Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa
File:                     6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa (raw, json)
Hash identifier:          p645s9VERW1Ef0opHp6vl7h5I41i7L3NWWr3wTxcUVk=
Subject key identifier:   EA:93:42:99:4A:90:1C:FC:D3:C9:75:5B:12:78:C8:41:06:5F:52:F6
Certificate issuer:       /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial:       018CC8DE3339BE81C3CB2328185052567162
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa
Signing time:             Tue 02 Jan 2024 06:30:54 +0000
ROA not before:           Tue 02 Jan 2024 06:30:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     49981
IP address blocks:        91.226.31.0/24 maxlen: 24
                          2a06:d641::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:33:39:be:81:c3:cb:23:28:18:50:52:56:71:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
        Validity
            Not Before: Jan  2 06:30:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ea9342994a901cfcd3c9755b1278c841065f52f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:2f:9c:2a:99:a5:dd:41:43:3b:18:09:f0:
                    07:85:a9:4e:20:7a:5b:95:5c:2d:26:e2:b3:de:43:
                    c6:8a:e2:fe:26:26:ff:52:97:2c:38:e9:71:18:74:
                    29:b2:04:3f:bc:22:2c:d5:94:79:2e:46:a7:d2:f6:
                    62:fe:0f:68:96:de:ba:9e:9e:a5:3a:e5:ef:dd:41:
                    31:10:89:86:70:c8:f9:b3:85:4b:90:32:23:09:cc:
                    6d:f3:10:40:3b:1f:4b:8e:b0:4b:72:31:8d:78:c5:
                    be:5c:6a:cd:74:5b:79:3c:9b:82:cc:7f:39:c2:ee:
                    79:66:2f:2d:d1:67:32:bb:bb:0a:00:48:1e:2a:b1:
                    51:25:f9:e0:db:ad:bf:0e:7a:57:23:f5:d0:e5:ad:
                    23:25:58:47:54:96:a7:38:7f:96:a7:1e:9a:b8:59:
                    3b:5b:d9:94:63:5c:7c:0b:73:fc:9e:e9:2c:a8:fb:
                    58:21:4d:8d:19:d8:56:10:a9:ae:ee:c5:ed:02:4e:
                    a0:c7:48:92:cf:21:42:57:57:40:05:83:4c:c6:d9:
                    3a:3a:96:54:a7:41:2e:47:9c:89:f8:a9:3c:7f:f7:
                    ae:b8:49:97:10:3f:f6:9d:85:3d:25:b1:05:b0:73:
                    fb:cd:4a:62:01:44:31:b9:24:1e:9f:b7:64:ed:9a:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:93:42:99:4A:90:1C:FC:D3:C9:75:5B:12:78:C8:41:06:5F:52:F6
            X509v3 Authority Key Identifier:
                keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/6pNCmUqQHPzTyXVbEnjIQQZfUvY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.226.31.0/24
                IPv6:
                  2a06:d641::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:28:7e:9a:49:23:d6:e1:07:47:20:be:3d:28:db:2e:27:bf:
         e5:00:4a:82:51:0b:51:f5:48:9d:e4:6d:1d:de:64:14:a6:fb:
         3d:fc:68:3c:b8:14:82:fc:3f:65:72:66:ad:61:ae:9f:b2:8f:
         d0:86:40:26:78:1b:fe:e4:c8:9e:99:31:78:23:a5:a5:ff:ef:
         ed:79:37:b2:85:c9:49:68:aa:62:aa:3c:51:39:89:95:7f:a3:
         5b:14:49:60:96:e2:2b:6d:0a:12:ab:51:2c:9f:ad:dc:b1:14:
         d1:9d:3d:41:ac:74:74:3f:a9:5d:2c:df:80:6d:0a:46:cd:1e:
         65:ce:50:dd:9a:58:69:1d:9c:83:35:59:dd:a3:9d:72:12:82:
         9a:d1:98:fd:75:89:a0:64:7d:c8:cb:c2:9d:31:02:82:29:df:
         dd:db:b4:fd:16:b9:2a:8e:aa:4f:d9:0b:ea:62:72:09:2b:fc:
         24:f1:0c:77:4c:81:3d:58:06:49:fd:bc:19:28:14:ca:40:81:
         86:9a:89:e3:a8:51:7c:21:65:56:74:c7:c4:77:06:fb:f2:68:
         23:e9:4b:58:5b:79:f0:9c:7b:75:73:ed:66:0a:d4:ce:50:c4:
         0d:ec:6e:6a:c6:1c:c3:fd:18:1f:50:48:3b:42:df:3d:c1:17:
         4d:56:76:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----