Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/4G3d8roaupAClgqlaGXfHk-fNlA.roa
File:                     4G3d8roaupAClgqlaGXfHk-fNlA.roa (raw, json)
Hash identifier:          X0dYR9bwXIvGPEqMIIMIU+Ev2QthBam6AI2fNe9oNN0=
Subject key identifier:   E0:6D:DD:F2:BA:1A:BA:90:02:96:0A:A5:68:65:DF:1E:4F:9F:36:50
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       018DB814690186E8857149EE511EED118DB5
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/4G3d8roaupAClgqlaGXfHk-fNlA.roa
Signing time:             Sat 17 Feb 2024 17:19:21 +0000
ROA not before:           Sat 17 Feb 2024 17:19:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215595
IP address blocks:        2a0f:7803:fe30::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:b8:14:69:01:86:e8:85:71:49:ee:51:1e:ed:11:8d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Feb 17 17:19:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e06dddf2ba1aba9002960aa56865df1e4f9f3650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3a:fd:5c:a4:1f:f2:f8:b0:86:50:31:78:4d:
                    23:9c:a5:eb:a3:24:e3:fa:16:e7:df:0e:b2:7d:15:
                    e0:ae:4e:57:32:7b:49:b5:d3:09:a3:04:12:bc:a8:
                    cc:63:3a:f5:74:ce:e7:63:8e:bd:e1:be:89:f6:71:
                    aa:b9:87:3f:ef:2a:50:37:7e:17:67:75:bb:40:c7:
                    3c:eb:bc:2b:a8:78:b9:76:c6:2f:c5:1b:9c:7d:c6:
                    fc:be:22:40:0c:f8:a6:15:e7:d4:ed:1f:94:12:08:
                    bf:1b:e7:ed:46:89:03:f8:cd:e3:17:d0:ab:53:c8:
                    53:9b:ef:4f:69:17:1a:f2:5e:56:82:6a:ee:d6:d4:
                    22:f9:69:20:e4:af:e8:98:13:08:2d:74:43:75:86:
                    1f:d0:d9:8a:bd:4f:95:a3:ab:22:cb:e5:e0:d4:35:
                    53:e6:2e:c5:2e:0d:4e:20:db:b1:77:5e:ad:d5:d5:
                    bd:42:a8:19:d6:05:6c:92:75:5e:2e:75:7e:54:48:
                    ea:d0:2a:87:8b:ad:9b:31:29:8c:2e:6c:fd:ee:40:
                    7b:5a:7d:f1:ab:f3:10:c1:0d:85:44:40:2c:cd:32:
                    f3:8f:66:14:d9:13:06:e1:7e:9e:d1:e5:d5:07:4e:
                    ae:96:f8:58:15:41:8b:38:01:60:d0:1f:b2:57:25:
                    df:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6D:DD:F2:BA:1A:BA:90:02:96:0A:A5:68:65:DF:1E:4F:9F:36:50
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/4G3d8roaupAClgqlaGXfHk-fNlA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:fe30::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:89:7b:2d:96:d8:e8:16:24:6d:07:51:b1:16:4a:5b:8b:9c:
         15:2a:e6:b0:a2:d1:3d:6e:ed:9c:46:46:63:86:55:a2:ba:70:
         f0:44:05:9f:cc:d3:2e:54:d6:c2:1d:93:54:4f:5f:80:e3:6d:
         68:fc:60:8f:70:6a:27:43:c3:9b:5c:93:a4:df:05:47:89:fc:
         97:84:c4:b7:ef:74:89:28:b9:61:ef:55:8b:0e:bd:df:19:67:
         64:c0:f8:19:5f:63:b4:e2:3c:20:3b:99:b0:21:7a:1e:c5:bd:
         2e:d9:25:76:d8:75:bc:23:c6:c8:3a:8c:d3:f5:5d:86:3b:19:
         ae:e5:7f:b7:46:d5:f8:83:09:a0:2f:b7:b4:ae:a9:6b:91:d6:
         e6:a5:2e:76:fa:7f:17:07:87:54:a9:80:55:28:50:10:55:4c:
         4d:a9:bd:fc:d3:6d:2a:a1:bd:03:7e:97:06:e8:5e:30:97:fd:
         69:41:52:8c:93:f5:15:ab:53:d8:58:62:60:e1:94:d7:3a:24:
         ae:b9:29:c0:06:95:7f:6e:8e:a2:54:1e:6a:b9:3e:90:5e:2f:
         c4:89:94:3d:9b:1d:6b:59:9e:8a:31:40:91:4f:38:1b:bf:ae:
         00:75:62:86:c4:f4:a2:95:b7:e9:d2:21:b2:d8:2f:6f:a5:c3:
         90:ac:d7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----