Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/zLmBBFZ6qziW1Lr_M-Pj-n77D4E.roa
File:                     zLmBBFZ6qziW1Lr_M-Pj-n77D4E.roa (raw, json)
Hash identifier:          EeCIle7XfC3hUZPyLgVwAyGSFircda7g8rSNaf+7y9s=
Subject key identifier:   CC:B9:81:04:56:7A:AB:38:96:D4:BA:FF:33:E3:E3:FA:7E:FB:0F:81
Certificate issuer:       /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial:       018CCA29BB02A9DBCEE5792E8188573FD4ED
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/zLmBBFZ6qziW1Lr_M-Pj-n77D4E.roa
Signing time:             Tue 02 Jan 2024 12:33:01 +0000
ROA not before:           Tue 02 Jan 2024 12:33:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209209
IP address blocks:        2a11:2307::/37 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ca:29:bb:02:a9:db:ce:e5:79:2e:81:88:57:3f:d4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
        Validity
            Not Before: Jan  2 12:33:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ccb98104567aab3896d4baff33e3e3fa7efb0f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:73:51:3f:0e:7b:bf:93:67:19:95:8a:98:
                    28:7a:68:ce:ae:02:48:10:ea:7d:23:d3:ed:e6:ec:
                    e5:a0:1c:8b:55:ef:9a:7c:7b:ce:56:a6:40:f4:5f:
                    d9:5b:e8:99:a2:84:00:95:5b:d8:3c:52:12:6f:8e:
                    9e:e9:73:1b:03:b9:5e:74:20:39:f4:70:93:93:04:
                    22:a9:ec:3b:e3:48:1a:a0:c3:f7:65:a3:3e:0a:98:
                    0a:ac:41:bf:b3:28:d8:b6:61:5b:af:b5:9a:5c:ed:
                    6f:27:2c:d9:7d:e9:42:01:8c:20:ad:bc:e6:2d:79:
                    54:87:af:0a:f1:63:53:f1:54:86:92:ed:76:af:1a:
                    55:8b:4c:1b:ea:9c:ac:16:4b:af:3f:df:ec:9c:14:
                    ac:7a:fe:3c:88:8f:c3:32:49:84:7b:7b:a5:ae:58:
                    1d:88:8d:6f:1a:88:2d:a0:d5:e8:95:50:53:5c:05:
                    df:04:48:0c:6c:61:80:3a:f2:1c:39:fc:8a:9f:2a:
                    73:48:bb:b2:48:73:2d:ce:ac:b8:10:ea:3b:06:cf:
                    b9:cc:3c:f7:c5:3d:3d:1a:9d:d5:de:4b:66:14:67:
                    52:d2:70:dd:12:3f:4b:b1:66:84:04:81:75:b2:73:
                    79:15:b8:bf:41:61:ed:0a:bc:2f:6d:ea:34:bc:bc:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B9:81:04:56:7A:AB:38:96:D4:BA:FF:33:E3:E3:FA:7E:FB:0F:81
            X509v3 Authority Key Identifier:
                keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/zLmBBFZ6qziW1Lr_M-Pj-n77D4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:2307::/37

    Signature Algorithm: sha256WithRSAEncryption
         86:e0:b7:1f:07:6e:fa:82:c2:3b:3f:a5:cf:d8:90:31:0e:2b:
         77:73:ca:dd:c4:76:00:74:c8:cf:24:24:b8:34:9a:77:31:93:
         55:9b:3f:d2:61:78:89:14:44:31:c4:fa:c2:ac:b2:46:c5:8b:
         11:99:43:55:66:96:7b:f2:a4:c5:f5:cb:8e:57:ed:73:0d:ff:
         a6:91:81:c9:32:3b:3e:02:d0:00:8b:15:94:28:b2:f3:ed:b2:
         92:b5:27:f5:04:8c:d7:9a:de:b9:7a:ea:5a:a1:e2:90:e9:83:
         8f:84:b1:26:23:13:fa:98:81:a6:96:ff:52:1e:8a:89:63:d0:
         c4:2a:51:ae:eb:15:f8:b2:fa:1d:fb:fa:db:81:ac:d5:78:1a:
         f0:a5:32:3e:77:dd:09:79:1c:ca:5b:ec:8d:7a:e4:7a:c2:9f:
         ce:57:ff:2a:fe:08:2d:37:8d:8b:7a:5f:f0:5f:ef:4e:7b:d6:
         6a:3d:21:18:c4:e5:fc:eb:89:6f:91:4d:66:e8:a1:c3:3a:87:
         01:45:af:64:0b:87:7c:44:5e:5d:0a:24:84:4e:0c:e5:27:ba:
         e7:8f:b0:b4:c7:ab:05:45:7a:0e:04:21:db:f5:8a:57:4a:ff:
         88:a2:bd:03:9d:9b:0b:92:e6:b2:71:88:d5:f2:f4:9f:2d:33:
         47:f7:ce:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----