Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a64343a3a2f34362d3436203d3e20323135393233.roa
File:                     326130623a346530373a64343a3a2f34362d3436203d3e20323135393233.roa (raw, json)
Hash identifier:          fRS59WRUA8OoAQnEXaLoZ1jxJyFlpQGbI+C8R2ls3io=
Subject key identifier:   10:D4:FE:87:17:0C:0E:F8:6D:74:60:EA:63:6D:CA:30:E4:A0:9D:9D
Certificate issuer:       /CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
Certificate serial:       32A12E55517F6C26DA91ED4C059E0311E5F7FADF
Authority key identifier: D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a64343a3a2f34362d3436203d3e20323135393233.roa
Signing time:             Mon 29 Jul 2024 08:18:33 +0000
ROA not before:           Mon 29 Jul 2024 08:13:33 +0000
ROA not after:            Mon 28 Jul 2025 08:18:33 +0000
asID:                     215923
IP address blocks:        2a0b:4e07:d4::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a1:2e:55:51:7f:6c:26:da:91:ed:4c:05:9e:03:11:e5:f7:fa:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18207466AB0A7D7D1EF3C7CD02E80BED58340BC
        Validity
            Not Before: Jul 29 08:13:33 2024 GMT
            Not After : Jul 28 08:18:33 2025 GMT
        Subject: CN=10D4FE87170C0EF86D7460EA636DCA30E4A09D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3a:3b:9d:38:f3:ed:b6:71:06:df:09:e3:22:
                    75:cc:0e:97:63:65:1c:4a:70:9d:db:ae:ff:13:4c:
                    f2:cc:8a:77:5d:c6:14:10:a4:f5:30:4b:ca:ab:4c:
                    0f:85:9f:cc:20:11:45:c7:ad:75:4c:76:98:0a:34:
                    17:ab:b6:1d:36:40:34:44:26:67:d4:f6:a8:05:a8:
                    14:67:60:5d:d5:32:ea:93:2c:a5:38:95:62:88:cb:
                    57:4f:d7:82:d9:66:9c:56:85:36:46:fc:a4:28:09:
                    73:53:8c:08:c0:bf:07:ed:d8:b0:b4:54:a9:44:94:
                    1d:ff:d9:ca:a6:7e:4b:02:26:f1:55:d3:c6:0e:78:
                    86:0a:48:f4:55:f4:1b:45:89:5a:5a:20:d9:61:c2:
                    46:73:dd:51:69:70:8b:4b:e7:c3:f7:8a:dc:d2:8a:
                    73:62:ff:30:26:fa:3a:38:1b:f9:aa:58:2b:08:56:
                    ab:76:b0:ee:71:99:47:26:55:58:e4:09:6d:4d:82:
                    f3:ed:91:77:f6:f3:26:50:87:c3:93:a7:f0:b6:c7:
                    cb:bc:e1:fb:8d:f7:13:45:45:cc:6a:a2:35:b9:6a:
                    d3:db:88:20:7c:10:70:9d:e1:b4:60:c6:00:31:43:
                    35:9e:7e:75:9f:f9:e5:9a:de:e6:88:3f:f0:da:3c:
                    7a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D4:FE:87:17:0C:0E:F8:6D:74:60:EA:63:6D:CA:30:E4:A0:9D:9D
            X509v3 Authority Key Identifier:
                keyid:D1:82:07:46:6A:B0:A7:D7:D1:EF:3C:7C:D0:2E:80:BE:D5:83:40:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/326130623a346530373a64343a3a2f34362d3436203d3e20323135393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0b:4e07:d4::/46

    Signature Algorithm: sha256WithRSAEncryption
         14:1c:c8:d8:92:61:26:58:d1:b7:b5:52:f5:8a:e8:95:02:1a:
         12:51:34:f3:34:2d:43:1b:37:0d:4d:d6:f8:1d:33:ea:f4:80:
         33:9b:a3:b7:f4:a4:d3:00:c3:03:b5:a1:4e:fc:5e:66:80:6f:
         d5:da:f9:e4:14:20:55:6f:59:e8:34:ca:67:ca:11:74:8a:10:
         38:c9:43:3d:bc:dc:dc:81:b1:c5:b0:c5:3f:27:b6:24:e8:7f:
         d2:27:1e:e1:af:e9:f6:09:dd:42:d8:0a:7e:08:56:03:17:4e:
         18:37:31:18:c6:ff:02:55:95:d2:07:48:d7:49:cb:7b:6d:f7:
         35:f7:44:5e:14:ef:32:d5:2c:66:4b:47:af:96:94:76:e9:76:
         bb:75:df:16:ef:2c:dc:a2:c6:01:6f:08:de:e9:93:68:ef:49:
         ab:64:58:b2:5c:09:19:ba:d3:e3:e9:b1:7d:54:6c:24:d2:e1:
         eb:ff:e7:c7:e7:e6:86:f4:fe:f5:f4:0f:5d:97:b5:3b:3c:c8:
         27:b7:ed:b1:8c:05:a8:91:23:74:67:76:67:b2:02:7e:9e:94:
         07:55:08:ff:84:c0:53:11:b0:24:2e:1e:26:3c:38:3e:b0:4a:
         17:63:2d:fb:53:39:93:cc:28:46:0a:58:d2:d5:dc:85:af:6e:
         ee:14:f3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:50:28 2024 by rpki-client on console-ams.rpki-client.org