Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uzJV4TNa7gJK-4MhMXY3L6H1ZXw.roa
File:                     uzJV4TNa7gJK-4MhMXY3L6H1ZXw.roa (raw, json)
Hash identifier:          gtZSF13LKs42iFLqyYPqJAXXKJEtKZJgdcAQYveet/Q=
Subject key identifier:   BB:32:55:E1:33:5A:EE:02:4A:FB:83:21:31:76:37:2F:A1:F5:65:7C
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       019425226408B66732CDD6A2FFA353A2358A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uzJV4TNa7gJK-4MhMXY3L6H1ZXw.roa
Signing time:             Thu 02 Jan 2025 03:49:58 +0000
ROA not before:           Thu 02 Jan 2025 03:49:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     212508
IP address blocks:        2a0e:b107:dd0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Mar 2025 19:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:25:22:64:08:b6:67:32:cd:d6:a2:ff:a3:53:a2:35:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan  2 03:49:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=bb3255e1335aee024afb83213176372fa1f5657c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ac:5a:9a:f1:de:2c:0e:ac:e8:12:0e:bf:dd:
                    f2:09:83:c6:6d:8d:62:7d:8a:a6:e9:62:57:b0:60:
                    dd:9c:b0:7c:66:97:04:8c:e2:28:19:bd:a8:67:c2:
                    6d:3b:d4:85:f6:50:a8:82:13:78:a1:4e:d0:ad:9d:
                    9d:ad:47:70:e0:a3:ca:b4:3d:20:f6:de:65:cd:3d:
                    af:79:7d:e0:27:a2:78:11:75:1a:a3:e2:7a:c4:8e:
                    35:28:ca:31:2c:38:9a:eb:a2:fe:5b:47:88:79:51:
                    cb:c2:71:ce:fa:79:3a:1f:84:25:40:34:60:26:08:
                    ee:70:ad:fb:33:4c:f4:d5:b9:0e:42:de:b2:96:cc:
                    c6:2b:d0:42:44:4b:aa:89:48:e4:91:76:69:b5:af:
                    30:2d:c3:63:a3:a0:dd:e7:1f:60:bf:33:ee:ca:26:
                    27:04:74:14:b1:89:35:5f:4a:85:e0:24:61:c3:52:
                    78:ca:08:2d:4e:ee:fc:de:29:c9:4c:0e:c7:0b:53:
                    c0:eb:43:96:52:b1:2d:b3:3b:ba:18:34:78:d6:6e:
                    fc:3b:9a:13:a6:93:f6:8c:aa:97:fc:03:49:24:f4:
                    58:2c:3a:3c:7d:4e:40:88:12:9e:00:c6:6e:1e:34:
                    45:10:8b:cc:28:88:29:b9:83:7b:e4:59:ea:d4:7b:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:32:55:E1:33:5A:EE:02:4A:FB:83:21:31:76:37:2F:A1:F5:65:7C
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uzJV4TNa7gJK-4MhMXY3L6H1ZXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:dd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:99:ac:9e:3b:8d:02:8e:4d:66:cf:60:29:fe:94:5e:60:e0:
         25:b7:92:19:b5:58:45:60:91:fc:cc:49:c3:e1:6d:39:cb:23:
         27:d9:91:79:78:88:5a:84:11:e9:ff:be:91:c9:c3:77:20:79:
         21:df:31:4f:9b:46:e5:b9:38:97:a7:4a:0d:e0:82:ae:5e:9e:
         cf:76:ed:b2:60:97:47:04:b6:66:3b:19:d6:20:a4:26:a3:ea:
         da:4c:fb:16:c0:23:fc:c6:d9:e6:7d:b0:c7:55:d9:e1:ef:9c:
         be:68:c1:ab:b7:95:fd:9f:79:8b:0c:a0:9d:c5:7c:31:68:d0:
         65:54:91:34:47:ea:dc:b9:49:90:72:e5:80:c2:81:2f:12:06:
         72:52:40:c7:b7:c0:af:7b:46:fe:b5:b2:a5:70:a3:2e:61:1e:
         9d:aa:e0:c8:09:ca:f2:64:09:7c:f6:b0:61:67:aa:34:7b:5d:
         da:f5:ab:eb:ae:c0:cc:ec:ff:78:c1:73:2b:80:da:f3:c2:71:
         ce:56:12:80:c7:a7:53:30:8f:ea:6c:00:1b:5a:36:b5:81:27:
         56:97:a4:87:79:9e:58:67:5f:27:46:32:20:b5:9a:d7:ae:b8:
         d0:4e:2b:be:a2:3e:08:95:d4:20:c2:94:18:df:3d:97:2f:a0:
         92:cb:dc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 05:42:03 2025 by rpki-client