Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GwJqzynd9enqa1AS43x154DWg7w.roa
File:                     GwJqzynd9enqa1AS43x154DWg7w.roa (raw, json)
Hash identifier:          2r1gHmUW0uOBh2yR2iL5fdEdYOe1/Zu3Jf5lEGb7YG4=
Subject key identifier:   1B:02:6A:CF:29:DD:F5:E9:EA:6B:50:12:E3:7C:75:E7:80:D6:83:BC
Certificate issuer:       /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial:       018CC64A12047BD92E77B1B2D4958C801E5A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GwJqzynd9enqa1AS43x154DWg7w.roa
Signing time:             Mon 01 Jan 2024 18:29:52 +0000
ROA not before:           Mon 01 Jan 2024 18:29:52 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216270
IP address blocks:        2a12:bec0:460::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:12:04:7b:d9:2e:77:b1:b2:d4:95:8c:80:1e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
        Validity
            Not Before: Jan  1 18:29:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1b026acf29ddf5e9ea6b5012e37c75e780d683bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:93:d3:a3:a4:a7:0e:3d:3a:47:fe:f5:a2:
                    4e:85:6c:23:c5:26:89:dc:02:94:c8:cf:47:f3:86:
                    be:f4:14:c3:bd:d3:26:d1:8c:77:c7:bc:49:48:64:
                    be:e3:34:21:3e:62:da:2e:77:6e:13:56:a8:5d:b0:
                    17:74:82:99:55:1f:9e:f7:7f:aa:0f:53:fb:14:80:
                    fe:2f:61:0e:b2:9c:4c:96:16:ad:d5:22:ca:f5:cf:
                    86:45:7a:ea:96:62:18:b3:c7:7b:91:98:c7:20:41:
                    95:74:07:ce:26:03:4e:a3:05:0c:95:b9:ac:c4:5b:
                    b1:bc:90:52:bc:b1:a4:2e:16:df:7a:e2:e5:8a:ce:
                    be:2d:d0:de:3a:65:57:90:45:ac:c8:21:ea:ec:c8:
                    57:b9:38:05:0e:cf:ad:6e:82:bd:05:56:5c:95:63:
                    e9:8d:a1:67:78:94:8d:c9:c8:33:6e:e0:fb:0d:93:
                    f2:8f:c1:e8:1d:20:61:46:78:2f:30:de:03:31:e2:
                    9e:e0:99:64:63:47:8e:36:81:64:b0:04:ee:b6:c1:
                    c9:15:87:a4:59:cb:8f:61:ad:22:ef:74:9f:5d:1d:
                    ac:47:d8:42:eb:ef:bf:e1:ca:39:6e:2f:08:36:42:
                    9d:c8:de:33:d1:c2:08:00:e3:92:62:8f:0d:65:91:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:02:6A:CF:29:DD:F5:E9:EA:6B:50:12:E3:7C:75:E7:80:D6:83:BC
            X509v3 Authority Key Identifier:
                keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/GwJqzynd9enqa1AS43x154DWg7w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:bec0:460::/44

    Signature Algorithm: sha256WithRSAEncryption
         85:1d:e8:6c:91:68:b7:84:68:05:02:f2:4e:cd:16:97:87:c7:
         17:9a:29:3b:85:bd:d4:05:a3:b5:76:2d:97:63:27:24:f7:65:
         26:9d:38:1c:4a:bd:8a:b9:19:81:a8:1b:a4:f6:76:68:20:9b:
         6f:e0:d1:4d:55:aa:ac:75:3f:55:ff:74:27:fe:37:c0:05:89:
         83:a4:0f:e0:76:2f:58:95:4a:46:71:9e:a7:0c:fa:ad:e2:fb:
         91:30:37:d7:a0:ca:5f:77:ae:f9:e1:b2:c4:be:ae:96:68:ba:
         3b:a8:e4:b7:0b:df:8f:85:4c:78:d1:5d:12:c8:16:67:ce:a5:
         65:2d:d1:bc:ac:6f:96:1e:70:c6:c9:ed:fd:e6:57:63:0f:cd:
         ad:b5:71:42:5e:02:75:f4:32:3b:6d:e1:fd:5e:0d:98:d9:ca:
         d3:e0:58:9a:1c:26:e9:00:92:64:1e:5a:89:28:2d:06:de:86:
         01:06:ba:55:90:c8:e6:0c:62:68:9d:18:7d:7d:a3:ee:d8:f8:
         4c:e4:91:86:2f:ac:b9:95:99:c0:d4:84:85:7f:a6:94:f8:53:
         0c:0b:5d:a0:32:e4:6d:10:4c:af:a8:ba:3c:57:7f:12:bb:11:
         af:f8:37:94:10:35:01:1e:63:f7:ee:55:6d:16:4c:02:79:be:
         d0:c5:81:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:13:26 2024 by rpki-client on console-ams.rpki-client.org