Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/H9fBzHPKvVb-FEpssoCBeNcGHao.roa
File:                     H9fBzHPKvVb-FEpssoCBeNcGHao.roa (raw, json)
Hash identifier:          T0sJ7yqgc9erKLgKasAa/VII2Ns4JIL+dpLCZ6vrIGA=
Subject key identifier:   1F:D7:C1:CC:73:CA:BD:56:FE:14:4A:6C:B2:80:81:78:D7:06:1D:AA
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       018CC3B7326AC9FDC26766291C8453FCFF71
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/H9fBzHPKvVb-FEpssoCBeNcGHao.roa
Signing time:             Mon 01 Jan 2024 06:30:12 +0000
ROA not before:           Mon 01 Jan 2024 06:30:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        2a12:fc0:10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:32:6a:c9:fd:c2:67:66:29:1c:84:53:fc:ff:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jan  1 06:30:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1fd7c1cc73cabd56fe144a6cb2808178d7061daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:43:d4:35:6f:86:a4:e3:46:8a:e3:10:0e:
                    c4:50:4c:eb:b7:e4:c4:4d:0b:fc:db:10:75:e0:66:
                    01:79:6a:d8:59:b2:2e:75:d3:68:4e:70:19:d3:bd:
                    3d:82:c0:3a:a1:f0:ba:a8:18:ca:ca:09:7a:5e:46:
                    3a:71:2b:88:1c:ac:76:99:1d:62:e7:8b:87:dc:f9:
                    9c:76:76:09:15:b8:18:b7:31:b5:b4:cb:f8:f8:e0:
                    11:56:dc:3f:e9:04:06:3c:75:b8:e5:7a:71:d8:0e:
                    1a:e2:04:00:5f:d8:34:9d:fe:0e:28:94:ca:74:6f:
                    0b:30:72:5c:a6:fc:51:f6:10:62:f5:94:59:d2:7f:
                    0f:9f:18:c5:f5:f0:21:25:0c:fe:20:f1:d6:b5:ad:
                    db:61:f0:9b:b2:0d:55:da:1b:1c:b9:42:70:73:d5:
                    f4:ce:f2:61:40:eb:16:71:57:f0:a1:bb:c1:e5:49:
                    ac:7d:6b:08:a6:05:8a:07:d0:a9:d0:87:95:22:da:
                    67:43:57:4c:41:49:ba:a3:3c:30:d9:1f:1c:2b:0c:
                    60:96:95:8a:d6:f3:87:16:ec:e0:7f:cc:d2:5b:ef:
                    c3:fe:48:a7:d9:35:1a:78:dd:22:74:49:b0:cd:b1:
                    28:15:53:6c:a2:9e:fe:ea:c7:82:da:1d:fb:08:f4:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D7:C1:CC:73:CA:BD:56:FE:14:4A:6C:B2:80:81:78:D7:06:1D:AA
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/H9fBzHPKvVb-FEpssoCBeNcGHao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:fc0:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         19:dc:52:98:b2:fe:e3:ea:ed:4f:43:9f:b4:6a:62:aa:7b:5f:
         07:b1:3d:db:7e:48:3b:94:47:98:d7:17:82:44:47:0f:54:83:
         51:16:c1:d5:58:a5:c4:4f:d1:b8:3e:ac:1d:e2:2c:15:b1:1d:
         a7:6f:10:6b:15:65:32:68:1b:c6:2b:1b:4d:b4:4b:73:e2:dd:
         e9:24:99:76:20:40:31:42:8c:db:28:6a:c1:3f:d3:2f:3f:aa:
         b5:47:f9:e7:eb:4b:56:65:09:ad:59:b8:c2:c9:ec:aa:3e:91:
         e7:c2:62:a2:2a:9b:0b:b6:00:9c:ff:d1:9d:e5:f5:cd:0e:91:
         bc:4b:f6:61:f0:08:d0:39:29:8c:f0:6d:da:b3:9a:91:6f:3b:
         ba:85:62:a5:b2:5d:d7:f7:80:15:c4:72:b0:f6:ac:54:b7:0a:
         f2:30:df:eb:6c:1a:bf:c1:72:5c:22:fa:b1:de:b2:a4:5c:5b:
         d0:cf:56:05:51:f5:02:fe:50:01:de:6a:7e:8e:53:0e:33:b8:
         2f:a3:97:1d:99:36:c9:76:5b:d9:2b:79:fd:6c:9d:2c:7a:a8:
         c3:59:3c:e8:d6:99:11:ea:db:42:17:bb:b4:ed:fb:84:6d:61:
         12:65:c7:9b:7d:99:53:72:fd:7f:f3:a0:0f:8e:c4:26:ba:2b:
         e7:b0:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----