Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/jNmcEGlij-JbNVxxDuucnQlCrcE.roa
File:                     jNmcEGlij-JbNVxxDuucnQlCrcE.roa (raw, json)
Hash identifier:          7AYn/FqY4h0muoIe9pFM8fB9gjlmcue8ES5gRxc11Ec=
Subject key identifier:   8C:D9:9C:10:69:62:8F:E2:5B:35:5C:71:0E:EB:9C:9D:09:42:AD:C1
Certificate issuer:       /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial:       018CC8DEEC0A8F051AE8913564156B535974
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/jNmcEGlij-JbNVxxDuucnQlCrcE.roa
Signing time:             Tue 02 Jan 2024 06:31:41 +0000
ROA not before:           Tue 02 Jan 2024 06:31:41 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     197481
IP address blocks:        2a0a:2c0:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Jun 2024 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:de:ec:0a:8f:05:1a:e8:91:35:64:15:6b:53:59:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
        Validity
            Not Before: Jan  2 06:31:41 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8cd99c1069628fe25b355c710eeb9c9d0942adc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:d2:5b:f3:0b:0e:dd:33:bb:2d:9e:a2:63:
                    bb:40:01:98:92:51:dc:c4:7c:bf:dc:b0:8d:bc:28:
                    d5:c3:92:09:93:44:ee:83:0e:f2:84:e6:ee:b3:4e:
                    12:10:e1:c8:3a:90:8b:ab:52:9e:7f:29:c0:e5:c4:
                    24:94:b2:96:04:61:bd:8d:ae:10:a1:b2:6f:fa:28:
                    69:91:1c:4b:fd:a5:bc:36:22:9a:59:f1:95:ec:73:
                    a8:2f:19:16:5c:f5:e4:13:bb:49:d4:07:3d:57:13:
                    96:bb:e8:0e:87:f7:6c:fe:70:f0:03:d1:bc:d7:58:
                    7d:13:0e:e7:3e:02:ac:8f:7e:99:f3:e2:6f:12:f9:
                    5e:7c:61:3a:cd:41:5b:ed:c0:37:57:7e:bd:43:ea:
                    37:a6:c4:af:bb:1d:09:36:fa:59:ef:a7:85:17:f5:
                    ef:7d:40:5d:79:37:b8:37:dd:28:79:78:79:69:85:
                    d1:0d:71:fe:1a:da:ad:6d:cf:3c:87:ae:a5:a4:c9:
                    20:c9:fb:8c:e8:a2:ef:c4:67:68:7e:8a:5b:27:d2:
                    86:ea:a9:71:75:4e:87:5f:3b:25:52:9c:b2:df:ff:
                    5f:b1:f7:a1:df:67:20:18:b6:ee:17:c1:13:5f:4a:
                    8a:10:d4:69:d7:78:bb:b8:cb:2d:d6:6d:6f:b8:9a:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D9:9C:10:69:62:8F:E2:5B:35:5C:71:0E:EB:9C:9D:09:42:AD:C1
            X509v3 Authority Key Identifier:
                keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/jNmcEGlij-JbNVxxDuucnQlCrcE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:2c0:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:ef:67:35:9d:05:49:51:0d:be:cd:cc:8d:2d:f4:90:d9:45:
         66:f6:9e:55:92:5c:c5:fb:04:54:e2:73:33:23:d7:73:2a:b9:
         ae:e2:1f:8d:29:32:69:10:b5:e7:80:a4:56:19:b4:79:e5:1d:
         a3:76:65:43:45:cd:40:40:58:33:19:07:bb:32:b4:ac:93:e7:
         52:4b:ee:e9:78:b1:3c:a4:dc:fe:a6:48:47:e2:67:17:70:77:
         a4:cf:34:42:6f:b7:9e:69:98:17:e5:3f:cd:89:99:c3:99:ba:
         6d:02:18:73:36:13:9b:9e:5b:92:8b:32:68:ab:3f:45:3b:1f:
         c0:12:ab:c6:66:1e:a3:ad:dd:d5:ba:eb:29:c9:9f:54:27:6c:
         85:e3:f4:ac:70:2f:4f:a7:79:ed:ce:ad:11:3f:17:ac:f7:13:
         58:43:b8:00:62:b9:b4:6d:2e:4e:14:65:d1:8a:bd:0e:dd:ef:
         c8:31:28:c6:85:51:19:de:63:aa:86:01:b0:c1:1e:d6:aa:9b:
         ef:d6:7e:6b:0a:16:3d:f7:58:24:c9:fe:e4:1e:a0:ca:80:64:
         1d:1a:dc:2c:45:36:b5:28:a5:9e:dd:c5:7e:6a:3f:f0:87:25:
         ff:b9:b2:3a:ce:f2:79:dd:d2:e0:a3:62:94:2b:50:b0:4a:ee:
         4f:c4:58:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 22:02:41 2024 by rpki-client on console-fra.rpki-client.org