Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/t2B-jAq_eAFnzaZJMzIoOGBfQGs.roa
File:                     t2B-jAq_eAFnzaZJMzIoOGBfQGs.roa (raw, json)
Hash identifier:          ihTJ5JwHCIRhZkPYRX9BhXc1AnxDcpaKhOwRnobrxO0=
Subject key identifier:   B7:60:7E:8C:0A:BF:78:01:67:CD:A6:49:33:32:28:38:60:5F:40:6B
Certificate issuer:       /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial:       01903B40B41300CB2B6C3E77F8B8F8F3794B
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/t2B-jAq_eAFnzaZJMzIoOGBfQGs.roa
Signing time:             Fri 21 Jun 2024 14:43:34 +0000
ROA not before:           Fri 21 Jun 2024 14:43:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216415
IP address blocks:        2a05:cd00::/32 maxlen: 32
                          2a05:cd02::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:40:b4:13:00:cb:2b:6c:3e:77:f8:b8:f8:f3:79:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
        Validity
            Not Before: Jun 21 14:43:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b7607e8c0abf780167cda64933322838605f406b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c8:a2:9f:e2:85:af:f2:51:c2:09:80:12:13:
                    a8:8b:ff:35:55:60:d2:d2:ae:35:b0:41:72:4a:cf:
                    ce:06:ba:3c:ad:20:23:b3:61:6a:06:e2:e7:29:cc:
                    97:cb:cc:3f:e0:50:46:48:27:62:f0:f3:0c:2b:14:
                    5e:d6:cd:5e:5e:c8:3f:9e:d7:32:e9:b4:89:0a:07:
                    bf:31:0d:a3:26:65:38:c2:01:52:19:4b:57:a6:bd:
                    69:00:08:af:4e:db:9f:04:d4:61:cd:e7:ff:50:8b:
                    93:b6:b2:0d:86:2c:eb:53:19:6a:37:da:7a:c8:96:
                    8d:af:78:d1:23:c9:6f:fe:fe:b6:b7:f8:34:d6:52:
                    4c:28:41:72:67:43:7a:5d:55:fc:bd:52:d2:85:89:
                    29:82:58:e1:54:5d:ed:15:4f:ae:15:7b:a9:55:c9:
                    07:b2:94:f8:02:25:38:5b:fc:9e:60:d9:ac:a7:19:
                    0c:dd:68:ca:d9:99:c3:a8:99:62:a8:88:09:0c:58:
                    db:1f:f8:e8:07:69:fa:e0:2c:16:f0:bc:24:cb:6f:
                    95:71:dc:15:5c:f3:30:fb:5e:d0:fc:f8:30:f4:59:
                    20:d9:8c:27:72:9f:64:71:18:78:52:a3:24:df:6b:
                    aa:b5:41:1f:c9:45:fb:cb:85:82:86:d1:df:b9:aa:
                    18:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:60:7E:8C:0A:BF:78:01:67:CD:A6:49:33:32:28:38:60:5F:40:6B
            X509v3 Authority Key Identifier:
                keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/t2B-jAq_eAFnzaZJMzIoOGBfQGs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:cd00::/32
                  2a05:cd02::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:57:c4:04:da:91:3e:be:ff:ae:98:0b:85:0f:45:83:b6:
         4e:77:8c:d7:ac:c4:64:c2:7e:20:13:c4:15:20:8a:ee:be:d7:
         19:e3:ac:5e:5b:a9:89:38:b0:67:a3:fd:a5:d1:d8:6a:b1:9d:
         03:3e:72:c8:43:ba:c0:31:98:10:e7:ef:f8:34:7c:97:8e:36:
         20:ca:cb:e6:3a:1b:f3:cc:d2:f9:f8:3a:d4:8e:37:5f:fa:d7:
         43:2c:dd:d6:c9:e5:78:9e:71:61:d8:84:43:8d:63:74:cb:62:
         99:af:ce:2e:31:f1:00:91:3f:67:6f:d0:82:0b:2d:8f:1f:bd:
         32:be:63:e5:46:1f:1c:e4:cf:4c:19:9c:f0:34:bd:06:45:0c:
         f9:23:50:36:e0:f3:ae:e3:9b:e1:36:7d:61:6c:76:11:dd:68:
         0c:8f:5b:70:40:91:c6:78:10:73:12:dd:19:e7:fc:c4:ec:94:
         7d:a4:94:22:2f:61:31:15:26:70:7c:a9:54:8f:d5:be:a9:52:
         57:01:1d:d9:3c:2b:ab:7d:90:50:35:7d:fb:f6:34:28:42:33:
         8b:71:9e:1d:fc:50:01:ae:96:aa:0f:ff:17:c2:08:ba:1a:66:
         43:1c:f6:be:e7:f9:2a:a8:f4:72:92:32:f3:18:69:c0:da:63:
         b0:6b:3b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:19:04 2024 by rpki-client on console-ams.rpki-client.org