Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa
File:                     Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa (raw, json)
Hash identifier:          /p6IJaozloNZP2YBP7B1KSmwJR3RoJJR7OSkj5Cu+9Y=
Subject key identifier:   43:A7:1E:14:FB:C2:8F:9C:43:44:61:2F:E3:32:53:4F:29:70:2E:17
Certificate issuer:       /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial:       018E2DF57785B946C325ECC0987FA81DF586
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa
Signing time:             Mon 11 Mar 2024 14:40:45 +0000
ROA not before:           Mon 11 Mar 2024 14:40:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     35196
IP address blocks:        2a0c:f647::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2d:f5:77:85:b9:46:c3:25:ec:c0:98:7f:a8:1d:f5:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
        Validity
            Not Before: Mar 11 14:40:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=43a71e14fbc28f9c4344612fe332534f29702e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:09:98:86:1b:2d:8f:73:ac:a5:b7:d3:37:
                    8f:a0:f5:90:20:85:ca:1c:03:8b:1a:14:ea:b0:3e:
                    cc:bb:5e:5f:08:23:5f:9d:f4:dd:b4:fc:ad:5e:39:
                    fe:a8:e4:94:1d:a5:8d:dc:5f:e3:e5:40:c9:42:05:
                    01:69:95:ae:61:25:af:61:c0:ab:95:db:cb:ea:b8:
                    8b:36:e7:77:34:40:9a:53:9c:9e:d3:54:e7:c6:bd:
                    34:85:07:48:98:ba:b4:b8:46:46:2e:9e:81:cb:4f:
                    c2:c6:33:e5:f5:88:12:ed:a8:b0:9f:e6:c7:5b:15:
                    5a:db:4f:51:f9:a6:3c:d9:ee:37:b3:8d:89:48:a7:
                    dd:d5:2c:c4:d5:e0:5a:47:44:1f:49:73:4f:02:d9:
                    53:3f:71:92:a0:da:a8:ae:2c:e7:51:13:33:df:ec:
                    c3:ff:9b:dd:d1:a5:92:80:77:98:df:b3:f2:ea:d6:
                    76:4d:c2:a6:78:fa:78:cd:03:71:b9:0d:68:24:14:
                    8b:9d:57:de:f3:0a:28:2f:9b:e0:43:3d:6c:93:b1:
                    d3:21:d9:a9:cc:74:d9:74:d7:6a:11:91:66:8d:a7:
                    47:a9:e1:f1:7d:18:06:79:87:14:1f:46:c5:a2:81:
                    d7:d9:1d:7d:c5:f9:30:e0:fc:7a:1f:73:91:34:b3:
                    a8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:1E:14:FB:C2:8F:9C:43:44:61:2F:E3:32:53:4F:29:70:2E:17
            X509v3 Authority Key Identifier:
                keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:f647::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:bb:21:23:6f:9d:1f:8e:f9:89:7b:84:d2:2e:dc:6c:fd:75:
         62:ba:02:a1:00:58:b7:2a:2d:4b:75:3d:30:0e:86:bc:1e:16:
         b9:15:d5:bd:79:d3:67:2c:a9:fa:ca:3a:03:99:c0:ca:b8:1e:
         32:ed:49:7f:4c:7d:55:ba:f8:fb:17:1a:03:40:b1:18:79:3e:
         80:b5:5f:71:ec:21:4f:6e:db:ab:b4:fa:1e:9a:1a:79:21:27:
         42:68:60:bc:f1:85:4f:49:78:7b:8b:2f:16:a5:9a:e7:45:d6:
         16:95:23:85:5a:b0:5e:9a:93:32:38:bf:ba:88:a9:84:3b:75:
         9d:51:a6:71:99:fb:fa:13:fe:06:cf:8f:7e:82:0a:29:10:e9:
         09:6f:54:39:5c:86:38:d7:2c:67:17:95:69:03:f9:d4:8a:9d:
         ec:1c:af:d6:fe:6c:9a:e1:39:9a:12:3d:03:4a:84:5f:99:1f:
         18:7f:4c:3b:e6:0e:ec:31:77:a0:45:8a:83:d0:b1:9e:49:2f:
         0d:76:61:8a:1b:77:41:62:44:a5:26:68:e9:5a:58:84:d5:43:
         00:17:30:0c:5d:d0:2b:12:84:17:fa:85:e8:77:4c:87:c2:e5:
         55:34:d7:5f:fb:6b:6c:5b:e9:19:39:ac:3c:a7:94:02:85:a2:
         79:fb:41:bf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY4t9XeFuUbDJezAmH+oHfWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjQwMzExMTQ0MDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2E3MWUxNGZiYzI4ZjljNDM0NDYxMmZlMzMyNTM0ZjI5NzAyZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQcJmIYbLY9zrKW30zePoPWQIIXK
HAOLGhTqsD7Mu15fCCNfnfTdtPytXjn+qOSUHaWN3F/j5UDJQgUBaZWuYSWvYcCr
ldvL6riLNud3NECaU5ye01Tnxr00hQdImLq0uEZGLp6By0/CxjPl9YgS7aiwn+bH
WxVa209R+aY82e43s42JSKfd1SzE1eBaR0QfSXNPAtlTP3GSoNqoriznURMz3+zD
/5vd0aWSgHeY37Py6tZ2TcKmePp4zQNxuQ1oJBSLnVfe8wooL5vgQz1sk7HTIdmp
zHTZdNdqEZFmjadHqeHxfRgGeYcUH0bFooHX2R19xfkw4Px6H3ORNLOoLwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEOnHhT7wo+cQ0RhL+MyU08pcC4XMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvUTZjZUZQdkNqNXhEUkdFdjR6SlRUeWx3TGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgz2RzAN
BgkqhkiG9w0BAQsFAAOCAQEANbshI2+dH475iXuE0i7cbP11YroCoQBYtyotS3U9
MA6GvB4WuRXVvXnTZyyp+so6A5nAyrgeMu1Jf0x9Vbr4+xcaA0CxGHk+gLVfcewh
T27bq7T6HpoaeSEnQmhgvPGFT0l4e4svFqWa50XWFpUjhVqwXpqTMji/uoiphDt1
nVGmcZn7+hP+Bs+PfoIKKRDpCW9UOVyGONcsZxeVaQP51Iqd7Byv1v5smuE5mhI9
A0qEX5kfGH9MO+YO7DF3oEWKg9CxnkkvDXZhiht3QWJEpSZo6VpYhNVDABcwDF3Q
KxKEF/qF6HdMh8LlVTTXX/trbFvpGTmsPKeUAoWieftBvw==
-----END CERTIFICATE-----