Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS212184.roa
File:                     AS212184.roa (raw, json)
Hash identifier:          DZa7C9myiz6J7T4Cn9c6qlYlTpgrsfv/+CwoL6q6P8o=
Subject key identifier:   27:2D:DD:92:A4:03:E4:F6:E5:4F:2F:C4:0B:FB:2A:C9:26:4C:E7:EE
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       0657A5E9C5BE543B0CADDA29DBC4E90571CD5C28
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS212184.roa
Signing time:             Thu 29 Aug 2024 03:41:15 +0000
ROA not before:           Thu 29 Aug 2024 03:36:15 +0000
ROA not after:            Thu 28 Aug 2025 03:41:15 +0000
asID:                     212184
IP address blocks:        2a0a:6044:b400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:57:a5:e9:c5:be:54:3b:0c:ad:da:29:db:c4:e9:05:71:cd:5c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 29 03:36:15 2024 GMT
            Not After : Aug 28 03:41:15 2025 GMT
        Subject: CN=272DDD92A403E4F6E54F2FC40BFB2AC9264CE7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:02:25:69:74:86:26:f1:14:4f:cb:fa:e4:
                    6c:e7:e2:84:66:9a:11:66:ea:a0:61:e2:a0:77:0a:
                    ea:69:cb:20:0c:07:58:1a:55:f0:60:5c:8f:e0:55:
                    cf:34:2b:3b:30:1a:ec:b6:b7:08:d3:ab:13:b2:97:
                    62:e0:9f:aa:2f:9b:f2:7c:93:20:28:35:90:ed:b1:
                    aa:dd:7f:a6:25:5c:e7:c1:df:13:cb:10:cf:7a:46:
                    ec:37:95:b3:f4:fb:d2:d5:6c:89:6a:56:cf:72:3d:
                    0e:d7:9a:7c:04:1e:ee:96:74:0c:90:0e:18:db:dd:
                    65:74:1b:61:cd:ba:e0:c3:9c:f9:b6:82:c1:f2:10:
                    69:e5:42:f9:1f:6b:c5:3f:90:37:e9:a0:a3:eb:8d:
                    fb:00:26:24:51:9b:da:8f:ad:a4:5c:df:8d:32:8e:
                    b0:5b:31:69:44:b9:9e:e5:25:ae:93:15:01:03:08:
                    7d:fb:96:d9:90:a6:4d:2a:ef:65:22:d2:a0:71:18:
                    5d:bf:03:d8:91:5c:6b:cd:ca:a5:dc:bc:55:fa:f7:
                    ff:a1:77:a2:12:42:63:21:5b:fe:a5:dd:04:7b:b4:
                    00:eb:16:cc:cf:61:23:18:5e:8c:de:38:48:6b:26:
                    8c:52:a6:b8:aa:d6:23:df:20:fc:8f:7f:e4:0c:48:
                    9c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2D:DD:92:A4:03:E4:F6:E5:4F:2F:C4:0B:FB:2A:C9:26:4C:E7:EE
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS212184.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b400::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:db:60:a5:8d:85:fb:27:7f:75:a3:10:a7:cc:0d:ff:89:f4:
         37:2b:3b:4d:2d:15:b2:0e:2b:03:df:46:2c:cb:40:ac:57:ac:
         39:0e:18:4a:d3:1a:ff:ea:e8:3f:63:5a:70:4f:a7:fb:2a:4b:
         9a:90:64:3e:9c:43:72:7a:da:9e:33:3b:14:06:98:97:72:35:
         20:58:2a:b7:6e:94:84:8b:f7:cd:d3:8f:e7:b1:68:47:cf:bd:
         08:2e:df:61:3c:29:39:3b:5d:7e:19:ab:22:8e:e8:95:e6:32:
         5c:66:09:c3:c6:98:8d:28:f1:77:d7:6c:12:ae:bc:ff:2f:49:
         d1:b7:3a:6f:10:33:da:1a:07:3f:ea:f7:80:07:75:7b:86:50:
         4f:ee:5d:b8:7a:9e:1b:91:1f:89:64:ab:96:92:13:21:8f:a1:
         80:cb:f2:0b:24:c7:fd:cb:a8:af:a0:84:fc:93:36:12:7b:0b:
         5e:e2:b0:23:69:36:6f:df:56:03:c8:a7:ad:ac:04:42:3c:59:
         df:a5:73:e7:38:85:e4:37:b6:af:43:d3:14:38:ea:de:96:4e:
         f8:21:5b:93:96:ef:35:2f:83:59:7c:93:fb:bc:1c:dd:a0:15:
         b2:c2:a4:9e:7c:84:3a:a2:76:7f:ba:3f:28:23:4b:30:aa:5d:
         bd:43:9a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:09 2024 by rpki-client on console-fra.rpki-client.org