Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/QxqYVPfAsE-57qCkcB06Rd4fymU.roa
File:                     QxqYVPfAsE-57qCkcB06Rd4fymU.roa (raw, json)
Hash identifier:          dFoLKFXLMTu6Y8MtUD8SB8ObcfHEf/xTdKt12W5GL7w=
Subject key identifier:   43:1A:98:54:F7:C0:B0:4F:B9:EE:A0:A4:70:1D:3A:45:DE:1F:CA:65
Certificate issuer:       /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial:       01917A6544D452B40EF7AFC2BB99A2639AF8
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/QxqYVPfAsE-57qCkcB06Rd4fymU.roa
Signing time:             Thu 22 Aug 2024 14:02:22 +0000
ROA not before:           Thu 22 Aug 2024 14:02:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     202647
IP address blocks:        2a13:bc2:1000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:7a:65:44:d4:52:b4:0e:f7:af:c2:bb:99:a2:63:9a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
        Validity
            Not Before: Aug 22 14:02:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=431a9854f7c0b04fb9eea0a4701d3a45de1fca65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:dc:8f:61:17:8a:bf:ff:b4:4b:93:fe:60:60:
                    88:1c:94:e7:c7:6d:70:bc:59:54:83:73:cc:ce:96:
                    57:b4:9d:8b:50:96:b0:55:5a:42:b4:a9:78:71:06:
                    db:99:ea:61:55:f2:9f:7d:7c:5d:6a:a1:5b:4f:75:
                    b6:21:45:67:5d:8d:03:d0:6d:dd:1f:9b:07:bc:31:
                    44:39:d1:44:60:75:cc:99:eb:65:67:1b:7b:b7:40:
                    d3:30:ef:d1:46:6f:24:61:39:80:89:64:c1:a2:48:
                    79:85:e3:67:74:43:84:c7:67:17:dd:a4:1e:73:01:
                    cb:72:fb:28:b2:89:19:7b:b7:e9:2e:9d:53:5a:4c:
                    3e:b7:34:b7:10:3e:9e:57:26:e2:6a:c2:e8:f4:78:
                    12:8d:37:5f:b1:49:61:25:3a:83:d2:b4:76:72:2e:
                    6d:46:7d:ec:d0:a6:4c:ba:bf:84:49:d5:bb:78:e5:
                    5a:1c:55:6e:c2:6c:eb:18:d9:e4:8a:45:3c:54:d8:
                    6a:e1:b6:f7:b3:f9:5b:a1:c2:5f:4c:80:c0:c6:65:
                    5c:f5:48:d5:0a:26:1c:05:35:60:17:0a:e5:9d:03:
                    d0:3f:97:03:91:dc:f4:ed:af:e4:d2:1e:20:68:85:
                    ef:4c:7d:c9:5d:32:fc:4c:e6:43:d0:fa:3f:25:24:
                    67:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1A:98:54:F7:C0:B0:4F:B9:EE:A0:A4:70:1D:3A:45:DE:1F:CA:65
            X509v3 Authority Key Identifier:
                keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/QxqYVPfAsE-57qCkcB06Rd4fymU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:bc2:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b2:3d:a6:94:a6:84:14:bb:81:e9:bf:a5:cf:b5:a0:e2:c4:21:
