Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/MgovnyBuiQJnDJrFLNV-JS6Zatw.roa
File:                     MgovnyBuiQJnDJrFLNV-JS6Zatw.roa (raw, json)
Hash identifier:          mbaOxBIV4Nsoc0MM1/Uy46D/rKsQE3Ree//AGKtAi8I=
Subject key identifier:   32:0A:2F:9F:20:6E:89:02:67:0C:9A:C5:2C:D5:7E:25:2E:99:6A:DC
Certificate issuer:       /CN=95406691f2e374ee37a640492a364dfc53ba4412
Certificate serial:       018CC9BA834E06A8EF112414C0522F1AE228
Authority key identifier: 95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/MgovnyBuiQJnDJrFLNV-JS6Zatw.roa
Signing time:             Tue 02 Jan 2024 10:31:32 +0000
ROA not before:           Tue 02 Jan 2024 10:31:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     207754
IP address blocks:        2001:678:c40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:ba:83:4e:06:a8:ef:11:24:14:c0:52:2f:1a:e2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95406691f2e374ee37a640492a364dfc53ba4412
        Validity
            Not Before: Jan  2 10:31:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=320a2f9f206e8902670c9ac52cd57e252e996adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:25:5f:28:05:bc:b5:18:04:ef:8a:90:3a:
                    a3:67:68:c8:1e:5f:ea:09:d7:7f:e4:85:77:7f:cc:
                    57:25:ca:44:12:44:b3:85:e4:61:cd:86:c9:58:05:
                    37:e2:cd:c5:1f:eb:d3:76:df:96:f6:92:ac:aa:df:
                    18:57:b1:bc:44:c3:09:03:e2:01:7e:45:68:e9:50:
                    1d:18:58:73:a7:64:0e:cc:0a:e0:9e:cb:a7:5c:6d:
                    54:43:6f:69:fa:25:d0:8b:ce:ad:cd:2d:5b:aa:9d:
                    ef:4b:79:5c:14:d9:52:46:d6:f8:c8:b8:a8:39:9b:
                    ef:e7:b2:84:2d:40:52:26:d3:aa:bc:71:a4:91:e0:
                    46:22:a7:27:4b:ad:fa:7d:5b:f4:87:9f:2e:98:ad:
                    7a:8e:67:ac:df:bc:8e:42:df:93:92:19:13:31:c2:
                    b4:40:e4:d9:88:88:d2:80:69:2a:14:bf:79:e3:a0:
                    f6:fe:8a:36:1b:43:e9:d8:e8:e8:c8:e6:41:3a:c9:
                    f8:b2:58:7e:fa:36:69:a4:df:13:a1:70:a9:48:53:
                    28:32:da:5c:1d:92:c9:66:51:7c:f9:49:f2:de:dc:
                    32:6a:d0:d6:eb:bf:f5:93:86:ae:cf:0c:ca:47:77:
                    1b:64:f0:13:96:75:c4:56:25:07:0f:7e:7b:1c:c5:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0A:2F:9F:20:6E:89:02:67:0C:9A:C5:2C:D5:7E:25:2E:99:6A:DC
            X509v3 Authority Key Identifier:
                keyid:95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/MgovnyBuiQJnDJrFLNV-JS6Zatw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:6a:66:22:3d:91:b3:4a:45:8e:cd:de:2e:10:fe:7b:ee:ea:
         2b:ff:81:37:9c:30:d2:f9:8f:3b:3b:ab:56:7e:e9:0a:98:59:
         cc:de:52:82:d5:58:00:31:31:e1:49:4a:01:c4:78:48:d3:76:
         48:96:c5:3a:60:0b:ef:cd:af:d2:f1:2a:55:82:ec:9c:8f:1f:
         da:ae:dd:00:27:10:b5:ae:91:3b:45:8b:e1:d9:6e:63:96:d6:
         6d:c3:67:65:f9:87:fa:7b:d8:90:91:ad:ba:fa:93:06:a3:e3:
         33:8f:b6:78:e2:b3:ff:f4:e2:c7:11:c1:54:62:c5:2a:cc:9e:
         9c:8a:53:4f:4d:c9:77:e1:36:88:50:af:95:43:d6:b8:2c:ab:
         15:6c:70:70:1f:6d:d4:b6:65:02:dc:1e:70:a5:8d:b9:00:ba:
         28:c6:4d:0a:22:4d:ff:1c:45:74:a5:c2:13:e0:99:cc:6c:0c:
         ed:4a:f9:40:ba:55:a0:b3:92:67:fd:10:90:1f:e6:0d:7f:2e:
         11:31:fc:a9:ef:8e:67:72:3c:18:5b:3b:04:d7:5e:30:af:1d:
         b1:52:a6:60:97:30:36:6c:ff:8f:08:3a:95:97:92:47:d0:02:
         cd:6b:28:1a:0d:cd:f4:4c:b0:76:61:bd:0e:14:38:ae:a1:13:
         22:b4:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----