Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a63343a3a2f34362d3436203d3e20323134383231.roa
File:                     326130623a346530373a63343a3a2f34362d3436203d3e20323134383231.roa (raw, json)
Hash identifier:          vf4WG0e4faeGYGv/9KEU7E196tfQdPC0KHkXuBpCFfo=
Subject key identifier:   E3:B3:8F:82:7D:AD:E0:9C:EC:6B:88:93:DD:C7:58:99:C2:8F:0B:8C
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       6D89AC65E25BC878C994BC0CB4B97B70C612585F
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a63343a3a2f34362d3436203d3e20323134383231.roa
Signing time:             Fri 04 Oct 2024 06:55:13 +0000
ROA not before:           Fri 04 Oct 2024 06:50:13 +0000
ROA not after:            Fri 03 Oct 2025 06:55:13 +0000
asID:                     214821
IP address blocks:        2a0b:4e07:c4::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:89:ac:65:e2:5b:c8:78:c9:94:bc:0c:b4:b9:7b:70:c6:12:58:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Oct  4 06:50:13 2024 GMT
            Not After : Oct  3 06:55:13 2025 GMT
        Subject: CN=E3B38F827DADE09CEC6B8893DDC75899C28F0B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:30:63:06:f1:aa:04:5b:9c:8c:2b:51:08:b9:
                    f9:04:75:62:0f:3f:e5:17:0d:2f:74:6c:62:b3:71:
                    d8:3b:93:25:27:4b:53:4c:c6:5a:4d:88:f8:59:81:
                    89:75:e0:b4:f7:88:3b:89:10:60:eb:b6:f9:b6:6f:
                    54:09:1b:76:21:2e:8d:c7:10:02:90:c8:2f:e8:67:
                    59:1f:81:2d:a4:04:56:6b:0a:6c:2e:a9:61:f6:3d:
                    e8:0b:13:39:dc:2f:12:66:0c:50:0b:2f:3b:b0:37:
                    52:d7:af:6f:84:a0:fd:36:86:d7:ae:94:04:ec:a7:
                    02:4d:ce:f2:0e:ce:41:fc:4b:34:aa:c9:cc:31:9b:
                    90:07:6e:e4:ec:6f:a3:77:bd:fc:c8:0e:9a:aa:cd:
                    1b:d8:2a:08:4a:48:c9:b1:79:58:80:ee:c0:bd:05:
                    66:46:4c:2f:53:94:d5:2f:d3:51:33:10:e8:d3:72:
                    c2:31:5b:a5:6d:c8:21:19:af:1a:7c:6f:04:db:9a:
                    6d:c3:af:5a:7b:5d:48:b2:d0:98:7f:f5:30:83:6b:
                    a9:25:ad:16:a4:29:33:7e:27:1f:c0:1d:57:ad:d6:
                    c8:95:d3:c3:ab:aa:f5:60:6d:81:bb:2c:7d:24:17:
                    eb:28:8c:43:85:cc:d0:a6:86:c2:76:c1:63:75:e2:
                    b9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B3:8F:82:7D:AD:E0:9C:EC:6B:88:93:DD:C7:58:99:C2:8F:0B:8C
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a63343a3a2f34362d3436203d3e20323134383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:c4::/46

    Signature Algorithm: sha256WithRSAEncryption
         28:f5:72:cf:55:e7:aa:ed:60:6b:09:76:59:3e:36:74:5f:85:
         e3:d5:ea:0d:fb:23:3f:a1:17:12:74:22:0b:41:96:9f:a0:3d:
         d2:c4:7a:61:8c:b0:18:64:c6:f5:b9:ed:ad:c0:1a:07:d5:bb:
         9e:6a:86:6a:5f:cc:23:b9:9f:e2:48:50:61:71:07:b7:2a:f5:
         76:f4:d4:7c:94:a0:28:2b:37:01:62:c3:8f:1a:21:08:86:f6:
         f2:3d:60:a7:2d:a0:6b:12:ed:8e:10:9e:55:50:da:6d:df:21:
         75:75:71:16:c3:02:3e:fa:4d:20:2c:8a:f9:f4:b1:03:08:01:
         a8:b5:eb:fc:fb:d7:31:6d:23:af:75:b6:7d:ea:c3:40:02:5e:
         7e:69:7d:49:51:67:84:93:5b:c3:cd:ed:0d:18:50:fc:64:2c:
         2b:35:11:a2:67:cc:c0:12:9b:73:f9:e2:80:17:e2:f3:9a:45:
         7c:85:15:8d:a5:ed:e2:04:34:56:61:04:b2:10:51:68:f5:77:
         57:a5:a7:59:e9:b6:5f:b9:99:d8:ed:c6:8a:9e:45:83:04:c7:
         6a:73:0a:4c:9f:11:21:31:bd:02:d2:8d:ad:72:81:d3:58:04:
         40:65:16:8a:fb:45:b1:0e:c9:fa:50:e4:21:9f:52:a6:87:78:
         5e:38:c9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:50:28 2024 by rpki-client on console-ams.rpki-client.org