Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/EljBY25fzRaukO_GAd3ezV3sn2Q.roa
File:                     EljBY25fzRaukO_GAd3ezV3sn2Q.roa (raw, json)
Hash identifier:          9rTSTTg9jfkHCRG+ceKr9nRXkZwPPts4igHALHj3+Jc=
Subject key identifier:   12:58:C1:63:6E:5F:CD:16:AE:90:EF:C6:01:DD:DE:CD:5D:EC:9F:64
Certificate issuer:       /CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
Certificate serial:       018CC80147A64B457CA23A8F2B31D4DAC9C3
Authority key identifier: 35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/EljBY25fzRaukO_GAd3ezV3sn2Q.roa
Signing time:             Tue 02 Jan 2024 02:29:36 +0000
ROA not before:           Tue 02 Jan 2024 02:29:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12337
IP address blocks:        2001:67c:1933::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:47:a6:4b:45:7c:a2:3a:8f:2b:31:d4:da:c9:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35ac308c94f57b11cee1ba84ef1278447c6785eb
        Validity
            Not Before: Jan  2 02:29:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1258c1636e5fcd16ae90efc601dddecd5dec9f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:22:a7:6b:de:b1:81:73:ac:c1:01:d5:dc:4d:
                    37:cf:51:38:96:04:aa:0b:49:ab:cf:07:2d:86:e5:
                    d8:53:3a:74:b3:c6:1e:e7:97:b5:42:10:56:f9:99:
                    2f:b5:e9:0f:5d:76:7e:5b:06:d9:94:93:91:72:85:
                    3a:a9:d7:cd:94:7a:67:cc:71:0a:34:c0:91:a6:aa:
                    eb:4c:bd:8b:5d:17:8a:e0:de:80:03:21:5c:e9:ed:
                    23:ca:d0:af:74:53:d0:91:56:eb:f1:d4:3f:4c:a2:
                    43:73:d9:99:b8:6f:97:60:ef:52:0b:ec:ba:35:9e:
                    00:23:1e:b4:de:cb:a2:32:0a:21:21:45:40:f3:ce:
                    81:f6:f0:02:d1:f3:55:b1:77:96:06:f9:7a:68:6b:
                    b5:a3:9e:74:d3:61:93:52:cb:4d:4f:95:5a:26:67:
                    7a:fe:eb:bd:53:1a:af:fd:7f:80:32:b0:dd:86:14:
                    e0:c0:e5:50:3a:57:b1:b6:70:05:9b:67:fc:1d:bf:
                    a6:1d:6e:75:df:b6:92:ed:05:fa:67:30:81:85:67:
                    13:f2:35:14:d1:0a:31:36:7c:8d:25:64:24:99:95:
                    32:2b:0b:5d:71:ef:f1:a3:0a:7c:0c:3e:6d:f1:22:
                    8d:5f:21:13:85:1c:de:e7:5c:03:d5:d0:e6:28:70:
                    84:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:58:C1:63:6E:5F:CD:16:AE:90:EF:C6:01:DD:DE:CD:5D:EC:9F:64
            X509v3 Authority Key Identifier:
                keyid:35:AC:30:8C:94:F5:7B:11:CE:E1:BA:84:EF:12:78:44:7C:67:85:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NawwjJT1exHO4bqE7xJ4RHxnhes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/EljBY25fzRaukO_GAd3ezV3sn2Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/2b3218-542c-4d95-ac07-60d35554ce64/1/NawwjJT1exHO4bqE7xJ4RHxnhes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:1933::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:44:e2:34:a9:77:77:7b:48:bc:47:07:06:ca:ed:65:95:96:
         a8:77:e1:b3:c2:46:95:98:49:ae:3a:02:e4:e5:84:44:7f:29:
         de:b2:77:a4:b3:e1:1f:6e:0f:af:da:c8:2f:e9:aa:1c:82:4f:
         80:0b:8b:be:cf:90:53:82:e2:02:ca:05:ed:d4:ea:fd:6f:ba:
         37:99:00:cf:86:9f:63:82:20:9c:32:e8:cb:d1:31:6e:bd:f1:
         f1:d8:79:19:e0:1e:a3:a7:83:3c:60:45:ab:43:a0:9e:f1:49:
         25:66:66:96:4f:a8:b8:81:29:0d:bf:c5:36:f5:aa:90:86:03:
         2a:25:dc:e0:44:a0:d0:2c:ef:76:2f:3d:e9:43:44:af:e9:c5:
         18:00:38:22:74:15:89:aa:74:09:20:59:55:f7:23:68:8c:d1:
         a4:71:62:78:1c:c8:bc:62:38:ff:7b:e6:28:b5:03:ef:e4:df:
         24:3a:62:71:70:e3:9f:9d:69:95:ca:78:b8:6e:32:63:17:98:
         56:c8:e6:7b:6d:21:50:3c:32:a5:ee:62:98:cc:f4:39:24:e1:
         17:43:ea:17:6a:7d:b9:b5:e9:cd:8f:a5:21:71:c8:67:23:95:
         8c:27:fc:03:64:50:be:a3:86:6d:f2:a3:53:a1:55:52:51:0b:
         38:96:2e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----