         d6:40:30:01:cc:c4:5c:d8:dd:5f:86:1e:ab:1f:10:24:5a:ff:
         70:3b:fe:89:13:c7:3d:24:b5:57:7a:06:42:8c:66:eb:19:b9:
         08:ef:79:52:99:25:da:69:0b:34:49:34:b9:55:67:58:75:df:
         55:4a:f3:26:7b:63:a8:22:52:79:4b:7c:1f:a8:61:47:14:5e:
         a7:39:05:17:d1:28:31:0c:0c:f1:de:6c:65:85:1f:75:7e:7b:
         5c:0a:b6:c7:3c:40:3d:09:d7:db:a8:c8:32:ae:dd:c9:91:e5:
         ee:0f:c3:fa:4c:cb:af:fd:e5:db:f8:28:ba:5f:75:af:ab:57:
         3a:a5:1f:96:f7:c0:de:ac:63:1f:0d:97:b1:0c:3d:ad:49:67:
         f2:af:52:b7:fc:a8:af:d3:85:2d:00:21:a6:40:99:9f:eb:b7:
         43:96:70:72:ef:71:af:96:40:39:48:ea:87:b3:4a:0e:5c:05:
         6f:ea:f0:e3:ea:3b:46:cc:bf:3b:7f:56:a8:56:37:fa:77:7f:
         a2:38:17:7d:02:00:a3:a2:bc:2d:75:22:d5:39:ba:ef:bf:b5:
         0f:15:54:76:49:26:79:e5:40:05:8d:36:39:18:e8:2c:ee:b9:
         54:49:df:a5
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZF6ZUTUUrQO96/Cu5miY5r4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhN2ViMTExNTEzMGZhYzk0MDkxMDYxZTMxNDYyYTU2NTIy
Njg4NWEwHhcNMjQwODIyMTQwMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzFhOTg1NGY3YzBiMDRmYjllZWEwYTQ3MDFkM2E0NWRlMWZjYTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNyPYReKv/+0S5P+YGCIHJTnx21w
vFlUg3PMzpZXtJ2LUJawVVpCtKl4cQbbmephVfKffXxdaqFbT3W2IUVnXY0D0G3d
H5sHvDFEOdFEYHXMmetlZxt7t0DTMO/RRm8kYTmAiWTBokh5heNndEOEx2cX3aQe
cwHLcvsosokZe7fpLp1TWkw+tzS3ED6eVybiasLo9HgSjTdfsUlhJTqD0rR2ci5t
Rn3s0KZMur+ESdW7eOVaHFVuwmzrGNnkikU8VNhq4bb3s/lbocJfTIDAxmVc9UjV
CiYcBTVgFwrlnQPQP5cDkdz07a/k0h4gaIXvTH3JXTL8TOZD0Po/JSRnuQIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFEMamFT3wLBPue6gpHAdOkXeH8plMB8GA1UdIwQY
MBaAFPp+sRFRMPrJQJEGHjFGKlZSJohaMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1uNnhFVkV3LXNsQWtRWWVNVVlxVmxJbWlGby5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvYzE1ZTk5LTI5NjUtNDc2Zi05YWVm
LThhMjczZjRhZDE1ZC8xL1F4cVlWUGZBc0UtNTdxQ2tjQjA2UmQ0ZnltVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmMvYzE1ZTk5LTI5NjUtNDc2Zi05YWVmLThhMjczZjRhZDE1
ZC8xLzEtbjZ4RVZFdy1zbEFrUVllTVVZcVZsSW1pRm8uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqEwvC
EDANBgkqhkiG9w0BAQsFAAOCAQEAsj2mlKaEFLuB6b+lz7Wg4sQh1kAwAczEXNjd
X4Yeqx8QJFr/cDv+iRPHPSS1V3oGQoxm6xm5CO95Upkl2mkLNEk0uVVnWHXfVUrz
JntjqCJSeUt8H6hhRxRepzkFF9EoMQwM8d5sZYUfdX57XAq2xzxAPQnX26jIMq7d
yZHl7g/D+kzLr/3l2/goul91r6tXOqUflvfA3qxjHw2XsQw9rUln8q9St/yor9OF
LQAhpkCZn+u3Q5Zwcu9xr5ZAOUjqh7NKDlwFb+rw4+o7Rsy/O39WqFY3+nd/ojgX
fQIAo6K8LXUi1Tm677+1DxVUdkkmeeVABY02ORjoLO65VEnfpQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:52 2024 by rpki-client on console-fra.rpki-client.org