Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/nIw3OwmT-hNBh7ow4Zh9fknq90o.roa
File:                     nIw3OwmT-hNBh7ow4Zh9fknq90o.roa (raw, json)
Hash identifier:          7OfcPekNu+PkR0yXiIrMj9xLk2J7Sx8DPSz/mPEXhlI=
Subject key identifier:   9C:8C:37:3B:09:93:FA:13:41:87:BA:30:E1:98:7D:7E:49:EA:F7:4A
Certificate issuer:       /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial:       018CC7276F8F7805FDEA12A061C81A0CD4F9
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/nIw3OwmT-hNBh7ow4Zh9fknq90o.roa
Signing time:             Mon 01 Jan 2024 22:31:39 +0000
ROA not before:           Mon 01 Jan 2024 22:31:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     42244
IP address blocks:        2a04:b540:2000::/36 maxlen: 36
                          2a04:b540:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:27:6f:8f:78:05:fd:ea:12:a0:61:c8:1a:0c:d4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
        Validity
            Not Before: Jan  1 22:31:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9c8c373b0993fa134187ba30e1987d7e49eaf74a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:23:b3:0b:b7:13:4c:af:c3:48:68:7b:c0:
                    d7:29:54:9e:cd:25:09:fd:54:0c:5a:56:9d:9b:b8:
                    dd:86:0c:90:5d:db:d1:b5:70:9e:c4:74:56:0e:8d:
                    ce:96:6f:b9:8a:0c:95:45:20:83:35:4e:af:8e:b7:
                    d8:27:a0:ff:0b:1f:e3:58:3a:ad:61:a2:b0:d2:a0:
                    7d:cf:0b:35:77:fa:b6:34:e5:05:d1:89:2f:fd:ad:
                    5a:ba:bf:c6:ed:88:ff:87:c7:91:42:9d:77:f6:2b:
                    89:62:27:41:f9:92:24:0a:22:3f:df:e3:04:7d:b8:
                    c5:ab:7b:dc:e9:52:b9:3b:a2:75:dd:d7:13:36:b1:
                    ef:83:b8:5f:2a:35:11:3c:8e:eb:c2:78:41:27:31:
                    fb:f1:b9:8a:5f:aa:6e:b8:65:bb:36:04:cb:d6:8f:
                    2c:72:84:12:79:f1:55:78:46:a0:54:a2:64:bf:4e:
                    7b:b9:82:ae:cf:18:55:6b:e8:eb:b7:4b:01:44:ce:
                    3c:2c:af:b8:f9:7a:1a:22:85:9b:a9:15:af:c4:1d:
                    b1:99:a9:bf:72:e6:cb:b4:23:4f:14:b5:40:4a:a1:
                    ce:5e:b5:4f:ed:72:db:ed:f5:c8:3d:c0:2b:4d:1b:
                    35:51:61:0b:17:27:dc:7b:24:a0:78:5a:55:70:4d:
                    41:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:8C:37:3B:09:93:FA:13:41:87:BA:30:E1:98:7D:7E:49:EA:F7:4A
            X509v3 Authority Key Identifier:
                keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/nIw3OwmT-hNBh7ow4Zh9fknq90o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:b540:1000::-2a04:b540:2fff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         36:da:4e:a5:71:b3:9b:97:a5:ba:c6:de:55:65:e5:de:8c:ea:
         5f:d9:4b:8c:6e:86:aa:21:e7:bb:63:00:1e:dc:8b:1f:a4:8a:
         fe:98:9a:52:c4:51:d1:12:25:47:3a:f9:4c:16:4c:2e:e7:d9:
         70:0b:0a:dd:6e:bc:9f:55:4a:82:90:e7:ec:5c:7e:04:76:a2:
         9f:f4:72:0f:1f:85:56:8e:a4:2f:1c:6e:29:13:ae:0b:01:6a:
         a9:19:34:ce:da:d4:61:0f:20:dc:7f:78:36:ad:43:74:98:77:
         c1:7a:62:d5:93:ac:04:65:0f:6e:6b:c3:61:52:fd:a1:df:64:
         fa:12:1a:b6:92:2d:21:85:22:0c:cc:0f:42:31:11:ad:02:44:
         58:25:ae:7e:cf:7b:71:13:68:b4:db:a6:5f:bb:16:24:50:9b:
         d2:33:03:0f:5a:d5:73:7b:c4:78:28:38:4c:5d:50:d5:02:bc:
         1a:a3:72:fa:13:c6:62:76:18:06:0f:71:fb:23:31:e5:c4:d5:
         ea:de:e6:82:57:70:9b:cb:40:28:ba:c6:67:2e:b2:a1:d8:17:
         4a:b7:f5:e8:14:87:55:48:4c:ff:17:18:2d:51:de:60:65:25:
         e9:35:7e:9e:10:89:ba:a0:93:2d:fd:49:dd:c0:25:f4:20:7a:
         83:8a:95:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:26:49 2024 by rpki-client on console-fra.rpki-client.org