Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/vOEM8kUpzLxopD4TyIsB3N_Y010.roa
File:                     vOEM8kUpzLxopD4TyIsB3N_Y010.roa (raw, json)
Hash identifier:          OAdILdvcEpTr1UueFf/ZDCzT+gCrJkrZoluYVIFmenU=
Subject key identifier:   BC:E1:0C:F2:45:29:CC:BC:68:A4:3E:13:C8:8B:01:DC:DF:D8:D3:5D
Certificate issuer:       /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Certificate serial:       018CC3B732264EB86BAD0419F97845514946
Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/vOEM8kUpzLxopD4TyIsB3N_Y010.roa
Signing time:             Mon 01 Jan 2024 06:30:12 +0000
ROA not before:           Mon 01 Jan 2024 06:30:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        212.46.57.0/24 maxlen: 24
                          2a12:fc0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c3:b7:32:26:4e:b8:6b:ad:04:19:f9:78:45:51:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
        Validity
            Not Before: Jan  1 06:30:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bce10cf24529ccbc68a43e13c88b01dcdfd8d35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:81:de:ad:64:89:61:1a:cc:0a:29:37:9b:5b:
                    0d:b7:50:a9:06:6c:bf:60:aa:1d:1a:fb:56:94:ba:
                    2e:80:7f:91:9b:83:45:3d:e0:29:99:cf:fb:5e:35:
                    c4:78:b8:d8:e1:9c:bc:1f:dd:a8:2f:43:63:20:ff:
                    4e:21:07:16:c4:97:6a:b1:f1:7f:87:e8:ab:cf:de:
                    33:1b:02:48:13:d8:76:f9:bd:2f:33:79:44:dd:8f:
                    ee:ce:10:a1:56:a9:d8:c4:d7:89:3e:45:a9:c8:9c:
                    d3:c3:37:9e:62:48:65:20:e2:1c:44:f2:ee:da:12:
                    02:d4:0b:28:e0:12:af:01:02:ff:99:4c:3b:9c:f8:
                    48:7c:b7:15:7f:da:ad:94:07:e2:8a:81:cf:ca:4a:
                    27:83:13:74:59:57:da:4e:6b:55:fe:93:ab:c4:dd:
                    ef:33:67:d6:2d:d8:09:ae:21:71:e9:b5:14:62:2a:
                    9d:f5:44:41:ad:93:87:3c:4d:d5:52:24:83:da:89:
                    8c:75:6c:e0:1b:d1:48:7b:4c:cb:b0:d5:0d:b2:9b:
                    f8:1d:cf:74:5b:bb:c5:eb:cd:96:a3:5f:07:12:71:
                    f5:58:01:4e:0f:4e:f3:e7:0e:89:eb:2d:fc:3d:32:
                    bb:c1:53:ff:bd:71:c5:19:c9:ea:7a:b1:6d:62:a6:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E1:0C:F2:45:29:CC:BC:68:A4:3E:13:C8:8B:01:DC:DF:D8:D3:5D
            X509v3 Authority Key Identifier:
                keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/vOEM8kUpzLxopD4TyIsB3N_Y010.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.46.57.0/24
                IPv6:
                  2a12:fc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:aa:72:36:4e:0b:3e:7e:6d:5a:77:9e:0b:bf:3c:69:82:72:
         71:6b:1e:a8:dc:3b:61:eb:41:e6:e2:1d:23:c0:c3:85:c0:a9:
         7b:44:c2:e4:50:c5:cf:9e:ec:07:27:d8:f1:c1:ee:e8:88:84:
         59:46:12:2b:3d:6c:75:f5:b6:83:c2:fd:da:91:37:fb:db:08:
         9a:7c:29:aa:ea:f8:de:0a:55:cd:09:f4:69:e8:c1:88:0e:c0:
         8e:9b:49:fd:08:d3:23:14:bd:e6:cf:bc:15:0f:a6:9f:50:4d:
         0f:cf:34:ad:99:10:41:75:2c:fe:01:7b:2e:91:fe:f9:a7:d6:
         a1:02:d8:d1:27:41:e7:9a:82:06:38:0f:93:41:2c:81:33:ab:
         70:37:40:92:4f:6f:5b:64:d2:1c:9c:d7:3b:54:c3:9a:0c:0d:
         b2:38:79:f8:ab:30:12:80:21:39:d1:13:30:a2:43:fb:cc:d0:
         24:6f:49:bc:70:ef:b4:cb:e9:c1:03:01:05:e5:b3:b1:0d:a0:
         a8:53:e8:a1:f0:f1:ef:b2:68:90:3f:38:e9:39:c8:04:f7:54:
         01:b6:eb:0c:e9:5c:b5:0d:a6:20:6b:02:26:8f:91:1a:46:48:
         80:9f:c7:d5:0b:74:d6:18:ae:b2:73:83:02:8d:89:dc:30:4a:
         4f:18:c6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----