Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215108.roa
File:                     AS215108.roa (raw, json)
Hash identifier:          cmb9AEB20YJOnh9w9NReZboZI0JmfNApLQGmNCNde30=
Subject key identifier:   EA:EC:FF:5E:77:23:87:73:A0:B7:8D:F8:3E:4C:A7:95:18:CF:F9:5B
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       255C0EA20C67BBCB630ED9545DB7C73BFC2F5606
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215108.roa
Signing time:             Thu 29 Aug 2024 03:41:19 +0000
ROA not before:           Thu 29 Aug 2024 03:36:19 +0000
ROA not after:            Thu 28 Aug 2025 03:41:19 +0000
asID:                     215108
IP address blocks:        2a0a:6044:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5c:0e:a2:0c:67:bb:cb:63:0e:d9:54:5d:b7:c7:3b:fc:2f:56:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Aug 29 03:36:19 2024 GMT
            Not After : Aug 28 03:41:19 2025 GMT
        Subject: CN=EAECFF5E77238773A0B78DF83E4CA79518CFF95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f3:a5:d4:d8:11:30:f8:b7:12:cc:61:50:a3:
                    09:eb:64:40:ef:63:e1:bb:f8:60:e9:da:f9:eb:8c:
                    5d:4b:91:af:b1:a8:f2:90:d2:89:72:ff:57:a3:c9:
                    39:d9:b2:f1:91:9c:31:e3:20:13:9c:8e:30:a7:ce:
                    aa:ea:0d:0e:8d:60:25:0a:3a:48:cd:a8:e0:84:88:
                    a2:15:6c:21:f1:85:22:7e:96:11:f0:d2:1b:62:db:
                    6f:2a:3f:d6:52:b3:17:11:d5:6c:87:2e:33:63:b9:
                    75:07:e4:8d:e5:01:4a:a0:21:9d:90:b8:81:52:81:
                    24:13:e1:04:53:77:43:16:92:c1:c7:74:e2:bc:d5:
                    2f:3f:f8:b8:b7:df:e6:fe:62:9b:d4:1a:64:26:f2:
                    85:ce:dc:ad:ae:20:3b:c7:f3:75:53:2b:55:d3:cc:
                    31:b2:c5:72:42:7c:58:08:29:f7:66:ee:b4:01:a1:
                    37:5b:f8:64:98:ff:eb:e5:08:8f:5e:5f:80:bd:6b:
                    c5:bc:d4:94:cc:d6:41:55:44:91:0f:26:6e:92:58:
                    f4:24:0f:d1:9e:d5:e6:cb:84:25:f9:49:07:15:0e:
                    27:a9:37:64:4d:1e:dc:69:a8:87:20:a6:85:c9:09:
                    ea:70:74:5b:d4:d3:bf:85:ce:fd:98:ec:e2:bf:41:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EC:FF:5E:77:23:87:73:A0:B7:8D:F8:3E:4C:A7:95:18:CF:F9:5B
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS215108.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:86:d3:8f:ce:87:5f:3d:16:85:d9:8a:f0:25:21:f3:52:46:
         2e:dc:bf:6c:52:6b:dd:78:51:45:af:a7:57:23:ef:4f:fd:ba:
         5a:00:c7:46:e3:df:2c:56:74:32:33:1a:88:ec:8d:cc:c5:3d:
         9e:a6:5f:19:5b:74:11:18:1d:fe:55:df:8f:0d:5a:24:b5:52:
         6c:ef:71:f4:57:d6:c0:39:78:63:3f:c9:e5:7a:dd:18:48:db:
         2d:9b:a4:ef:b9:8d:44:3e:13:af:fd:4d:3b:40:65:bd:85:8f:
         4b:69:34:71:97:c6:6f:1a:81:8c:9e:bb:14:c2:42:cf:3a:fe:
         85:61:7b:fc:71:b2:80:c1:a9:19:de:31:de:f7:a4:6c:0a:44:
         df:ca:cc:b0:44:07:8d:a1:e6:31:9b:82:fc:67:33:a7:60:31:
         71:f5:a5:9a:8e:35:e7:a0:8a:36:6e:56:82:20:e3:2d:e3:74:
         65:f8:e4:dc:93:69:85:30:1b:c0:e0:40:ef:a0:13:07:c7:c8:
         f7:b5:33:24:1c:b9:61:18:fc:f8:ab:a5:83:83:8e:84:0a:fd:
         67:22:21:cb:19:a8:09:06:d5:62:d3:5e:09:6a:cd:f8:40:a2:
         4e:6f:f1:98:7f:f6:dd:2f:14:ee:8f:a4:1d:7f:cc:81:04:dc:
         0b:70:15:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:16 2024 by rpki-client on console-ams.rpki-client.org