Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/kaVpnmtQ-Hs26BeVMW6lX37ZLY0.roa
File:                     kaVpnmtQ-Hs26BeVMW6lX37ZLY0.roa (raw, json)
Hash identifier:          Hk20an3fiS1xFSqpyHRSzY9G4hw1/VNCQat/+r+YIeU=
Subject key identifier:   91:A5:69:9E:6B:50:F8:7B:36:E8:17:95:31:6E:A5:5F:7E:D9:2D:8D
Certificate issuer:       /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial:       018FBF53480176662F7FDF36D30154331F30
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/kaVpnmtQ-Hs26BeVMW6lX37ZLY0.roa
Signing time:             Tue 28 May 2024 13:10:57 +0000
ROA not before:           Tue 28 May 2024 13:10:57 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63023
IP address blocks:        2a10:17c0::/29 maxlen: 29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Dec 2024 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bf:53:48:01:76:66:2f:7f:df:36:d3:01:54:33:1f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
        Validity
            Not Before: May 28 13:10:57 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=91a5699e6b50f87b36e81795316ea55f7ed92d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:3a:b8:54:49:a3:5a:72:93:8f:d7:d6:5f:
                    2b:49:1c:c9:6d:b2:f2:0f:6b:61:f3:0a:6f:36:c5:
                    07:e9:c5:bc:8a:b6:a3:a8:0a:39:36:0b:9a:4c:a0:
                    be:cd:48:69:de:9f:ed:13:8f:2a:17:92:0e:bf:16:
                    7b:98:ee:df:fc:e2:05:a2:be:87:ab:56:a8:91:be:
                    c0:98:0d:9f:c8:f8:49:8e:10:ae:71:b0:db:e8:78:
                    8f:0b:17:ea:a2:12:3c:49:06:4b:82:b7:e5:75:1c:
                    cc:4d:69:a7:dc:e8:39:21:61:7d:55:86:84:de:17:
                    b8:48:c5:db:03:6e:bb:54:a2:7c:16:a2:56:dd:dc:
                    61:ff:d8:b2:69:04:aa:98:91:22:e3:3c:25:83:64:
                    9b:9d:f9:9d:12:80:d0:e6:c3:7b:f2:ac:7a:ab:76:
                    6a:7d:58:e3:a9:97:37:51:5e:96:b6:3d:9c:0c:fd:
                    f2:06:fd:38:24:f7:9e:22:4c:c0:a9:07:c1:e0:dc:
                    ec:fb:45:e3:29:e7:75:10:4d:8d:a6:f7:78:6e:b2:
                    29:2a:ea:e9:e9:76:5c:3f:1d:79:66:e9:34:96:f3:
                    43:bd:07:b1:1a:1e:77:01:ac:cc:1b:fe:82:e0:a9:
                    8b:15:cc:4e:80:44:a7:52:70:16:f6:25:9e:78:13:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A5:69:9E:6B:50:F8:7B:36:E8:17:95:31:6E:A5:5F:7E:D9:2D:8D
            X509v3 Authority Key Identifier:
                keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/kaVpnmtQ-Hs26BeVMW6lX37ZLY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:17c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         60:dd:0d:66:5f:2b:20:a1:0c:c5:39:ec:2b:40:54:30:8f:9c:
         ff:8d:02:f5:96:76:7a:fb:7b:90:78:0e:81:5e:ef:07:a5:b1:
         e1:94:9c:5b:69:c1:ce:e1:39:a9:75:38:8e:df:31:50:61:2e:
         48:b6:3a:6c:53:ab:4d:d9:1e:91:ee:ec:30:07:37:08:4c:fa:
         66:d9:db:9c:c4:b0:6c:a2:9d:6e:f0:a9:ca:83:7f:b3:d1:24:
         65:01:15:a6:aa:ae:c2:83:2d:4e:12:fe:9d:89:15:ab:7a:09:
         77:71:3b:64:69:29:20:c2:f5:94:db:af:dc:22:a3:85:f3:d2:
         2d:9d:a5:d2:0f:f2:c4:61:da:4f:1d:30:aa:4b:e5:39:4c:dc:
         8c:0f:ee:5d:e8:5c:0f:44:31:e2:d0:ae:0e:9e:9b:f9:de:1c:
         5f:0f:21:f4:89:2b:b6:e4:07:57:e7:a1:e9:a3:b7:ff:89:fd:
         89:12:40:42:1e:21:24:83:be:44:ac:7d:ff:0f:1b:0e:c2:f1:
         c1:28:6f:38:9e:50:42:79:bc:18:71:1d:90:98:e0:97:bf:aa:
         e6:86:0a:34:c1:f1:4b:04:d7:82:93:df:48:05:8d:a2:b3:c5:
         07:2e:a8:ae:5f:24:b2:11:64:e3:e7:91:4c:81:ff:04:b5:8c:
         cd:8e:14:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 9 18:19:03 2024 by rpki-client on console-fra.rpki-client.org