Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/wyIsXGwbuDj7-VgxSZiIesQ7bzQ.roa
File:                     wyIsXGwbuDj7-VgxSZiIesQ7bzQ.roa (raw, json)
Hash identifier:          ni1mcoswsb9Pt8cF6xbEIQoyTkQsHltngMgctmEPs4s=
Subject key identifier:   C3:22:2C:5C:6C:1B:B8:38:FB:F9:58:31:49:98:88:7A:C4:3B:6F:34
Certificate issuer:       /CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
Certificate serial:       018CC8018DC31E6412AC995C56292B0A5EE6
Authority key identifier: 0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/wyIsXGwbuDj7-VgxSZiIesQ7bzQ.roa
Signing time:             Tue 02 Jan 2024 02:29:54 +0000
ROA not before:           Tue 02 Jan 2024 02:29:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     30887
IP address blocks:        2001:67c:4d4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:8d:c3:1e:64:12:ac:99:5c:56:29:2b:0a:5e:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df6e633067c066ae9bef1d3771cc300e4b4d1a7
        Validity
            Not Before: Jan  2 02:29:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c3222c5c6c1bb838fbf958314998887ac43b6f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:f6:6d:ad:c5:aa:e7:8f:8f:88:ee:95:af:
                    f7:49:39:e3:1d:54:5c:55:70:80:a2:0a:01:22:12:
                    b9:0b:d0:74:4c:7b:4c:53:59:24:3e:3d:0c:9b:4b:
                    5b:34:22:be:94:c3:5d:9a:54:02:b0:de:01:a8:44:
                    c0:9a:1e:2f:31:51:ba:04:cd:75:42:0f:cf:86:b4:
                    43:5a:b5:b9:c8:58:f9:8f:15:3f:d2:67:a9:64:30:
                    4a:f4:41:22:9b:39:b4:83:e6:06:9b:5c:43:38:81:
                    f0:9d:73:9d:49:cb:54:f1:29:f9:6c:4a:52:80:ba:
                    11:02:03:2e:ca:b8:d1:22:21:83:ca:ce:fc:41:c9:
                    80:70:e0:b9:40:3f:e8:d5:0e:fb:48:ee:79:e2:09:
                    e9:f6:72:a7:a7:d8:f4:dd:8a:a3:d0:ac:8a:f1:a9:
                    6e:fe:9e:32:9a:4b:96:95:8c:a2:2e:11:34:01:04:
                    46:d1:d5:8d:e4:8e:d6:4d:56:6c:bf:71:e3:2f:87:
                    ed:6b:47:2b:0d:d2:ca:bc:8d:6b:0d:a0:1a:76:43:
                    12:28:2b:89:ec:5e:4b:e9:18:3c:f4:62:73:2c:fd:
                    d0:89:68:4e:87:22:5e:29:31:5e:79:a2:10:bc:72:
                    58:60:6f:95:4e:51:33:f0:f3:b7:b4:26:c7:bb:06:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:22:2C:5C:6C:1B:B8:38:FB:F9:58:31:49:98:88:7A:C4:3B:6F:34
            X509v3 Authority Key Identifier:
                keyid:0D:F6:E6:33:06:7C:06:6A:E9:BE:F1:D3:77:1C:C3:00:E4:B4:D1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfbmMwZ8BmrpvvHTdxzDAOS00ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/wyIsXGwbuDj7-VgxSZiIesQ7bzQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fae1c1-aa18-46aa-83a7-8d1c9d1192b0/1/DfbmMwZ8BmrpvvHTdxzDAOS00ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:4d4::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:ac:ae:fd:b4:1b:b2:99:18:64:4f:84:08:7c:56:69:7c:47:
         65:9b:07:c2:2c:2f:f5:70:cf:43:5c:d0:c4:3c:4a:88:e0:f4:
         87:f3:91:9c:c2:d5:4a:38:fd:5d:5b:c1:07:4e:1d:0b:22:72:
         b1:aa:9d:5a:df:ec:da:68:6f:e0:e1:3d:b7:74:4b:c4:75:ff:
         28:ce:42:a8:f1:3a:75:f2:93:d4:70:76:03:12:6e:6d:e9:c7:
         54:c0:b5:a9:af:a4:73:37:31:f8:99:4c:11:5a:b2:61:a4:ea:
         7c:7a:be:ed:ee:71:24:92:a1:57:c4:5f:39:0b:d8:53:a9:81:
         5b:a5:e2:7d:22:30:d2:da:ce:f5:11:79:0b:a0:5f:5d:4f:f7:
         da:7a:f6:16:9b:16:89:74:b5:7b:5e:73:c6:a7:79:d4:36:50:
         f0:37:e0:c3:57:1a:58:5b:1a:26:f8:a2:08:dc:fa:85:56:fc:
         25:46:84:0f:94:48:76:8c:58:f7:36:38:bb:4b:1e:64:bf:d0:
         86:88:4f:85:ce:36:af:a9:e3:c0:5e:d0:01:36:80:6e:32:74:
         0b:62:72:38:b2:05:c3:a9:05:fa:73:90:4b:f0:67:5c:0f:5b:
         57:4a:4e:e8:58:9e:ad:e5:07:80:0f:74:f4:7b:23:52:9c:8a:
         64:cc:c0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----