Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/yy-euMpd9vX39Vpg0Kd4UgQYIGE.roa
File:                     yy-euMpd9vX39Vpg0Kd4UgQYIGE.roa (raw, json)
Hash identifier:          uPbo4oi69ROXD/aUyypCBBuvkKtZ7Q2k8X+kaOBwbco=
Subject key identifier:   CB:2F:9E:B8:CA:5D:F6:F5:F7:F5:5A:60:D0:A7:78:52:04:18:20:61
Certificate issuer:       /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial:       018CC4247EB062E6755F92FB1279D850B5DC
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/yy-euMpd9vX39Vpg0Kd4UgQYIGE.roa
Signing time:             Mon 01 Jan 2024 08:29:35 +0000
ROA not before:           Mon 01 Jan 2024 08:29:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207592
IP address blocks:        2a02:d480:700::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:24:7e:b0:62:e6:75:5f:92:fb:12:79:d8:50:b5:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
        Validity
            Not Before: Jan  1 08:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cb2f9eb8ca5df6f5f7f55a60d0a7785204182061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:84:bf:b1:28:9e:40:09:99:40:c7:36:74:
                    8d:bf:34:26:c6:3f:78:7f:06:b9:4d:e6:3d:90:f2:
                    09:8d:90:55:f8:55:66:e9:fb:da:85:30:65:30:73:
                    c5:92:7c:70:7d:d8:53:d5:14:9e:6d:39:ce:21:9c:
                    91:8e:16:e6:c2:9a:58:fb:3e:2b:87:f3:22:80:66:
                    d4:27:3a:67:b7:3e:f1:15:1e:37:47:7a:df:e2:69:
                    3a:d8:92:ea:2b:19:a2:76:50:a7:a4:a7:be:0f:57:
                    2c:dd:d2:19:e2:8a:17:dc:0c:b0:73:d9:a2:9c:21:
                    2e:35:7e:72:62:ac:b2:4d:a4:99:f7:ef:d0:e4:e3:
                    48:dc:ce:ea:14:f3:22:c0:2b:21:86:3a:79:48:b4:
                    4b:56:e1:50:b9:94:6f:63:68:a8:54:8f:88:5c:c9:
                    53:12:76:87:46:7e:70:a3:84:47:78:37:39:ab:b4:
                    fc:18:91:61:7d:d9:56:32:d5:13:0c:41:36:fb:ab:
                    1a:71:ec:b6:5b:54:d3:a3:9f:cc:db:0e:52:de:1c:
                    be:da:a2:b8:6d:5d:98:4f:12:b7:2c:bd:b3:29:c5:
                    d4:a2:d6:34:59:88:e2:c2:07:32:62:2e:de:ae:6f:
                    9d:4f:e6:4b:02:4f:5e:90:fa:b9:7b:20:13:73:1c:
                    d0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:2F:9E:B8:CA:5D:F6:F5:F7:F5:5A:60:D0:A7:78:52:04:18:20:61
            X509v3 Authority Key Identifier:
                keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/yy-euMpd9vX39Vpg0Kd4UgQYIGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a02:d480:700::/42

    Signature Algorithm: sha256WithRSAEncryption
         80:23:29:f0:84:32:20:ea:37:00:af:4c:31:a7:4b:77:4c:43:
         28:21:98:c8:4f:63:bf:ec:a8:ed:86:78:1b:40:6c:61:df:52:
         0c:9d:bc:cb:ec:ed:3c:c1:31:bb:ae:8b:25:94:07:9e:39:46:
         a2:83:58:d4:03:76:76:0b:63:6f:0b:59:71:1c:97:4d:32:75:
         56:ed:db:d2:3a:1a:ee:49:c7:fb:a9:48:87:7f:2b:6f:93:aa:
         f2:83:f4:ee:e1:9e:db:f8:cf:c3:29:8a:8c:73:d1:7a:c5:d8:
         e7:e1:d6:50:80:3d:7c:ec:10:cc:6c:4c:a6:0d:dd:08:bb:57:
         16:8e:8c:91:bb:17:fe:e3:73:9c:39:2a:88:09:ff:8d:ec:13:
         ac:13:43:a6:d6:28:00:f1:32:40:91:ee:d7:56:c4:ef:dd:8d:
         7a:13:3f:bc:35:66:2b:32:a8:b1:c5:a2:9a:0b:7d:2b:35:70:
         0e:13:fa:e4:c1:d2:88:54:fa:18:8d:4b:bc:de:e3:c4:ba:b2:
         95:c8:6b:ac:4d:3f:0c:1c:5b:40:c9:4f:ac:68:77:fa:1f:66:
         4c:17:ed:17:9d:47:9b:e7:58:3f:d4:c5:1f:cb:be:f8:24:60:
         d8:b3:b4:63:c4:ec:fb:e8:41:a5:3b:af:71:d1:76:10:f1:2a:
         48:ab:ac:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----