Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fZZChMXoEvfmkDJb3W0p_Gr85dg.roa
File:                     fZZChMXoEvfmkDJb3W0p_Gr85dg.roa (raw, json)
Hash identifier:          ZLs+w7vkrUNy3RtiBvVQquOQCbuOXxeBPVMMMdHHPsw=
Subject key identifier:   7D:96:42:84:C5:E8:12:F7:E6:90:32:5B:DD:6D:29:FC:6A:FC:E5:D8
Certificate issuer:       /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial:       0190A13A0C5A0B64FB4309002C63FC691FB6
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fZZChMXoEvfmkDJb3W0p_Gr85dg.roa
Signing time:             Thu 11 Jul 2024 09:57:34 +0000
ROA not before:           Thu 11 Jul 2024 09:57:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     139317
IP address blocks:        2a0e:aa07:f080::/44 maxlen: 48
                          2a0e:aa07:f0d0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:a1:3a:0c:5a:0b:64:fb:43:09:00:2c:63:fc:69:1f:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
        Validity
            Not Before: Jul 11 09:57:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=7d964284c5e812f7e690325bdd6d29fc6afce5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:01:8f:4d:ec:41:7c:52:13:65:3e:1a:c6:9f:
                    03:0f:80:ee:8d:3f:74:d1:0d:22:72:7b:ec:40:46:
                    f0:80:bf:75:65:d5:a7:75:36:37:32:6f:c6:38:5c:
                    45:1d:03:84:42:83:bd:97:ca:83:73:d2:3a:af:99:
                    51:74:4c:99:c1:09:2e:ea:17:94:2e:cb:c9:5a:41:
                    ff:7f:6e:1c:88:23:19:da:69:96:97:bf:ff:b4:3d:
                    41:e8:ed:13:25:95:a8:12:0d:4a:c8:23:3e:fe:89:
                    0f:7a:0b:33:85:69:e2:43:9e:bf:c5:21:3a:e5:f5:
                    7e:db:e4:60:13:8b:1f:a8:a1:a0:e7:33:ea:9c:bf:
                    08:df:68:c2:59:77:6a:4b:bc:26:7c:26:1c:42:38:
                    e9:e5:08:e3:4e:20:35:88:ab:fd:d3:bc:0b:34:50:
                    73:60:53:d9:ff:94:14:79:67:9c:40:8b:47:20:b9:
                    bc:0b:f1:c9:ee:cd:6d:5c:db:b7:3b:63:49:6f:66:
                    bc:1e:cb:dd:47:09:f9:e2:36:c5:0d:0e:30:33:0c:
                    ff:f4:69:28:2b:b5:99:8c:c8:9c:85:4c:09:b3:90:
                    e6:2c:37:9d:bb:cf:bf:a3:0c:1d:37:9e:9f:27:20:
                    cf:d9:21:86:1f:3a:6a:b4:2b:db:15:d2:d8:af:98:
                    1f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:96:42:84:C5:E8:12:F7:E6:90:32:5B:DD:6D:29:FC:6A:FC:E5:D8
            X509v3 Authority Key Identifier:
                keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fZZChMXoEvfmkDJb3W0p_Gr85dg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:aa07:f080::/44
                  2a0e:aa07:f0d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c5:8e:c6:9d:d0:98:74:24:20:ba:e1:8e:b4:b6:60:db:59:84:
         e3:12:ed:9d:90:14:91:e2:81:72:51:b4:69:40:50:e5:27:04:
         07:8b:8f:4f:e6:3c:f9:7c:be:f6:c9:4f:a2:6d:99:cc:a5:e7:
         ab:16:37:ff:1d:7e:95:ee:ed:de:be:2f:a9:65:c9:7d:31:c9:
         96:9c:6c:70:c8:9d:19:dd:fe:67:f1:a0:41:42:b1:57:f1:f4:
         35:e9:3b:f5:e1:7d:a6:61:77:33:76:75:f4:11:f2:68:95:98:
         04:c2:43:2f:9f:4f:3e:79:b4:2d:d2:5f:66:fc:2e:68:6f:09:
         77:6d:61:2a:d9:42:64:fe:cb:84:48:e9:9c:7b:10:e0:97:07:
         5b:42:0c:cf:82:62:83:7d:13:f0:b0:56:42:d3:90:ce:63:d4:
         e5:17:33:2a:4e:b5:c4:36:89:91:bf:9c:dc:1e:29:22:5d:ab:
         09:1e:8f:cf:ba:d4:47:73:04:d7:96:cc:7b:5f:e1:2d:62:d7:
         7d:22:47:fa:3d:79:f3:36:21:9f:fb:8e:4f:d5:89:d7:72:00:
         a8:4a:18:6d:15:fb:09:1d:9a:a3:ac:e8:ed:3b:43:25:72:d2:
         c4:a2:b9:4a:e1:bd:ed:8d:07:bc:93:f4:48:53:ac:d3:57:55:
         9c:f1:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----