Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/X_aqwEMJvZO6dKEURgJe-8o0wOs.roa
File:                     X_aqwEMJvZO6dKEURgJe-8o0wOs.roa (raw, json)
Hash identifier:          NEH0yWQws2RYYkcpFdnlZ4k3GoHVcnMz8hJjDDTzp8c=
Subject key identifier:   5F:F6:AA:C0:43:09:BD:93:BA:74:A1:14:46:02:5E:FB:CA:34:C0:EB
Certificate issuer:       /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial:       018CEDB12D343255DE4A9F69534D90FD14F0
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/X_aqwEMJvZO6dKEURgJe-8o0wOs.roa
Signing time:             Tue 09 Jan 2024 10:07:40 +0000
ROA not before:           Tue 09 Jan 2024 10:07:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        2a13:ce40:6667::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:b1:2d:34:32:55:de:4a:9f:69:53:4d:90:fd:14:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
        Validity
            Not Before: Jan  9 10:07:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5ff6aac04309bd93ba74a11446025efbca34c0eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:9f:ce:ff:62:dc:df:98:c0:bf:5e:97:79:
                    33:02:97:0e:3b:02:f0:49:af:40:36:f3:c2:f2:55:
                    6d:b2:a2:e6:11:8c:aa:09:91:08:64:ab:8f:8c:ae:
                    aa:f3:d7:3a:64:e3:61:d1:de:30:97:e8:a4:65:8e:
                    0a:b0:81:50:66:78:a3:e3:22:58:a7:d4:ec:ac:c6:
                    30:1a:5c:b2:cd:1e:12:9a:e1:91:b8:5a:0d:72:45:
                    8f:b6:3b:21:41:03:b9:37:ff:17:82:f7:50:07:a5:
                    d5:05:85:83:0a:a8:c9:0c:ed:c6:4b:b9:1f:17:b0:
                    9f:3c:fb:fe:43:ae:f9:fe:ee:4b:a1:b5:22:a0:f3:
                    b7:1c:fe:51:58:46:50:af:e9:e4:4a:cd:ac:1e:6e:
                    ae:25:35:31:24:96:03:0b:4b:e4:c6:bf:85:75:69:
                    2f:f9:da:b0:5f:80:11:4d:03:53:1c:68:f7:1b:25:
                    9b:c0:46:5e:45:40:4a:44:d9:1b:c2:dd:f3:05:0f:
                    7e:9e:87:de:a8:38:35:e0:88:f9:45:bc:f0:3b:ac:
                    8e:a1:25:7d:fe:f9:a2:8d:fc:dd:71:68:be:16:37:
                    ae:68:9a:8e:fd:54:fd:31:15:e7:64:37:74:17:8e:
                    28:b3:17:c2:7f:e5:0d:08:e9:c0:c2:1f:72:33:db:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F6:AA:C0:43:09:BD:93:BA:74:A1:14:46:02:5E:FB:CA:34:C0:EB
            X509v3 Authority Key Identifier:
                keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/X_aqwEMJvZO6dKEURgJe-8o0wOs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:ce40:6667::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:15:45:d9:8a:81:02:ec:b8:a5:9c:46:35:be:04:62:e9:55:
         45:03:c1:c1:67:4f:86:8d:d1:c9:1d:6e:0f:3a:07:7f:57:4c:
         f3:56:81:0a:9c:05:6a:ab:ec:5d:e3:6a:c6:80:61:fc:10:15:
         ca:31:30:b4:10:60:c7:ca:ad:7d:fe:04:fa:76:2b:2a:3f:d1:
         e7:e1:9d:b2:32:d1:41:25:60:d6:8f:de:b8:ba:52:fe:a5:95:
         fb:99:76:79:75:01:a3:48:59:45:0d:ef:01:17:77:79:f3:d9:
         ce:78:68:a7:b6:54:af:60:9a:73:d8:e2:e1:3f:3f:c7:91:3f:
         0b:c6:47:a5:dc:f3:8f:7d:b4:95:1a:97:01:1c:46:55:4c:b3:
         ee:cd:bf:c2:2f:38:7d:b4:b6:df:21:a4:c9:41:d4:49:5f:36:
         12:9a:14:3b:00:e8:ec:5b:29:22:ee:62:68:6a:55:d6:e4:58:
         ef:ce:05:c9:f2:39:8f:c6:24:64:65:5d:29:f5:2c:8e:8b:2b:
         8b:13:03:8a:3e:04:5d:26:6f:ec:56:34:02:41:22:85:00:72:
         69:98:28:1d:ce:1f:42:8d:f1:c8:eb:e6:68:b5:fb:3f:64:e6:
         39:e1:69:83:42:0b:5a:77:7c:60:20:bd:c3:89:d0:1f:e0:fc:
         c4:d0:d6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----