Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/wCXyqdYJdhs9PmEJH8nAPq7_kmM.roa
File:                     wCXyqdYJdhs9PmEJH8nAPq7_kmM.roa (raw, json)
Hash identifier:          Y6BMP8kAu3MoO6GlcGywAg3HFS8aGDt/Jrp+hXnYN/0=
Subject key identifier:   C0:25:F2:A9:D6:09:76:1B:3D:3E:61:09:1F:C9:C0:3E:AE:FF:92:63
Certificate issuer:       /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial:       019291ED2A70950A3DAC7DE77875F41275F5
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/wCXyqdYJdhs9PmEJH8nAPq7_kmM.roa
Signing time:             Tue 15 Oct 2024 20:44:52 +0000
ROA not before:           Tue 15 Oct 2024 20:44:52 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215750
IP address blocks:        2a0f:7803:e300::/40 maxlen: 48
                          2a0f:7803:fe40::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:91:ed:2a:70:95:0a:3d:ac:7d:e7:78:75:f4:12:75:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
        Validity
            Not Before: Oct 15 20:44:52 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c025f2a9d609761b3d3e61091fc9c03eaeff9263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:5c:cf:ee:65:a2:0d:e8:20:1a:e8:14:02:
                    c2:77:a5:2c:bd:d3:5c:30:f2:ce:10:dd:b1:e3:8f:
                    e6:c7:cd:ea:fa:30:25:b5:d2:c3:c2:89:2c:ea:d6:
                    b1:21:14:3a:b1:7d:28:92:cc:44:d1:07:ec:5e:94:
                    1e:a2:1c:d8:97:c3:49:63:6a:16:2e:e3:a3:c8:b9:
                    07:f1:3c:35:82:e4:8f:56:fd:30:8d:d4:b6:8d:fb:
                    79:8f:19:2d:d8:eb:94:fb:be:37:78:9b:cd:42:2f:
                    72:a1:79:cf:3f:de:34:12:fc:bf:e3:79:47:49:b2:
                    6e:21:01:b5:84:4a:e8:ad:29:e8:35:ac:a0:a6:0b:
                    25:ac:90:bf:9e:d4:34:d1:08:93:4c:93:16:8e:95:
                    fa:e9:ee:5f:ca:3e:cd:8e:33:3c:a6:a1:a7:b7:e8:
                    ca:c1:f9:a9:1d:6f:0b:92:2a:6e:ff:a0:11:ab:98:
                    81:5c:19:aa:70:69:8b:6f:41:f0:ff:54:e1:58:b3:
                    f5:89:b8:9b:27:fe:95:04:a9:31:d2:a4:3f:df:a6:
                    b0:1d:a6:05:99:25:d5:ad:c4:08:63:bc:01:84:ed:
                    7d:7a:63:87:5b:b5:71:1c:5f:0a:35:c7:03:f6:40:
                    85:cf:40:a3:d8:3f:e7:b9:d0:03:d1:02:aa:03:37:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:25:F2:A9:D6:09:76:1B:3D:3E:61:09:1F:C9:C0:3E:AE:FF:92:63
            X509v3 Authority Key Identifier:
                keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/wCXyqdYJdhs9PmEJH8nAPq7_kmM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:7803:e300::/40
                  2a0f:7803:fe40::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:b9:f4:28:d5:96:2a:1b:f4:07:f3:c4:62:4e:c1:73:3e:
         d0:79:6c:d2:0b:2e:21:fe:46:0b:f8:21:7f:a5:28:c5:ca:0b:
         ba:b6:74:7e:18:e2:05:01:95:2b:8c:06:81:87:5e:e5:99:29:
         25:18:66:a9:1e:a3:a8:cb:96:6a:47:fc:31:5a:d1:ea:03:dc:
         36:2b:86:cc:e6:b3:c0:c7:e9:26:e8:b6:7f:c0:e2:c2:c7:32:
         89:1b:f8:9e:d7:66:eb:6e:76:ed:0e:b0:88:75:f9:75:34:d7:
         d0:73:28:ac:be:7e:99:4c:e0:c9:2a:f8:5b:37:dd:d5:7d:9b:
         c0:46:4c:78:eb:aa:f6:8c:4c:25:8e:97:03:0a:1a:ee:ff:15:
         b3:6d:60:30:b3:2a:78:63:7a:45:28:d6:d1:89:4a:c9:bb:a1:
         87:b5:ea:5c:a3:ab:27:cf:18:fe:f1:24:83:e2:57:2a:56:78:
         2e:85:4c:12:f7:a2:bb:51:49:b4:00:bb:09:7a:55:82:1b:cd:
         a3:14:44:e8:84:7b:2b:0e:43:2a:06:78:08:7e:af:e4:27:59:
         50:50:e8:75:eb:43:43:07:9c:eb:34:fc:24:43:07:24:11:ea:
         9a:ff:b5:77:f9:fa:0d:aa:25:02:55:7b:1a:c9:d8:7a:e0:b4:
         fd:aa:eb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----