Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214930.roa
File:                     AS214930.roa (raw, json)
Hash identifier:          6usHwGu8x0KGR4JAueICdrY5Xxj2CYmgl/xmZw8pwhA=
Subject key identifier:   C7:77:48:D5:E9:EF:05:38:3E:67:AC:5D:39:60:DA:E3:12:CF:1F:08
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       4666AB2341D2B1A408C757CB77E36EEA2E8DB7FE
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214930.roa
Signing time:             Thu 29 Aug 2024 03:41:17 +0000
ROA not before:           Thu 29 Aug 2024 03:36:17 +0000
ROA not after:            Thu 28 Aug 2025 03:41:17 +0000
asID:                     214930
IP address blocks:        2a0a:6044:b700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:66:ab:23:41:d2:b1:a4:08:c7:57:cb:77:e3:6e:ea:2e:8d:b7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 29 03:36:17 2024 GMT
            Not After : Aug 28 03:41:17 2025 GMT
        Subject: CN=C77748D5E9EF05383E67AC5D3960DAE312CF1F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:be:9f:73:5c:e7:33:c5:05:8f:ba:ac:20:a9:
                    29:36:27:24:10:a8:88:bb:0b:f4:14:c6:a5:da:fd:
                    b6:59:c5:fc:d4:64:03:36:95:74:45:2a:4f:78:52:
                    91:b3:88:a0:85:a4:5d:a3:86:0a:34:d0:55:dd:d8:
                    d9:5b:e7:b1:d2:74:90:13:93:a1:34:2d:b7:74:d1:
                    6f:ab:77:4c:8a:32:e3:af:58:e4:c0:a7:04:48:39:
                    fc:97:92:89:69:12:6d:00:a2:58:97:b2:9e:54:21:
                    b8:02:44:15:2d:08:b2:cb:17:7f:e1:6a:b6:e3:0f:
                    e3:bb:47:b0:ae:c8:3b:dd:0b:f4:58:42:fe:ab:94:
                    a5:1f:9d:34:69:ac:03:bb:24:e9:3e:9c:06:b3:af:
                    bf:1c:86:52:79:ef:13:04:c9:6c:ee:8d:75:f6:c9:
                    a4:70:d7:79:28:e3:1a:90:26:2b:89:6a:7b:42:30:
                    7a:43:7b:8a:db:30:cb:54:7e:d9:99:54:61:4c:8f:
                    c6:8c:52:ae:1f:8e:8a:f9:9a:70:01:62:25:e4:79:
                    d4:28:50:c3:5d:b5:99:4f:3a:76:72:ee:4b:bb:e8:
                    d9:f7:4e:6c:34:80:2d:82:f5:88:2d:23:fa:1a:db:
                    b0:a8:ff:c1:2f:96:9f:38:96:3c:4d:0b:9a:f6:f3:
                    17:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:77:48:D5:E9:EF:05:38:3E:67:AC:5D:39:60:DA:E3:12:CF:1F:08
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS214930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b700::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:1d:6d:10:ca:74:bf:57:e7:c8:b7:e0:fe:2b:b0:f4:36:c3:
         69:2b:ce:be:af:6c:48:e4:90:65:5a:78:eb:e1:40:80:dc:9b:
         2e:75:c4:f1:11:98:4d:d5:c6:0a:fe:20:6f:f0:dc:2d:f2:58:
         cc:00:39:ac:75:7a:ac:87:9f:b2:ef:de:12:c0:7e:25:25:33:
         c8:7f:46:a7:ea:04:0a:45:b0:e2:56:04:cf:f9:d1:1b:bc:79:
         f2:bb:8d:e0:2f:b9:a9:99:38:7f:cf:3d:c3:c1:a0:dd:9f:15:
         76:18:4e:4b:0e:87:5b:5d:45:04:de:b1:c0:e4:9a:17:47:83:
         e2:6c:45:90:b3:13:d6:6f:e2:14:d6:67:1b:14:81:fd:91:29:
         14:4e:82:15:53:ae:3d:4b:5c:cc:be:e1:9b:b9:8b:03:0b:eb:
         10:4f:91:41:f6:a5:26:30:02:ac:84:06:34:2f:fa:f7:e6:17:
         e6:23:ff:b5:79:52:77:b7:a9:76:59:a6:df:bb:1b:04:0a:3b:
         56:e0:4b:7f:bb:66:8f:50:47:3a:30:a9:b6:28:4c:b8:f2:6e:
         a2:80:5a:ad:32:ee:81:a8:10:59:c5:12:78:59:f3:f7:f9:c6:
         0a:dd:d6:16:8d:23:ed:02:8d:05:18:97:58:59:e4:a3:aa:f6:
         cb:09:f0:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:09 2024 by rpki-client on console-fra.rpki-client.org