Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214660.roa
File:                     AS214660.roa (raw, json)
Hash identifier:          p6s0NBUlvo0l7D0uiqZvrC4eLUnUMBylhJlNYAsMFpI=
Subject key identifier:   FF:8F:2B:05:0C:24:5D:00:C0:6A:1F:82:43:47:05:3F:6A:8F:A2:1D
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       4A2025919B9D3E903BD27311E0A426F8BB8E4B4A
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214660.roa
Signing time:             Sun 27 Oct 2024 14:43:25 +0000
ROA not before:           Sun 27 Oct 2024 14:38:25 +0000
ROA not after:            Sun 26 Oct 2025 14:43:25 +0000
asID:                     214660
IP address blocks:        2a06:1281:b000::/36 maxlen: 48
                          2a0a:6044:6600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:20:25:91:9b:9d:3e:90:3b:d2:73:11:e0:a4:26:f8:bb:8e:4b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Oct 27 14:38:25 2024 GMT
            Not After : Oct 26 14:43:25 2025 GMT
        Subject: CN=FF8F2B050C245D00C06A1F824347053F6A8FA21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:30:18:e1:fb:7d:5d:76:4e:1b:f9:e5:57:
                    aa:b5:5d:e4:e7:d2:51:d5:cf:5d:55:29:0e:0c:34:
                    ef:8b:2f:0e:f3:2e:19:0a:a8:27:47:1d:2c:0f:cf:
                    3e:dc:3e:1a:fc:ac:3c:2f:5c:08:b8:1c:ed:f5:01:
                    20:ec:35:13:cd:c4:11:49:a4:6d:7a:b7:2e:98:26:
                    7f:93:ab:8e:3d:f8:3a:a3:dc:87:40:5c:0e:9f:ed:
                    ca:35:a0:f4:88:02:9a:af:2a:91:84:34:3b:86:b8:
                    71:10:6e:81:2d:ab:1f:9b:c4:c9:0c:be:a6:7e:45:
                    28:e3:50:bb:ac:40:ef:76:69:6f:68:cd:da:3f:21:
                    97:c7:77:b6:e5:dc:9a:48:83:9c:bc:18:26:d6:86:
                    74:f5:e0:d1:ec:a1:cb:12:dd:f3:77:f6:ac:03:db:
                    8e:06:74:6f:56:bb:f2:4e:59:2f:c9:80:83:0f:2b:
                    cd:57:59:ec:4d:0f:42:42:88:4d:f1:3a:93:15:34:
                    66:3b:d7:67:bc:77:9a:43:ae:09:1f:1c:94:35:e4:
                    f9:ee:6f:46:f9:16:dd:14:56:9f:4d:5f:1b:5e:01:
                    9b:74:a0:93:8f:38:8a:2c:35:3e:62:e6:00:5e:23:
                    10:4d:75:d1:0d:a9:28:85:63:b0:11:36:92:4d:0e:
                    10:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:2B:05:0C:24:5D:00:C0:6A:1F:82:43:47:05:3F:6A:8F:A2:1D
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214660.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1281:b000::/36
                  2a0a:6044:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:44:bf:dd:05:9b:cd:31:05:ff:6e:ef:2e:22:77:26:2e:
         1c:30:0c:b8:e4:11:79:a4:cd:cc:65:12:d8:e2:af:d0:db:e5:
         ad:02:6f:79:86:6e:6c:19:80:b3:c4:75:e5:91:48:39:f5:33:
         7a:57:30:df:33:35:61:93:ea:56:1d:23:79:d7:39:54:a1:a4:
         23:c9:48:5f:6a:93:5f:a9:dc:90:b9:7c:99:59:f5:d7:e2:5d:
         21:94:4a:3e:2f:2a:ee:71:66:d1:61:aa:a2:45:d9:9b:78:56:
         71:f3:36:f2:a6:b8:17:2c:7c:50:f7:9f:fe:55:c8:ce:b2:fd:
         d4:2e:6a:77:11:93:45:d4:7a:03:2d:f2:60:96:39:f7:b7:44:
         4d:f7:58:d3:6a:60:6c:8d:63:3e:20:55:1b:1f:e9:50:fa:10:
         cb:70:22:75:04:e1:11:48:49:52:4e:9a:aa:4b:2d:d0:64:09:
         af:fa:8c:4f:a3:f1:39:3f:02:58:b4:18:df:d8:b5:d8:83:45:
         0d:83:21:ed:5a:ba:f8:a4:33:49:ae:59:1c:ef:f9:6d:2c:f7:
         58:60:63:e3:a0:aa:d9:f6:ab:4a:cf:5a:0a:94:6f:f2:8b:00:
         53:dd:5d:25:91:0b:cd:e5:6a:47:1e:90:ca:d2:bc:e7:33:8b:
         74:cc:61:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org