Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa
File:                     326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (raw, json)
Hash identifier:          tezZfjQIJSEoaPdienMyz3PTigWBtWV225R5RVQQguw=
Subject key identifier:   DE:D6:35:AE:5A:0D:3D:DD:08:73:A5:53:E9:8C:5C:A3:A3:CB:75:75
Certificate issuer:       /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
Certificate serial:       41B3040C30FEC3D01C93A862ED705BF929931448
Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa
Signing time:             Thu 08 Aug 2024 17:30:54 +0000
ROA not before:           Thu 08 Aug 2024 17:25:54 +0000
ROA not after:            Thu 07 Aug 2025 17:30:54 +0000
asID:                     204291
IP address blocks:        2a13:9644:4000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b3:04:0c:30:fe:c3:d0:1c:93:a8:62:ed:70:5b:f9:29:93:14:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C
        Validity
            Not Before: Aug  8 17:25:54 2024 GMT
            Not After : Aug  7 17:30:54 2025 GMT
        Subject: CN=DED635AE5A0D3DDD0873A553E98C5CA3A3CB7575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:f5:4c:47:7d:4d:25:e4:3f:75:92:8d:02:
                    48:70:f1:c0:d8:68:c4:68:7d:24:1f:f6:21:98:7b:
                    f4:ad:d2:c3:3f:3c:2c:31:5a:f8:50:7a:a9:fd:3f:
                    cf:27:af:91:62:59:b7:f8:ea:07:1e:dc:ea:40:cc:
                    c8:b4:ac:62:37:0c:3c:a6:24:0f:01:e8:1d:ac:c8:
                    78:fe:a6:85:eb:dd:0c:e4:4a:76:ff:ee:f6:31:4c:
                    23:0d:b7:03:c1:51:6e:81:78:f2:51:38:0e:ce:f1:
                    10:e9:3e:44:97:d0:28:81:d5:d6:8b:00:00:0f:38:
                    18:b8:a0:df:b8:38:00:f7:25:4d:ed:1d:17:7d:2a:
                    dd:4f:93:ea:a7:1d:1b:2d:e2:23:91:f8:68:0e:94:
                    0d:9e:f6:3b:40:16:1a:a2:6d:c7:68:03:08:af:45:
                    61:43:5a:e0:5b:16:0c:5c:c7:9a:d5:d4:75:ae:2c:
                    e5:4f:cb:5f:42:ce:c7:d8:1d:93:59:b6:53:7e:6d:
                    b1:85:8e:43:39:1e:76:c2:dd:af:a2:7d:91:ed:ef:
                    4c:d2:e1:75:ec:83:df:af:10:b4:0b:d9:4e:55:4d:
                    c3:dd:9c:f4:08:86:32:43:ea:fb:b6:56:3e:ad:cb:
                    a4:60:cb:5d:b9:bc:8f:9d:61:cd:b6:43:03:2a:47:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D6:35:AE:5A:0D:3D:DD:08:73:A5:53:E9:8C:5C:A3:A3:CB:75:75
            X509v3 Authority Key Identifier:
                keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:9644:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         96:33:f6:51:55:8e:33:1f:6c:21:11:b5:f9:c2:8f:24:7c:0e:
         0d:96:c5:22:7d:5e:ff:86:93:fb:af:8d:a0:40:2d:f7:cc:40:
         70:9f:c1:90:21:37:44:a9:79:a0:2e:72:9b:8a:43:fa:99:44:
         b4:ad:b1:bc:65:58:f4:2d:5e:c2:23:45:49:75:13:5e:8e:9c:
         73:91:f1:c3:97:8b:0d:f0:0c:07:a8:57:56:7a:03:b8:f8:5f:
         c8:78:e6:de:fd:1c:cf:12:5e:f1:0d:b6:68:5f:4f:48:b5:00:
         76:49:96:c6:78:16:82:70:b5:46:3f:e4:c6:bb:71:e5:2e:32:
         3a:96:2b:0f:af:53:b0:ed:b2:27:f2:50:7e:47:7a:db:11:e3:
         19:27:4e:a1:18:0b:c7:c3:60:b6:65:b9:7d:17:35:03:19:98:
         d5:e5:fb:81:44:7f:00:af:b2:58:fa:a0:b0:f7:64:e1:f5:ba:
         8d:71:d3:3f:ff:64:28:05:e5:34:88:fd:7f:c3:30:1c:6a:d3:
         9c:46:c0:e3:c4:b9:59:f5:c3:07:bf:f4:35:5b:ea:3f:04:ab:
         1e:0c:a2:c7:d6:31:d5:33:50:86:36:f1:83:7d:df:55:0b:b7:
         b7:14:bf:03:c0:71:83:7f:4d:c6:dd:5c:0d:7a:b2:ce:ef:56:
         46:00:e9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org