1:79:9a:db:a1:53:22:dc:d0:5c:47:b5:24:39:27:6a:
         f3:8b:19:75:6f:65:e2:20:e9:9c:f7:1a:20:c5:e6:85:1e:07:
         f1:82:55:41:99:99:fa:7b:ba:e9:72:20:95:e4:4e:63:9b:6b:
         a2:fd:50:a1:7b:1f:62:5c:d4:2f:42:41:dc:cf:9a:e3:ef:e4:
         a4:d6:20:c4:6b:8c:ba:52:0d:3f:45:ff:55:95:cc:8e:4f:fe:
         18:0f:d8:d7:7f:47:5a:b6:65:3f:fe:c8:17:60:a4:a7:d8:a0:
         ba:d0:1c:66:74:d9:69:95:14:9b:3c:28:fc:99:e1:c3:7b:6f:
         7a:38:ef:46:4c:59:ae:42:58:ae:f8:f7:17:6e:f8:10:94:bb:
         ee:4d:18:60:b4:80:81:08:d9:5d:15:e0:19:56:de:3f:8d:f2:
         26:1b:b6:dd:3a:35:2e:57:78:8f:83:77:d7:ff:91:56:85:16:
         fb:4e:59:cc:ae:c5:0e:31:1a:27:4d:69:d5:9d:ee:87:71:58:
         b7:34:27:10:c1:47:b8:08:cf:77:88:7e:9d:ef:01:ed:ea:a2:
         73:ee:01:24:b8:f6:26:8f:47:11:0d:cf:f6:16:81:1c:7b:d4:
         4d:0a:98:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY0nWmNfl+azLV9fyUK8h+2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwMTIwMTQ1MDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGJlMWM1NmU2YTUxYjQ5ZWIwZGQ2YzY1OTUyYTE0ODZlMDkwNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArS1GQf3edGQh21G5yUxyelSOq8v6
2TBOjsfhDe5Cw2l0s/HFQvchyukFMdzL34YoGQM7yDYhf6Ghf4WGXKH19bXx6XGr
50IjBXs6ILY0f/025VkpsVyQqbqQhqqHGGYgJtOUxYNcEJdx7GkynYTX79GP2sXf
yRnn5yqWe0y/zHc6HbaN0P026x7FOtkovI5jshcYXxvowAQL4rLKMWYxzKqZw8fz
KJJo2LfDNub6Kgva0WLblT4Su2qnYW/MQM7oK1oeIh0rBy9odVtHj/mpd0HesXY3
+b69nBH5HxoBOS8WK9qKQIvFqqvgSylzxmoCUOgW2SFJ2AkpVuu5I9U/7QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPS+HFbmpRtJ6w3WxllSoUhuCQaqMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvOUw0Y1Z1YWxHMG5yRGRiR1dWS2hTRzRKQnFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgEoh
MA0GCSqGSIb3DQEBCwUAA4IBAQARlD5VkzXNk2ji3zvTdVZL33eCN/F5mtuhUyLc
0FxHtSQ5J2rzixl1b2XiIOmc9xogxeaFHgfxglVBmZn6e7rpciCV5E5jm2ui/VCh
ex9iXNQvQkHcz5rj7+Sk1iDEa4y6Ug0/Rf9VlcyOT/4YD9jXf0datmU//sgXYKSn
2KC60BxmdNlplRSbPCj8meHDe296OO9GTFmuQliu+PcXbvgQlLvuTRhgtICBCNld
FeAZVt4/jfImG7bdOjUuV3iPg3fX/5FWhRb7TlnMrsUOMRonTWnVne6HcVi3NCcQ
wUe4CM93iH6d7wHt6qJz7gEkuPYmj0cRDc/2FoEce9RNCpiB
-----END CERTIFICATE-----