Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/DxZZJqWxUBKfb1q5l93Z8BxNNmo.roa
File:                     DxZZJqWxUBKfb1q5l93Z8BxNNmo.roa (raw, json)
Hash identifier:          OtGT3FT8YXN6A0ADeHzQ+T+RM0Vt0JY5eWvGoe/Qf1Y=
Subject key identifier:   0F:16:59:26:A5:B1:50:12:9F:6F:5A:B9:97:DD:D9:F0:1C:4D:36:6A
Certificate issuer:       /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial:       018CC9BBB1BD31E17A38DC5567FAF6D4D09C
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/DxZZJqWxUBKfb1q5l93Z8BxNNmo.roa
Signing time:             Tue 02 Jan 2024 10:32:50 +0000
ROA not before:           Tue 02 Jan 2024 10:32:50 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     25182
IP address blocks:        2a02:458::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:bb:b1:bd:31:e1:7a:38:dc:55:67:fa:f6:d4:d0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
        Validity
            Not Before: Jan  2 10:32:50 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0f165926a5b150129f6f5ab997ddd9f01c4d366a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:90:6d:50:57:35:60:95:3a:f7:63:92:f1:a7:
                    84:02:b1:6e:0e:18:af:61:a7:dd:8a:b8:3e:48:70:
                    bc:f1:69:2d:58:16:49:dd:0c:d2:12:ef:2c:1d:f0:
                    da:95:3c:d4:0d:41:c6:bf:7f:97:5a:0a:f7:6a:27:
                    65:45:b4:6d:61:aa:77:f4:d5:f9:61:df:77:5b:f8:
                    bc:e4:35:34:34:0f:65:a5:e2:7a:8d:9c:4f:0e:c1:
                    67:4e:b6:5d:41:e3:03:38:23:b9:1c:89:1e:0d:07:
                    26:30:73:9f:8f:72:35:e7:6f:bf:e5:b1:14:04:c5:
                    c3:ab:17:ac:37:cb:f3:23:63:e6:15:69:01:80:45:
                    1d:8f:e1:09:c8:29:a4:d6:09:fc:5c:b4:92:9b:58:
                    03:95:8b:eb:52:fd:29:13:d0:fc:7b:8d:bf:52:1e:
                    06:46:08:ad:7e:c3:22:70:3e:8f:1d:db:1d:9c:a2:
                    60:f7:f4:a5:5e:7a:26:7e:97:44:0b:f5:43:86:1a:
                    89:c8:f3:b9:2f:e7:7f:b5:ad:13:60:d2:98:57:b5:
                    53:2f:31:39:96:49:0e:3e:21:59:de:c1:85:fc:25:
                    0d:80:d8:fb:dd:b9:1a:20:51:c4:7e:7f:55:39:97:
                    f7:12:41:1d:4c:16:8d:b1:6f:2b:04:fa:e7:b9:78:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:16:59:26:A5:B1:50:12:9F:6F:5A:B9:97:DD:D9:F0:1C:4D:36:6A
            X509v3 Authority Key Identifier:
                keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/DxZZJqWxUBKfb1q5l93Z8BxNNmo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:458::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:6b:c5:fd:a0:82:51:19:93:1d:72:1a:71:90:c2:84:70:
         e2:19:a2:b3:d3:3f:4b:52:d6:fc:8b:83:be:2f:aa:cc:a1:9c:
         58:60:2c:ed:cf:a2:fd:33:6a:72:bf:d7:e5:e6:aa:0e:1d:01:
         80:43:ae:ce:89:b2:a1:9e:c2:6b:a9:39:68:df:0f:17:3d:02:
         2c:a0:25:a5:e6:3a:84:ce:37:de:44:50:0b:4c:3e:26:02:42:
         ca:cd:89:1e:7a:a9:98:cc:21:46:ae:db:ae:7c:8d:5c:01:c9:
         86:a2:1d:da:d7:eb:1e:6c:dc:b3:84:d1:34:61:57:19:54:2b:
         52:94:19:c7:29:3f:d2:21:f0:ea:74:5d:a7:47:58:7c:b9:97:
         d4:16:63:35:3b:ef:97:2a:56:04:3f:08:24:d4:24:0a:d5:69:
         88:bc:52:03:6b:a1:72:91:08:88:65:31:51:fa:59:97:01:75:
         2a:45:4f:34:3f:41:a0:92:24:93:89:6d:39:ae:10:82:17:e9:
         06:6b:5a:1c:32:be:55:09:11:85:0f:b8:be:d0:e1:b9:de:3f:
         84:27:a0:36:b2:a7:95:bf:c6:f6:83:cb:11:06:3c:2e:93:77:
         88:d8:5f:ae:2a:79:39:3d:84:66:b2:28:d4:1d:01:c4:a8:69:
         27:39:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----