Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iLPO8p9kluTHAmYdReR215Z0eGY.roa
File:                     iLPO8p9kluTHAmYdReR215Z0eGY.roa (raw, json)
Hash identifier:          RTAs1x6vSxj06of7nM7ALTE9p/gCBlf+WIB7RDUTqVY=
Subject key identifier:   88:B3:CE:F2:9F:64:96:E4:C7:02:66:1D:45:E4:76:D7:96:74:78:66
Certificate issuer:       /CN=89056fa9625b6c87404267c6dc219924ac160045
Certificate serial:       018CC26D63F9C9590A31CE7AC8899C315945
Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iLPO8p9kluTHAmYdReR215Z0eGY.roa
Signing time:             Mon 01 Jan 2024 00:29:58 +0000
ROA not before:           Mon 01 Jan 2024 00:29:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     55720
IP address blocks:        2a11:840:26::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c2:6d:63:f9:c9:59:0a:31:ce:7a:c8:89:9c:31:59:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045
        Validity
            Not Before: Jan  1 00:29:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=88b3cef29f6496e4c702661d45e476d796747866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b1:b7:db:ea:3d:16:aa:d2:79:96:41:d2:d5:
                    55:bb:96:3f:7e:bb:a5:1f:cd:10:5d:ee:43:7e:d3:
                    77:72:46:0d:df:b8:67:b3:05:95:4e:b9:31:98:7c:
                    fd:1e:b2:32:5d:eb:31:b8:37:6a:6a:8d:05:07:9f:
                    14:5b:b2:b5:ff:21:0c:08:eb:d0:e1:92:e9:0f:29:
                    79:92:ab:36:10:ed:66:a8:f4:65:ca:9b:16:eb:8c:
                    3e:49:8f:3b:74:1c:08:07:d8:83:d5:d4:00:42:32:
                    b7:ac:05:58:64:fe:51:8d:d0:c3:e7:85:e9:3e:90:
                    3a:f2:2a:3d:44:11:40:92:e8:b7:2c:10:30:5c:2b:
                    9f:bc:39:5f:07:be:f6:7c:d9:f8:33:38:25:ff:00:
                    56:a3:67:aa:11:2f:55:d6:18:3e:7e:a0:bd:61:54:
                    31:76:3d:77:b2:94:b6:c9:15:a1:b0:86:e4:3c:d2:
                    92:21:0d:fc:c0:3d:02:4d:c4:8d:d6:6b:58:fa:a2:
                    18:dc:15:81:3e:b9:86:ee:83:2c:48:ee:96:7a:97:
                    86:62:bc:25:96:fa:5c:c6:28:52:41:42:6b:8c:4d:
                    f5:65:07:35:67:4c:41:aa:49:75:80:f8:87:34:a4:
                    93:d3:c5:ce:f6:5b:13:8a:78:66:15:e0:d1:9c:13:
                    74:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B3:CE:F2:9F:64:96:E4:C7:02:66:1D:45:E4:76:D7:96:74:78:66
            X509v3 Authority Key Identifier:
                keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iLPO8p9kluTHAmYdReR215Z0eGY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:840:26::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:19:f2:80:20:3e:57:7a:81:52:d9:39:7a:e6:75:c7:76:5d:
         f7:65:b8:08:6e:d7:18:c8:02:7b:0d:88:81:f8:46:e9:06:54:
         03:da:bc:f9:63:bc:49:9f:a1:5a:71:67:c2:95:32:16:29:ad:
         bd:5e:53:0b:7b:3a:e1:ea:81:ac:18:da:ea:13:6f:1a:eb:b2:
         e5:12:02:03:1f:d0:6d:7d:fc:9c:c4:48:de:dd:70:4c:3b:9d:
         a4:cd:f5:55:90:23:5e:42:14:69:e3:f2:5e:3a:16:09:b0:d6:
         7a:8c:91:94:06:fc:db:36:08:d4:29:a6:3c:a9:2e:47:5b:6d:
         c6:28:0a:45:43:7c:79:0a:a8:41:90:a0:d1:55:c1:d3:2f:1d:
         7e:0d:56:fb:89:e5:89:c0:a3:ff:86:72:76:0f:e4:76:19:f7:
         19:6e:2a:ba:d7:b9:48:ac:20:e1:3c:51:ce:c4:af:a8:7c:40:
         e4:25:6c:22:77:89:e4:1d:ad:0c:79:15:46:2f:f8:d5:24:43:
         47:24:8c:71:64:94:83:c0:97:ea:a2:4d:9c:ae:23:25:ff:5b:
         e1:c9:68:af:dc:18:48:a7:60:4b:c7:db:ff:2f:1b:e9:de:c7:
         92:9c:84:ed:9d:43:2c:97:85:2c:35:12:ef:6f:3a:c1:8c:07:
         a2:00:69:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----