Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/rGjKfx-60m9QlGagdA3P5wOr2QA.roa
File:                     rGjKfx-60m9QlGagdA3P5wOr2QA.roa (raw, json)
Hash identifier:          83Or5BpFrwbByxmqxvy4oPVePwEc7rgaD9CqrgfUjEM=
Subject key identifier:   AC:68:CA:7F:1F:BA:D2:6F:50:94:66:A0:74:0D:CF:E7:03:AB:D9:00
Certificate issuer:       /CN=1e5703846d7a8364bec303034db91acbff42da0c
Certificate serial:       018CC7260B24E08AE63AF30BE450BEF7AB71
Authority key identifier: 1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/rGjKfx-60m9QlGagdA3P5wOr2QA.roa
Signing time:             Mon 01 Jan 2024 22:30:08 +0000
ROA not before:           Mon 01 Jan 2024 22:30:08 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13127
IP address blocks:        2001:67c:14b0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:26:0b:24:e0:8a:e6:3a:f3:0b:e4:50:be:f7:ab:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e5703846d7a8364bec303034db91acbff42da0c
        Validity
            Not Before: Jan  1 22:30:08 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ac68ca7f1fbad26f509466a0740dcfe703abd900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:d2:e3:d1:ae:be:a9:58:44:ad:a1:a9:2b:
                    29:f6:9d:f0:d4:34:46:c2:e3:50:9c:f2:61:6d:c3:
                    94:95:c0:b1:9c:8f:90:a7:e8:9f:44:13:a6:8d:3b:
                    4d:47:55:16:5b:c4:05:17:b6:d7:7a:25:2f:90:1f:
                    ab:3b:11:bb:b6:78:b9:87:c2:22:a7:e3:10:82:17:
                    82:13:7c:4c:a2:b8:e0:18:68:d6:ed:8a:e2:03:64:
                    08:65:c5:bb:c6:29:28:58:8c:68:57:da:d1:70:d3:
                    59:c1:77:ea:60:e7:5c:86:f9:c4:69:0a:b7:73:25:
                    1e:dc:e9:89:fe:96:8e:fb:a9:02:9c:ba:bd:e0:d7:
                    5f:0a:28:c7:ed:09:7e:c5:bd:03:0d:f0:69:18:56:
                    65:28:88:cf:da:29:6e:10:fc:8f:10:fc:90:03:e1:
                    64:26:d4:c1:a2:16:42:29:27:0b:b6:16:b0:94:c3:
                    ff:89:f9:7e:da:c4:4f:aa:cc:03:5e:e9:14:a0:5f:
                    18:b6:34:bb:33:38:7b:33:32:eb:3a:d0:34:7f:84:
                    f5:a9:45:23:73:0e:de:10:9e:22:fb:a5:f1:4b:47:
                    f3:f2:fd:29:21:7a:0e:89:1e:cd:87:b9:70:1a:51:
                    7c:2b:72:b5:c6:02:66:f7:32:40:e0:f2:d2:b7:9d:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:68:CA:7F:1F:BA:D2:6F:50:94:66:A0:74:0D:CF:E7:03:AB:D9:00
            X509v3 Authority Key Identifier:
                keyid:1E:57:03:84:6D:7A:83:64:BE:C3:03:03:4D:B9:1A:CB:FF:42:DA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlcDhG16g2S-wwMDTbkay_9C2gw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/rGjKfx-60m9QlGagdA3P5wOr2QA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bc658f-a528-4360-b58c-07b09e465119/1/HlcDhG16g2S-wwMDTbkay_9C2gw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:14b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:81:f0:6e:a4:5d:f4:0b:95:4f:2e:40:a8:d2:ce:06:70:53:
         28:29:69:2b:59:e7:05:58:fe:11:53:60:0b:77:f3:52:14:d5:
         0d:52:44:0d:fb:3c:20:97:fe:e0:fb:fb:dc:c2:d6:54:55:d9:
         89:ad:49:0d:b6:0b:9f:4f:e1:e0:8d:24:c3:5c:08:6e:fb:2f:
         07:a0:26:2d:66:3a:21:2c:a7:8a:21:bc:6b:23:9b:b1:dd:67:
         3c:6f:05:62:ce:41:6d:0f:e2:c0:e9:b8:32:a3:67:68:85:75:
         74:64:9f:e2:ff:d9:39:30:ce:d6:b4:97:ad:e6:99:ea:1c:d8:
         72:8c:e7:01:4e:83:90:8e:21:87:7b:df:4f:b8:ef:a2:66:2a:
         a5:81:6d:4c:6a:6d:f9:67:71:f5:76:3f:3b:88:91:33:28:c9:
         7d:ef:ec:8f:12:f2:88:1d:17:d1:4c:6f:c0:88:48:06:d5:77:
         0e:85:35:dc:af:27:73:1f:af:ad:29:5a:01:2b:df:9f:43:ec:
         05:94:b5:38:4f:f3:e5:fd:fa:ac:c2:7a:79:2c:6c:bb:59:90:
         fb:43:da:88:c0:8d:59:42:d8:df:a2:c4:c6:b1:35:dd:f2:05:
         ae:61:49:d3:8d:21:fb:5e:7f:86:be:0d:c2:94:14:27:53:43:
         d3:35:38:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----