Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/K5e_mKb25ZBvaU-2f5U9AVzkw5k.roa
File:                     K5e_mKb25ZBvaU-2f5U9AVzkw5k.roa (raw, json)
Hash identifier:          RyRP/Vz1oR0jiKMZEZ4P1rDOOWm/PtJwUXDjLjnCmBU=
Subject key identifier:   2B:97:BF:98:A6:F6:E5:90:6F:69:4F:B6:7F:95:3D:01:5C:E4:C3:99
Certificate issuer:       /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial:       018CCA2BE7306E9A1F97EEA09A58B7E10FF0
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/K5e_mKb25ZBvaU-2f5U9AVzkw5k.roa
Signing time:             Tue 02 Jan 2024 12:35:24 +0000
ROA not before:           Tue 02 Jan 2024 12:35:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210918
IP address blocks:        2001:67c:c58::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 04:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:2b:e7:30:6e:9a:1f:97:ee:a0:9a:58:b7:e1:0f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
        Validity
            Not Before: Jan  2 12:35:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2b97bf98a6f6e5906f694fb67f953d015ce4c399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:53:ba:d6:af:7e:0b:c7:e8:29:7e:6a:13:86:
                    9a:c2:9b:f4:91:6f:cb:21:88:ed:d2:e3:57:f6:06:
                    aa:e6:2d:49:cc:83:70:2b:c8:0d:71:b9:8a:9c:8f:
                    57:1c:f3:c0:9e:45:68:29:2b:45:01:e6:e2:23:d2:
                    f7:55:7f:94:9e:df:21:ca:1a:55:f7:50:a1:56:5a:
                    c0:c6:39:83:7e:09:37:5d:58:53:c2:ef:e5:ee:8e:
                    0c:dd:5f:0a:bf:5a:11:f1:a8:f0:8d:ad:1a:60:38:
                    ef:2d:5c:cd:e3:7c:37:e5:7e:38:65:27:b5:e0:07:
                    a6:e5:62:52:54:b8:4a:2c:08:63:a1:f3:7f:54:28:
                    31:4a:03:ad:09:be:c3:1a:06:dd:9a:d9:cd:4f:65:
                    14:30:58:9a:0e:55:7f:4c:c5:68:b1:1f:4e:17:1f:
                    1c:08:bc:de:48:49:14:77:d0:6a:43:57:ca:a0:3f:
                    78:21:00:1d:b1:aa:5a:24:39:72:76:d3:a1:d2:96:
                    07:69:6a:58:5a:53:35:f4:14:1f:8e:94:1f:3e:ca:
                    7b:aa:e1:f7:81:4b:c5:d4:31:a1:d9:6c:e1:63:40:
                    0a:c7:43:6d:33:7f:44:04:ae:d8:cb:37:0b:9a:8c:
                    46:31:d7:f6:03:42:db:94:61:83:84:1e:6e:4e:31:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:97:BF:98:A6:F6:E5:90:6F:69:4F:B6:7F:95:3D:01:5C:E4:C3:99
            X509v3 Authority Key Identifier:
                keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/K5e_mKb25ZBvaU-2f5U9AVzkw5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:c58::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:a5:13:bd:8f:e3:ff:73:4e:01:d0:ca:3f:4c:4f:99:05:
         e0:6b:3c:fb:90:7b:ee:9a:a0:2a:88:ca:7b:8c:48:6a:ad:95:
         85:ec:96:81:e9:39:3c:92:eb:ab:27:ae:b6:45:a3:b0:8e:42:
         32:b5:22:e7:cc:72:8b:65:51:00:e2:6b:ad:61:f8:33:69:ab:
         2a:9c:2f:85:7f:1b:f1:89:44:42:0e:5d:45:db:80:f5:ac:25:
         d4:cf:0f:f9:a8:c7:5b:86:c0:fa:5d:79:47:f5:c9:93:0d:70:
         2e:7d:d8:a4:04:1a:4b:71:b3:44:2f:55:99:7b:ca:f6:0c:07:
         8f:73:0b:0a:70:d8:3c:47:0d:11:b1:a2:ea:37:fb:d5:8e:ab:
         52:2a:c7:e2:2c:95:01:2f:95:cc:ad:8c:e4:aa:dc:f4:c1:f9:
         a3:1a:27:c1:52:91:25:8c:cc:74:c1:40:60:31:dc:c4:00:92:
         46:9a:fd:65:8d:8b:ef:af:db:10:88:61:c0:67:ba:9d:7c:55:
         58:bd:61:5a:07:30:33:ca:82:21:98:c6:9a:e4:54:65:3b:2f:
         3c:67:9a:06:3b:9a:60:ba:00:89:eb:1c:fd:bf:33:d7:38:de:
         97:4f:59:da:ab:d1:4f:4b:ba:de:3b:f4:cd:2f:1c:22:b7:fb:
         f1:ef:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----