Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a646566663a3a2f34382d3438203d3e20313939363839.roa
File:                     326130363a313238333a646566663a3a2f34382d3438203d3e20313939363839.roa (raw, json)
Hash identifier:          t8bSQ75Q9vjs+xZKLNA3lYXK59R3f+ygWylQ0cyNdgE=
Subject key identifier:   14:7B:7B:CA:A9:3B:23:C5:AE:89:46:68:02:0F:28:7E:B5:3E:4E:55
Certificate issuer:       /CN=20595BDBAD09C7D604202305854D1DF14F190959
Certificate serial:       7E724EBDC0BD14EB020C431F8940390D66C1683E
Authority key identifier: 20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a646566663a3a2f34382d3438203d3e20313939363839.roa
Signing time:             Sun 15 Sep 2024 14:36:34 +0000
ROA not before:           Sun 15 Sep 2024 14:31:34 +0000
ROA not after:            Sun 14 Sep 2025 14:36:34 +0000
asID:                     199689
IP address blocks:        2a06:1283:deff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:72:4e:bd:c0:bd:14:eb:02:0c:43:1f:89:40:39:0d:66:c1:68:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20595BDBAD09C7D604202305854D1DF14F190959
        Validity
            Not Before: Sep 15 14:31:34 2024 GMT
            Not After : Sep 14 14:36:34 2025 GMT
        Subject: CN=147B7BCAA93B23C5AE894668020F287EB53E4E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:80:f5:bf:79:a2:90:be:59:45:34:26:f5:db:
                    61:87:a7:53:3d:f0:ea:51:a2:71:8a:47:5c:06:c0:
                    24:f1:f3:f8:d4:17:fd:0e:e0:02:08:ee:fe:5e:8c:
                    f1:42:3b:f1:3c:4b:cf:1b:16:48:1f:8c:70:a5:b5:
                    14:2b:0e:46:f9:a1:5f:f1:7b:d3:64:ed:fa:83:67:
                    53:e2:d6:04:b2:0b:f2:c4:dd:25:45:6f:4c:1c:6e:
                    03:99:71:4b:43:c3:ef:e9:5d:36:2a:f3:13:dd:16:
                    75:5b:45:3d:fd:be:65:be:9b:e3:a0:0f:71:12:ed:
                    6e:70:11:55:35:d3:3b:d7:51:2b:6a:ac:54:91:1a:
                    03:a1:d2:f3:ce:ce:0b:55:09:c3:da:75:d5:88:37:
                    cf:35:f7:29:84:fb:5d:70:3b:f4:86:04:3f:e6:8a:
                    3b:0a:ba:81:bc:aa:0c:56:95:93:70:f4:1c:1c:69:
                    8d:b6:af:f6:f3:f6:b7:2f:69:59:8c:bd:11:ee:6e:
                    42:67:4e:48:6e:d2:8d:e6:0e:d5:39:53:c0:fe:4e:
                    80:75:b7:3e:7e:b0:1e:1e:e3:05:d0:b9:9c:b0:db:
                    71:d0:a4:c1:01:01:76:ee:a9:c8:cb:56:95:f8:7e:
                    68:8a:60:54:6e:d5:41:08:c2:df:8d:ff:55:68:26:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7B:7B:CA:A9:3B:23:C5:AE:89:46:68:02:0F:28:7E:B5:3E:4E:55
            X509v3 Authority Key Identifier:
                keyid:20:59:5B:DB:AD:09:C7:D6:04:20:23:05:85:4D:1D:F1:4F:19:09:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/326130363a313238333a646566663a3a2f34382d3438203d3e20313939363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:deff::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:90:85:df:81:3d:ba:da:b1:09:75:1f:49:f3:90:1d:24:c8:
         c7:92:2b:6a:bb:d7:41:8c:18:ff:92:68:a7:ed:18:7a:85:f1:
         b0:eb:0c:a6:8f:ea:b4:42:a6:c3:28:48:59:93:7e:c9:ed:41:
         37:34:69:bf:c0:58:c5:a0:a1:65:4b:15:cd:e2:94:49:db:19:
         9f:62:5c:13:c2:2b:70:56:41:c9:0e:ff:e9:c8:9b:67:22:24:
         59:63:d6:05:36:92:0e:02:92:5f:65:d4:a4:2f:9b:f7:3b:6e:
         1d:30:1f:e7:72:95:cb:d2:0d:40:59:0f:4c:dc:b0:52:aa:72:
         5b:a2:ff:17:85:db:f0:0f:b0:3f:78:da:4d:b3:11:49:60:16:
         14:95:63:47:2c:e3:fd:b6:cf:77:29:d7:fe:1a:ed:0c:18:a3:
         49:fc:d7:5a:1f:46:d4:98:51:4e:b0:37:1d:ae:62:53:fd:23:
         7a:a8:00:d3:6a:e0:52:73:7e:5f:db:2d:81:73:ea:da:f6:01:
         54:6f:f8:f0:ee:34:40:fd:cd:99:2a:6d:5b:e3:7a:bf:b0:d2:
         55:4f:20:33:0d:42:f5:e4:b1:34:d3:d6:92:c9:04:91:7d:23:
         e4:d8:93:5a:02:b1:a8:3d:ec:ac:04:9b:e8:70:43:a3:06:03:
         9c:90:65:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:45:02 2024 by rpki-client on console-ams.rpki-client.org