Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/yp_Hk5A63XSFOwbrQdZ5G08gj5Q.roa
File:                     yp_Hk5A63XSFOwbrQdZ5G08gj5Q.roa (raw, json)
Hash identifier:          f8BfFXJOv05A9UEi1/ohhd3k9H6TUfS0i+FE1DVczCE=
Subject key identifier:   CA:9F:C7:93:90:3A:DD:74:85:3B:06:EB:41:D6:79:1B:4F:20:8F:94
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       01926C0221FEACF10FEFFAB1F46A7F2D9045
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/yp_Hk5A63XSFOwbrQdZ5G08gj5Q.roa
Signing time:             Tue 08 Oct 2024 12:02:11 +0000
ROA not before:           Tue 08 Oct 2024 12:02:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     59861
IP address blocks:        2a10:dc7::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:6c:02:21:fe:ac:f1:0f:ef:fa:b1:f4:6a:7f:2d:90:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Oct  8 12:02:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ca9fc793903add74853b06eb41d6791b4f208f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:53:94:8b:4f:34:47:89:9b:ba:59:3e:05:16:
                    fc:a9:ba:6c:c1:d3:10:52:72:dc:1b:1a:9e:82:ef:
                    63:fa:9d:bf:d6:ec:49:24:57:66:7e:96:17:7f:04:
                    6c:ad:0e:bd:54:35:38:6a:97:a6:5e:5a:94:ab:5e:
                    44:1a:7f:8c:80:1f:47:9d:22:f3:53:38:21:b7:fb:
                    ee:7d:30:c8:63:73:6e:f9:18:2c:55:c8:36:3b:57:
                    61:4c:1a:4d:6b:53:6f:ea:c9:07:d0:5f:c5:73:e8:
                    4c:35:34:65:8e:c2:f8:41:f4:79:23:16:ce:f8:17:
                    db:45:2b:d1:ac:c3:c6:dd:4e:e2:71:8b:2d:75:49:
                    b2:d7:7f:57:ab:bd:0b:e3:7b:75:e2:bd:8b:c9:25:
                    32:12:ec:dc:22:44:ab:b7:db:6c:38:50:ef:ca:cc:
                    45:c7:3b:26:22:4a:73:14:a9:83:72:72:42:2e:0a:
                    d1:52:48:f9:0c:3f:8a:e6:69:04:61:17:14:3c:41:
                    13:38:8c:ca:f4:35:58:b6:ea:dc:9d:8b:78:6c:e8:
                    57:38:91:75:3d:e2:1c:e3:1f:2a:33:93:dc:d4:a3:
                    67:2a:09:68:a4:e5:9b:c9:1f:04:31:cb:3b:94:1a:
                    5a:99:c6:d4:64:8f:49:1e:72:e7:5e:36:83:88:dc:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9F:C7:93:90:3A:DD:74:85:3B:06:EB:41:D6:79:1B:4F:20:8F:94
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/yp_Hk5A63XSFOwbrQdZ5G08gj5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a10:dc7::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:23:38:ff:66:ae:73:ac:38:91:ac:e3:39:cb:3e:5e:66:f9:
         0a:4b:61:0f:b4:09:84:e6:66:ed:70:b4:44:a3:5d:8d:41:54:
         f8:76:aa:9f:5b:84:68:c7:1d:60:38:40:b4:b6:d8:34:4e:6f:
         75:b5:af:06:94:55:6c:d1:aa:ea:ac:8e:a5:88:54:e8:a9:cf:
         1d:c5:ab:1e:9e:f5:f2:b3:b2:de:26:c8:13:0c:c8:41:7f:1c:
         d7:d6:5b:35:b0:17:20:35:fc:07:f4:b7:dd:0d:96:b1:d5:54:
         63:b4:7d:33:ff:4e:d8:af:2b:8b:aa:6f:13:b1:76:2c:f4:d9:
         08:bb:05:32:a5:9f:1e:af:d9:4d:72:16:8e:ec:08:a0:be:68:
         89:93:4e:b3:ef:bb:e7:db:4c:b5:0e:c2:77:2b:f6:57:bb:ee:
         0c:16:9e:95:a9:32:68:26:16:67:9c:31:e7:7b:1e:3b:ec:10:
         af:7d:18:6b:64:f0:a4:1a:21:8c:d1:ed:ed:af:e2:e4:cc:71:
         cb:93:72:83:e6:57:8a:49:e4:38:39:e7:e7:39:ec:6a:e5:e3:
         03:36:b9:28:92:12:cc:2e:4b:47:bf:59:9b:7b:e4:c4:e4:3c:
         9d:c2:85:a8:34:14:4a:d4:19:f1:72:6b:e1:53:95:51:6d:d8:
         9f:6c:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----