Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/ptbZiF4f63doDvNPUdQ_fI2Ydf8.roa
File:                     ptbZiF4f63doDvNPUdQ_fI2Ydf8.roa (raw, json)
Hash identifier:          xFGRjssO7uNZWoliQouiiHCceMfsHJ16VzwYFqseDNg=
Subject key identifier:   A6:D6:D9:88:5E:1F:EB:77:68:0E:F3:4F:51:D4:3F:7C:8D:98:75:FF
Certificate issuer:       /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial:       018CC72736545DEE03B3F62A1152C4C996C6
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/ptbZiF4f63doDvNPUdQ_fI2Ydf8.roa
Signing time:             Mon 01 Jan 2024 22:31:24 +0000
ROA not before:           Mon 01 Jan 2024 22:31:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212270
IP address blocks:        2a0f:9240:2000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:36:54:5d:ee:03:b3:f6:2a:11:52:c4:c9:96:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
        Validity
            Not Before: Jan  1 22:31:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=a6d6d9885e1feb77680ef34f51d43f7c8d9875ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:32:b5:dc:8e:60:38:b3:9a:a4:1d:8b:f1:
                    6e:08:8e:14:36:f4:eb:2c:8b:2e:cb:12:05:a2:7f:
                    3c:cb:63:77:28:90:13:b0:c1:65:ac:aa:d1:d4:7b:
                    00:70:7b:94:64:bb:39:86:91:ad:b9:3e:d9:ca:46:
                    a2:0e:87:72:f1:f6:10:12:68:07:e4:ce:06:57:38:
                    d7:77:2d:5f:4d:74:9f:19:90:13:27:34:fd:ec:aa:
                    93:ad:40:f6:02:55:19:94:c3:70:31:0b:3a:c8:25:
                    c8:e3:d2:79:18:3b:20:7c:4b:1f:87:d2:05:9e:c9:
                    76:cb:b8:fe:58:d9:a6:a6:d6:f4:92:30:55:a7:73:
                    9a:d7:39:93:61:21:84:66:42:e9:b8:c6:2c:d5:7f:
                    99:f3:a2:60:aa:92:29:a7:46:a8:ad:fb:e4:8b:e0:
                    cd:ab:17:24:19:b2:9d:92:00:e3:a5:a7:73:c7:2f:
                    6a:75:bf:d9:9a:87:74:a8:89:99:7a:1a:03:50:80:
                    76:37:2f:fe:2c:fd:5b:e8:bb:27:a2:51:64:73:fe:
                    8f:47:44:50:3c:f5:26:51:b8:11:de:1c:5d:4a:7a:
                    be:18:2e:d8:bd:2d:ff:4e:15:57:f0:59:0b:f4:10:
                    cf:d2:30:13:52:eb:ff:17:c6:d1:a3:64:c6:64:9d:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D6:D9:88:5E:1F:EB:77:68:0E:F3:4F:51:D4:3F:7C:8D:98:75:FF
            X509v3 Authority Key Identifier:
                keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/ptbZiF4f63doDvNPUdQ_fI2Ydf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:9240:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:1a:62:57:82:11:35:22:da:f7:ff:fb:91:a9:a5:83:fc:69:
         ae:48:de:cc:d4:f4:81:90:52:f6:7d:e0:f4:f5:18:ef:eb:18:
         ce:ab:24:bb:0e:51:3a:34:d7:89:aa:a4:e3:4b:c5:43:18:ee:
         1b:9c:1b:17:ee:98:2c:c9:52:78:0f:71:23:af:ae:01:8b:45:
         21:7c:72:a2:d5:44:34:23:c8:c0:fb:7a:99:e4:67:8a:1a:57:
         25:20:72:c0:37:81:2c:22:c4:c8:b0:7e:4e:54:0a:cc:fe:c5:
         27:9b:01:a3:f2:94:52:97:b6:b3:32:c3:8b:d3:10:34:6e:e5:
         2a:f9:75:4b:82:da:5f:2d:c2:90:c5:db:54:1f:32:52:c1:3b:
         b1:46:01:5d:c0:08:34:9b:bb:0f:5e:82:cc:bd:0a:2c:b6:a1:
         6a:1e:53:35:86:e9:3a:a9:d1:02:54:bb:a7:2b:7d:73:20:6f:
         df:9a:86:5f:33:2b:5a:09:94:d2:cb:86:71:ca:0f:96:9c:46:
         b1:d1:bf:d3:ab:99:d8:9f:3d:78:60:87:3b:a7:03:10:8a:cd:
         b9:27:1c:df:eb:1c:0a:9e:5d:72:24:1b:8c:94:6e:85:60:d4:
         21:67:56:bf:12:36:56:16:e2:95:8c:1c:ce:01:e1:c5:71:22:
         52:5b:9c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----