Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/WCYB5ZjQPGwowaoJ06MZFi0XtPE.roa
File:                     WCYB5ZjQPGwowaoJ06MZFi0XtPE.roa (raw, json)
Hash identifier:          JLVgefvD6m/xi9Px1GxKDSJNk6p918nr8nA8BYm/OiE=
Subject key identifier:   58:26:01:E5:98:D0:3C:6C:28:C1:AA:09:D3:A3:19:16:2D:17:B4:F1
Certificate issuer:       /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
Certificate serial:       019218BE7941240A3E72E12C683E9BAA5E2E
Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/WCYB5ZjQPGwowaoJ06MZFi0XtPE.roa
Signing time:             Sun 22 Sep 2024 07:59:48 +0000
ROA not before:           Sun 22 Sep 2024 07:59:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214341
IP address blocks:        2a01:e901:10::/48 maxlen: 48
                          2a01:e901:20::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 12:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:18:be:79:41:24:0a:3e:72:e1:2c:68:3e:9b:aa:5e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2
        Validity
            Not Before: Sep 22 07:59:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=582601e598d03c6c28c1aa09d3a319162d17b4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:4f:5e:12:b9:ba:90:45:80:c9:5d:72:88:
                    d4:74:f5:d8:67:a2:dc:11:67:14:98:2c:3e:e7:98:
                    77:f8:15:ee:5d:8c:5d:ad:70:93:db:7a:71:b7:73:
                    99:9f:3d:51:c3:62:a2:de:78:24:cc:ae:07:69:ee:
                    4c:96:12:91:15:14:3a:70:e3:9f:f7:47:f9:31:bd:
                    34:42:9d:2f:1f:bc:89:51:b3:5c:c0:0c:8a:d4:73:
                    74:42:92:ab:e7:28:bc:fd:ce:d5:17:be:cf:8a:21:
                    25:43:96:a2:2a:b0:4b:ec:2c:c7:c9:59:e3:a9:c5:
                    1e:cf:2a:6e:34:04:ef:3c:a9:03:19:ad:26:48:54:
                    1a:23:69:27:0e:08:7e:65:08:2d:c6:6b:a4:2c:bd:
                    60:83:18:4a:38:c0:d4:52:cb:dc:be:89:d6:ae:e2:
                    15:0a:6b:f4:37:6e:6b:c3:13:da:4b:37:4b:c4:11:
                    33:9b:90:c3:ad:b1:cf:23:c8:d1:07:e5:62:0d:fe:
                    26:16:d8:db:c3:77:3a:04:cc:33:16:84:21:5e:d3:
                    db:77:41:f7:0d:9d:e8:a1:ea:cf:ae:66:08:4b:d4:
                    b3:f9:16:a7:fb:fb:db:8f:65:9e:00:3d:7e:aa:62:
                    78:83:75:b9:0f:97:7e:77:56:60:2e:d2:6a:79:71:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:26:01:E5:98:D0:3C:6C:28:C1:AA:09:D3:A3:19:16:2D:17:B4:F1
            X509v3 Authority Key Identifier:
                keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/WCYB5ZjQPGwowaoJ06MZFi0XtPE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a01:e901:10::/48
                  2a01:e901:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:51:6d:12:66:0d:78:92:df:92:28:66:0a:7a:10:90:08:87:
         a7:3c:67:66:dc:ff:9c:2a:2a:8f:0b:44:13:8c:4e:4b:a9:54:
         89:2b:d6:55:7c:e4:64:18:94:11:da:70:6f:71:a4:7f:b5:f3:
         02:5a:08:b8:8b:2b:a8:e7:1b:e2:e3:d3:0a:d8:24:a1:4f:e9:
         83:1d:8e:ad:6f:13:dd:3a:50:e0:11:fc:6b:c0:cd:52:e5:d6:
         d3:47:31:17:c0:c8:a7:03:4c:a9:e9:e3:4e:09:08:3b:4c:b4:
         f4:6c:5d:6d:a0:d3:a1:b6:d5:d7:60:44:6c:d9:18:44:fe:d4:
         c8:ae:f7:ce:a9:5a:9b:78:80:56:9f:84:5a:82:c3:de:47:7e:
         29:58:1a:5f:85:40:77:0c:d9:71:8c:a3:c2:7e:58:53:ab:fd:
         aa:ba:8d:9d:32:fa:99:dc:e7:fb:7a:bf:e7:e2:96:a3:75:60:
         3e:2c:ae:71:c3:a2:cf:84:cc:23:a5:81:8e:f9:7f:7d:46:49:
         ee:31:1f:5f:e5:f9:cb:55:b3:44:1c:d8:8f:4e:d9:74:71:6e:
         cf:9a:54:fb:f7:71:de:2d:55:e1:9b:9a:a0:c9:31:16:8b:7c:
         22:15:ef:be:13:53:0d:e9:63:48:86:bd:aa:de:58:8d:6f:51:
         3c:f5:87:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----