Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3a2f34382d3438203d3e20323136333131.roa
File:                     326130623a346530373a3a2f34382d3438203d3e20323136333131.roa (raw, json)
Hash identifier:          VF6csJbOLleAazaGEg/urlMMhvakPQUf+aSKUsG/50A=
Subject key identifier:   FE:4E:39:95:00:65:87:F0:01:F3:9C:5F:F6:D4:11:C9:8A:E8:E5:84
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       69C4394E4CF94A1663FE3E918FBED08ABE06673C
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3a2f34382d3438203d3e20323136333131.roa
Signing time:             Tue 23 Jul 2024 07:21:40 +0000
ROA not before:           Tue 23 Jul 2024 07:16:40 +0000
ROA not after:            Tue 22 Jul 2025 07:21:40 +0000
asID:                     216311
IP address blocks:        2a0b:4e07::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c4:39:4e:4c:f9:4a:16:63:fe:3e:91:8f:be:d0:8a:be:06:67:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Jul 23 07:16:40 2024 GMT
            Not After : Jul 22 07:21:40 2025 GMT
        Subject: CN=FE4E3995006587F001F39C5FF6D411C98AE8E584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:61:51:90:18:41:ed:9d:18:fc:c9:ee:62:
                    fa:77:fa:a4:4d:57:2d:47:7a:aa:f0:7f:7e:73:f2:
                    98:f9:f7:a3:03:07:c7:7a:cf:ae:84:27:9f:c5:7d:
                    cc:fc:53:e0:8d:92:3e:32:8e:ce:4e:95:ce:3e:bf:
                    1f:ad:f3:15:64:42:f5:2f:98:4a:dd:0b:de:5e:e1:
                    68:d9:1a:55:c4:9c:b9:5a:cc:be:14:f5:37:c3:d4:
                    e7:e9:c4:15:9b:a7:16:cd:59:d8:5f:56:b5:97:d7:
                    59:3a:ac:16:9f:e3:21:79:cb:11:60:bf:5d:2c:a2:
                    c1:0e:60:7c:fd:6d:f4:0a:55:c5:66:c3:f3:26:00:
                    7d:16:8d:a4:87:2d:66:b9:1a:c5:13:02:49:b7:98:
                    0d:c1:a9:62:8b:62:a6:0a:ec:cd:ce:b4:03:02:6d:
                    fd:cd:0b:ad:45:23:2f:05:d5:0f:fe:1c:56:76:91:
                    ac:7f:79:21:b3:92:07:2d:fd:2f:c0:95:5b:f8:1c:
                    c9:e1:63:54:2f:35:ba:4e:0f:da:df:67:e0:a8:46:
                    e6:a6:a6:d0:9f:d7:2b:22:9e:f9:59:7b:84:bd:11:
                    76:8e:78:b0:e9:65:66:6d:b7:d1:91:9d:23:4e:55:
                    71:98:d7:c8:36:e3:e0:fe:b5:7e:c7:97:02:33:cf:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4E:39:95:00:65:87:F0:01:F3:9C:5F:F6:D4:11:C9:8A:E8:E5:84
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a3a2f34382d3438203d3e20323136333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:5b:0d:20:43:7b:c8:3a:df:1c:2f:ab:0a:ab:c8:9b:bf:4c:
         9b:fa:00:87:1a:cf:a6:54:2a:a6:c3:42:16:f2:d3:25:aa:33:
         9f:d2:0a:2c:54:16:96:32:65:3e:8d:82:4d:77:30:23:20:0d:
         3a:ee:9c:2b:7c:b5:58:ab:76:a4:2d:d1:13:8a:df:3b:94:1a:
         d4:2a:b6:5a:66:60:bb:94:14:99:5d:0a:19:3f:eb:eb:d2:e4:
         3f:65:33:c8:fd:c3:a7:62:2b:d1:d0:39:49:4f:58:6f:a7:59:
         98:b3:12:7b:b8:ae:ea:ba:45:b4:d5:90:f5:90:4e:69:ca:a0:
         b4:5d:ec:77:66:e4:a3:9a:9d:68:8e:65:dc:9b:f8:94:09:21:
         14:d1:db:30:52:f7:e6:09:ed:b9:79:97:22:5b:0a:f1:2b:d8:
         b4:03:e3:4a:85:31:ed:5d:82:62:95:b1:7f:1a:36:77:d4:d2:
         b0:e1:25:b1:b0:75:8a:97:35:41:9c:4e:ab:b1:a1:9b:8a:a0:
         7b:96:28:70:11:63:b1:17:ba:0a:12:54:8b:f6:83:98:d8:8a:
         9e:bc:5f:72:82:b0:60:af:70:97:ee:67:9d:13:82:22:d1:df:
         d6:5b:61:68:ec:9e:64:04:36:ee:65:a5:86:57:af:76:84:66:
         25:08:e9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:50:28 2024 by rpki-client on console-ams.rpki-client.org