Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/YlpRXRW2srYnz_9-V6hQll_Jiss.roa
File:                     YlpRXRW2srYnz_9-V6hQll_Jiss.roa (raw, json)
Hash identifier:          q08b9LunKHhxJvPm8QkX3cSSj4P3Tc/0dZtetsZB0Qg=
Subject key identifier:   62:5A:51:5D:15:B6:B2:B6:27:CF:FF:7E:57:A8:50:96:5F:C9:8A:CB
Certificate issuer:       /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial:       018CC4252B8EFFB9DEC6C84FD776F1D795FB
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/YlpRXRW2srYnz_9-V6hQll_Jiss.roa
Signing time:             Mon 01 Jan 2024 08:30:19 +0000
ROA not before:           Mon 01 Jan 2024 08:30:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     12676
IP address blocks:        2a0b:f440:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:2b:8e:ff:b9:de:c6:c8:4f:d7:76:f1:d7:95:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
        Validity
            Not Before: Jan  1 08:30:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=625a515d15b6b2b627cfff7e57a850965fc98acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bd:87:33:66:16:10:b3:b1:3e:28:68:ca:ee:
                    a1:61:18:52:a1:79:b5:e5:4b:b4:4d:c7:3a:7f:0c:
                    60:98:8e:ba:18:81:ac:b9:cd:de:0c:f1:88:e4:ad:
                    c0:d1:68:58:24:90:b7:95:cc:32:95:38:dc:7d:21:
                    2b:f1:76:e2:29:34:a0:f8:5d:aa:d3:2c:b7:99:ab:
                    1d:06:bc:93:91:b2:5b:47:a5:c3:38:e0:e7:ff:ee:
                    2e:fc:c2:48:4d:da:5f:a8:ba:8e:83:8a:29:68:88:
                    7d:d4:62:db:50:fb:8c:0a:6f:d9:8d:7a:92:7d:55:
                    dd:92:64:43:07:9c:48:67:9a:59:d7:46:a1:08:56:
                    ad:1e:20:b0:72:65:dd:7b:82:01:0f:59:22:9b:11:
                    17:78:fd:2c:b2:e1:b4:3d:4f:7c:cc:7f:5b:83:e9:
                    19:7f:b7:ed:83:44:a7:c0:6c:a3:ca:98:7c:64:24:
                    b2:5d:42:54:e3:98:cc:84:c4:86:5e:0e:46:53:97:
                    79:78:17:1d:35:d5:f8:06:50:48:72:ea:c2:34:14:
                    4c:aa:38:7d:47:48:e1:fd:c6:ff:f5:5b:a2:d1:f5:
                    57:cf:a6:d5:38:f8:44:31:95:90:b8:e6:c7:41:b3:
                    b1:d2:18:7f:ae:f2:ee:16:5a:da:18:31:9e:a8:80:
                    a5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5A:51:5D:15:B6:B2:B6:27:CF:FF:7E:57:A8:50:96:5F:C9:8A:CB
            X509v3 Authority Key Identifier:
                keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/YlpRXRW2srYnz_9-V6hQll_Jiss.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:f440:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:d6:92:ca:e5:f5:51:aa:8b:d7:2e:ac:01:10:46:37:46:85:
         3d:8c:f0:be:d2:43:03:b4:ba:19:64:0e:45:c5:3a:c1:fd:02:
         e5:bf:84:ad:ca:47:41:52:a2:a2:cf:0d:32:8b:c1:97:e7:aa:
         c9:06:d9:56:a9:b4:30:34:87:f7:a9:0f:2e:b6:c2:11:cb:a5:
         2d:3c:83:a0:3e:24:89:68:ad:d9:87:06:21:4c:5b:b2:01:4d:
         06:f3:bf:c5:de:26:4d:3d:ce:2f:f9:71:33:4c:54:67:71:86:
         a4:99:2f:06:cd:fe:49:b6:e6:28:39:99:6d:0f:81:16:47:6e:
         5c:a7:8a:8b:43:7f:49:4a:46:3b:bd:30:17:ce:54:e5:ca:ae:
         20:74:13:b1:86:69:72:05:b2:3f:9e:a6:6f:d7:f9:4c:cf:6e:
         9f:46:1c:a6:43:cd:3a:6d:40:fa:56:ef:ee:54:8f:5d:3a:0f:
         d4:da:c4:38:b4:be:bb:e5:fe:7b:23:8d:33:77:fb:87:46:00:
         64:49:d1:2c:89:2a:22:26:4d:02:1a:8b:76:f1:4d:47:5d:cc:
         99:b1:f4:94:d1:bc:68:da:5e:06:a1:f6:4b:65:74:8e:a2:f8:
         2a:e0:bb:8b:53:ce:1d:bf:dd:85:70:e1:ea:ff:3c:a8:7b:cb:
         2a:65:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----