Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VWn87cVzJ7260Q6D0CUUASlJ7GA.roa
File:                     VWn87cVzJ7260Q6D0CUUASlJ7GA.roa (raw, json)
Hash identifier:          7uNpr+uex8kEE/wx6sBVu+aU44Jjcwdfl98ACsG0CLY=
Subject key identifier:   55:69:FC:ED:C5:73:27:BD:BA:D1:0E:83:D0:25:14:01:29:49:EC:60
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       019050D8A8F15BE64A73BC15E15AAAFE6633
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VWn87cVzJ7260Q6D0CUUASlJ7GA.roa
Signing time:             Tue 25 Jun 2024 19:21:34 +0000
ROA not before:           Tue 25 Jun 2024 19:21:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     26042
IP address blocks:        2a0f:1584:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:50:d8:a8:f1:5b:e6:4a:73:bc:15:e1:5a:aa:fe:66:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Jun 25 19:21:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=5569fcedc57327bdbad10e83d02514012949ec60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:97:3d:d2:1a:9c:5e:8e:f8:cc:2d:6a:91:
                    3e:bd:b1:e1:30:ca:de:5b:5e:87:47:a3:af:4e:c4:
                    c6:20:a7:0f:53:c1:f4:dc:11:f9:bd:e7:25:83:5e:
                    c6:e8:e0:e2:a0:5c:27:11:c9:da:7f:e2:1d:22:17:
                    45:3e:1e:16:87:4e:89:e6:ba:da:df:c8:09:e6:09:
                    ea:f6:1d:9c:e3:be:e2:c7:29:8f:48:d1:24:e8:71:
                    fb:83:c0:ac:3c:80:3e:a1:0e:c0:a0:8b:ac:9e:33:
                    fc:73:f7:ae:d9:c3:69:23:5b:df:fb:13:08:c8:14:
                    ac:e6:55:b8:ca:a2:90:e3:fa:31:87:a5:78:45:da:
                    85:aa:fb:e0:ad:b1:20:e8:a6:64:a2:c7:f5:5c:c4:
                    23:a7:1c:99:08:9d:91:b3:65:d6:39:05:5a:69:b4:
                    71:63:5e:14:23:33:25:07:7c:69:e7:4c:8c:36:82:
                    34:cf:58:3e:7f:65:87:e9:da:07:00:76:d4:6e:d9:
                    22:21:7b:88:da:c5:1b:dd:63:6f:9e:9b:ea:10:9b:
                    98:ca:66:d5:5a:62:30:d5:3f:e9:a9:08:9c:4a:02:
                    b4:f4:b6:c7:76:6c:38:ff:84:fe:49:4d:6c:7d:69:
                    5f:6a:53:18:5c:88:d5:7f:ec:55:0b:e3:a3:c7:55:
                    70:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:69:FC:ED:C5:73:27:BD:BA:D1:0E:83:D0:25:14:01:29:49:EC:60
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VWn87cVzJ7260Q6D0CUUASlJ7GA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1584:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:01:a6:3c:a3:7a:67:4d:44:71:dd:32:2e:bc:2d:65:28:61:
         b5:4a:4b:f7:a7:a8:d7:47:46:24:95:4d:52:b1:c4:15:ab:39:
         a1:61:bb:2f:1d:84:96:f3:2f:cc:da:2d:08:00:92:b2:5d:dc:
         42:2d:55:a2:c7:0d:a5:11:e2:eb:0e:8d:52:0a:07:76:42:0f:
         ad:8a:39:02:ea:a2:10:9a:0e:df:b2:c4:91:45:1c:83:cf:b7:
         52:a2:e6:61:c4:f5:94:25:fb:77:02:c8:29:0f:bf:9a:db:7d:
         f8:f7:7f:db:a4:6e:69:ed:e2:55:86:59:b6:de:e6:9e:4c:81:
         df:88:ea:98:ab:17:61:1b:41:e0:92:ed:6f:6e:57:0b:6f:d2:
         59:c4:40:18:0a:4d:4a:ee:69:02:b5:20:63:f0:e2:eb:e3:fd:
         ee:48:c9:f5:b7:e4:9e:43:b0:41:90:5d:ac:56:66:48:2f:25:
         07:72:3d:06:fe:e3:3b:1b:98:88:4f:c1:45:c2:08:e7:1a:f4:
         2b:83:58:bb:a3:e5:e3:aa:9f:b2:f2:69:1e:4f:82:bc:f8:f3:
         99:b8:a3:d5:26:8a:c8:a8:07:94:8e:a4:43:7e:5b:5b:65:51:
         45:dc:d4:ce:55:5e:06:fa:fd:82:24:61:0a:a7:dd:40:e9:81:
         cf:be:9c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----