Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8Nabmla_eWzs8ib8V0c5bn5xv40.roa
File:                     8Nabmla_eWzs8ib8V0c5bn5xv40.roa (raw, json)
Hash identifier:          RWNsEhV1D1ChUwCZoDS21AQBWrTjluOmi2NXkvTN2Hw=
Subject key identifier:   F0:D6:9B:9A:56:BF:79:6C:EC:F2:26:FC:57:47:39:6E:7E:71:BF:8D
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0193A1792DC5348CCD93C69E03D7E8B15FEC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8Nabmla_eWzs8ib8V0c5bn5xv40.roa
Signing time:             Sat 07 Dec 2024 14:14:53 +0000
ROA not before:           Sat 07 Dec 2024 14:14:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     213747
IP address blocks:        2a0e:97c0:560::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Dec 2024 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:a1:79:2d:c5:34:8c:cd:93:c6:9e:03:d7:e8:b1:5f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Dec  7 14:14:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f0d69b9a56bf796cecf226fc5747396e7e71bf8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:78:29:f1:b0:95:13:52:21:38:3f:63:3e:73:
                    18:65:4b:17:12:c4:ef:2f:f3:ea:1d:fc:4e:e1:d6:
                    cb:7e:9e:0f:77:4b:bd:ca:24:bd:d1:e9:ca:e1:3c:
                    a7:1c:21:a9:59:9f:e4:d9:b0:01:a9:3e:fc:87:cf:
                    3d:d9:cd:1e:a3:ba:4f:ad:aa:97:72:fd:f1:b4:3c:
                    5b:89:87:a6:f2:ed:9e:6b:b9:7a:83:f5:e1:b3:e1:
                    f8:94:51:63:3f:f6:06:dd:09:80:ec:c6:26:2e:88:
                    5e:fb:0d:e9:c8:b9:c4:12:cd:d5:aa:ca:8e:d5:19:
                    a6:f8:fd:02:ba:f6:fc:0b:12:95:5b:86:00:10:6e:
                    c8:82:64:a5:3b:d2:67:31:d8:b4:bb:54:4f:d3:da:
                    40:b0:cc:1d:89:b9:c5:59:19:59:71:a7:d0:5e:9e:
                    00:d5:dd:ab:0f:b9:80:08:15:d9:e5:f6:5c:16:b1:
                    35:21:0b:eb:41:f9:2a:dc:68:cb:7f:10:62:35:b0:
                    7f:84:9d:3e:02:44:6d:e5:1a:6d:e0:85:52:ee:ad:
                    df:40:0f:24:22:ca:ea:0c:ba:56:bd:ba:7a:19:fa:
                    c6:fa:62:20:67:60:91:c8:69:04:f5:e9:26:22:16:
                    a9:1f:12:7d:72:89:e2:f2:fb:94:0e:0a:dc:09:cb:
                    c5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D6:9B:9A:56:BF:79:6C:EC:F2:26:FC:57:47:39:6E:7E:71:BF:8D
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8Nabmla_eWzs8ib8V0c5bn5xv40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:97c0:560::/44

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:ca:7f:6d:75:21:e2:9c:cc:8f:23:53:f7:31:0c:b8:d5:
         7c:64:d1:37:36:ec:a8:c2:e8:3f:ca:de:fa:77:8a:e3:dc:11:
         05:45:2b:08:2f:7b:d8:46:88:1b:24:d6:d2:b7:2d:fe:56:81:
         d8:e7:46:08:f3:cd:8e:7c:b7:df:24:a4:bb:5a:3f:9f:40:22:
         28:71:b3:f0:04:56:d0:ca:1e:61:d2:8f:42:67:9c:56:6b:07:
         2d:a4:aa:a2:ce:64:39:e9:40:2b:40:b1:d5:e2:cb:af:eb:2e:
         b5:10:21:11:b4:52:c4:a5:40:76:eb:a3:95:b0:3c:96:fd:7a:
         b4:b0:a2:1e:89:79:01:be:82:bd:01:74:85:6b:76:a7:87:6e:
         fc:fd:89:9e:1c:53:af:5f:1d:ed:e9:68:20:2d:f1:31:d5:a7:
         94:b7:16:9d:11:04:17:9b:c9:e8:a2:c9:86:c3:b1:12:47:e4:
         8b:d2:6c:fd:67:e6:ff:f0:52:40:75:37:ad:c9:e8:8c:1b:5e:
         d4:fa:2b:8f:1b:ad:f8:f7:09:97:30:a4:cb:b7:68:cd:f6:af:
         42:a6:ae:a9:e5:57:dc:d1:22:80:06:9f:62:71:46:dd:4c:6e:
         99:20:75:37:4c:dd:85:8d:e6:50:69:b3:15:24:a2:b7:1e:56:
         35:8b:a9:5e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZOheS3FNIzNk8aeA9fosV/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMjA3MTQxNDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGQ2OWI5YTU2YmY3OTZjZWNmMjI2ZmM1NzQ3Mzk2ZTdlNzFiZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3gp8bCVE1IhOD9jPnMYZUsXEsTv
L/PqHfxO4dbLfp4Pd0u9yiS90enK4TynHCGpWZ/k2bABqT78h8892c0eo7pPraqX
cv3xtDxbiYem8u2ea7l6g/Xhs+H4lFFjP/YG3QmA7MYmLohe+w3pyLnEEs3VqsqO
1Rmm+P0Cuvb8CxKVW4YAEG7IgmSlO9JnMdi0u1RP09pAsMwdibnFWRlZcafQXp4A
1d2rD7mACBXZ5fZcFrE1IQvrQfkq3GjLfxBiNbB/hJ0+AkRt5Rpt4IVS7q3fQA8k
IsrqDLpWvbp6GfrG+mIgZ2CRyGkE9ekmIhapHxJ9coni8vuUDgrcCcvF5QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPDWm5pWv3ls7PIm/FdHOW5+cb+NMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvOE5hYm1sYV9lV3pzOGliOFYwYzVibjV4djQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAVg
MA0GCSqGSIb3DQEBCwUAA4IBAQAFO8p/bXUh4pzMjyNT9zEMuNV8ZNE3Nuyowug/
yt76d4rj3BEFRSsIL3vYRogbJNbSty3+VoHY50YI882OfLffJKS7Wj+fQCIocbPw
BFbQyh5h0o9CZ5xWawctpKqizmQ56UArQLHV4suv6y61ECERtFLEpUB266OVsDyW
/Xq0sKIeiXkBvoK9AXSFa3anh278/YmeHFOvXx3t6WggLfEx1aeUtxadEQQXm8no
osmGw7ESR+SL0mz9Z+b/8FJAdTetyeiMG17U+iuPG6349wmXMKTLt2jN9q9Cpq6p
5Vfc0SKABp9icUbdTG6ZIHU3TN2FjeZQabMVJKK3HlY1i6le
-----END CERTIFICATE-----