Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/lR4IJzpInny5h17UDb47FFwgiMg.roa
File:                     lR4IJzpInny5h17UDb47FFwgiMg.roa (raw, json)
Hash identifier:          BwXCSe+91hoqn4tj4B/7jSZ5HrN9Kj5L0yo3/Re+ASI=
Subject key identifier:   95:1E:08:27:3A:48:9E:7C:B9:87:5E:D4:0D:BE:3B:14:5C:20:88:C8
Certificate issuer:       /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial:       018CC6B7AFCFED9750C88247F9FBC1188D77
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/lR4IJzpInny5h17UDb47FFwgiMg.roa
Signing time:             Mon 01 Jan 2024 20:29:35 +0000
ROA not before:           Mon 01 Jan 2024 20:29:35 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210596
IP address blocks:        2a0a:d6c0:9145::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:b7:af:cf:ed:97:50:c8:82:47:f9:fb:c1:18:8d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
        Validity
            Not Before: Jan  1 20:29:35 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=951e08273a489e7cb9875ed40dbe3b145c2088c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:c5:57:d2:9e:fd:c8:ac:db:39:a0:bc:07:
                    35:0d:fc:ac:82:fe:ef:d3:3e:6a:f8:81:f1:e1:ed:
                    d6:ad:b4:1c:4a:60:53:0b:a4:a2:d4:0f:22:95:9d:
                    92:a2:44:bc:b6:d8:39:ac:8b:0c:56:96:8d:27:23:
                    95:8c:6f:5b:9d:5f:f6:0a:77:46:2d:99:48:ef:93:
                    06:1f:ec:75:4b:29:f9:9b:b9:e0:fe:a4:51:37:69:
                    81:3e:70:fd:7e:27:dc:29:c9:74:41:c0:64:16:27:
                    ff:1d:67:5b:b1:f6:c1:09:96:52:82:e2:11:ed:82:
                    04:b8:ae:03:bd:0b:c5:90:8a:6a:02:6d:ed:11:ff:
                    07:c1:65:40:ba:2f:a6:7b:1c:3b:1f:9c:8b:c3:03:
                    24:24:91:ec:d8:f3:55:f7:d3:1e:85:7d:6b:dd:43:
                    88:d8:c8:c1:23:75:7e:cc:10:2f:e1:f4:ba:eb:31:
                    a6:69:00:3b:63:16:45:60:c8:96:37:db:8b:d1:0b:
                    20:99:93:99:c4:d2:7a:f1:c1:82:a6:6c:9d:4b:31:
                    7b:b7:d0:a1:30:ba:7b:11:25:d8:df:11:a6:4d:c9:
                    3e:69:9b:5c:e3:b2:40:ab:3b:f1:ba:0c:f2:b7:f1:
                    79:00:c9:d6:53:01:62:a8:4f:f8:00:3d:65:5e:fe:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1E:08:27:3A:48:9E:7C:B9:87:5E:D4:0D:BE:3B:14:5C:20:88:C8
            X509v3 Authority Key Identifier:
                keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/lR4IJzpInny5h17UDb47FFwgiMg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:d6c0:9145::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:72:7e:44:9c:24:c7:c5:29:4a:41:f7:a4:86:22:48:18:d9:
         70:38:f9:37:fc:4d:a9:df:da:3f:ac:37:fb:63:0b:7e:f4:55:
         91:c6:b2:fc:49:08:8a:50:bf:50:b4:6a:24:3d:cd:ec:3c:8f:
         7a:d8:c6:3e:69:7d:58:e7:3e:5c:25:01:6f:51:ab:f8:11:65:
         24:f7:28:80:6c:e9:bf:e3:7b:b2:4b:3e:1c:98:05:97:92:a8:
         46:f4:02:ac:76:bd:d6:5a:c6:6e:2a:ce:ce:cc:4d:a8:2f:7e:
         b7:82:84:7a:93:22:92:16:be:9d:3e:90:c8:84:88:b4:46:a1:
         dd:c8:52:36:40:dc:d0:56:d3:d8:59:7d:a5:b9:44:7e:c5:46:
         ed:c4:d5:a9:3a:7a:ca:c4:5c:2d:93:88:a1:76:9e:5c:25:f1:
         d0:4d:86:c3:62:d0:5b:eb:7c:62:2b:87:36:a9:9d:69:ed:04:
         f6:94:b6:62:f8:6a:31:6f:7f:88:9f:c6:bf:ae:7c:38:59:79:
         e3:3d:09:f4:09:06:5d:85:ee:9e:ac:c2:52:ac:28:09:fd:84:
         c7:ba:b9:5b:81:67:fe:b9:c3:11:9c:60:b4:2b:59:b1:2d:47:
         0f:b4:af:11:a9:85:fa:db:b7:4f:10:c9:26:dd:93:56:ac:5d:
         c4:81:a7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----