Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131343a3a2f34382d3438203d3e20323135313437.roa
File:                     326130363a313238333a633131343a3a2f34382d3438203d3e20323135313437.roa (raw, json)
Hash identifier:          5PlpPYYlZjLSmilHrnDVMT9seTkK0axkvwKTA6gQyQI=
Subject key identifier:   75:0E:F8:29:66:C4:AF:9A:F0:47:56:2C:F0:90:06:6A:76:A4:8B:D8
Certificate issuer:       /CN=B6366F3DD14AC5399103961C30642E6779892C6C
Certificate serial:       017D8733A569E60ED7A3BC9568266B4C52300D1F
Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131343a3a2f34382d3438203d3e20323135313437.roa
Signing time:             Mon 14 Oct 2024 08:59:49 +0000
ROA not before:           Mon 14 Oct 2024 08:54:49 +0000
ROA not after:            Mon 13 Oct 2025 08:59:49 +0000
asID:                     215147
IP address blocks:        2a06:1283:c114::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:7d:87:33:a5:69:e6:0e:d7:a3:bc:95:68:26:6b:4c:52:30:0d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C
        Validity
            Not Before: Oct 14 08:54:49 2024 GMT
            Not After : Oct 13 08:59:49 2025 GMT
        Subject: CN=750EF82966C4AF9AF047562CF090066A76A48BD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:a7:bd:be:bf:2a:fd:04:9d:45:8b:75:a6:
                    f0:b6:b8:3f:11:3f:4c:c9:8a:12:f9:7a:87:f4:af:
                    8e:f7:4b:32:0b:64:6c:97:ea:ed:66:d4:90:48:eb:
                    1a:3c:ab:e4:da:4d:2f:fb:52:d7:83:d7:ce:a8:21:
                    31:66:03:f6:6f:04:cc:3c:21:6d:16:ff:3b:64:d1:
                    5f:8d:6b:91:40:75:e8:61:36:09:7e:4f:bb:50:a5:
                    16:01:54:43:7e:aa:68:0e:77:f3:04:6f:10:f1:05:
                    57:e2:55:2e:24:27:9b:2e:d1:dd:37:41:5a:77:8b:
                    03:9d:66:1d:b6:31:f1:47:a4:78:0d:b9:ac:4e:36:
                    0d:4c:75:e0:76:1c:51:06:c5:e6:42:02:97:64:59:
                    92:d9:ca:cf:4a:a0:94:da:43:5e:f5:24:42:3e:4f:
                    78:d7:08:00:fc:63:7b:08:92:eb:ba:f5:f6:96:71:
                    cb:f5:c8:a1:1d:9a:db:e8:cc:b3:72:4c:b3:fb:05:
                    b6:9b:ca:28:9f:6b:d6:08:16:90:1b:96:ca:17:f3:
                    b2:06:a0:1c:48:a1:92:8a:92:2c:9c:da:77:91:43:
                    9a:ad:97:04:f9:d9:46:5a:b3:a0:8e:b3:47:f8:05:
                    6c:29:73:b4:1c:07:f5:da:f5:59:37:3a:fb:63:83:
                    85:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:0E:F8:29:66:C4:AF:9A:F0:47:56:2C:F0:90:06:6A:76:A4:8B:D8
            X509v3 Authority Key Identifier:
                keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/326130363a313238333a633131343a3a2f34382d3438203d3e20323135313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1283:c114::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:e5:43:54:11:b1:70:ba:a3:e1:f1:c8:bc:ea:cf:22:15:
         15:20:88:94:22:57:f2:38:75:9d:15:e9:db:6e:29:67:e4:b2:
         98:27:67:e8:c8:a6:25:94:70:50:6e:4f:bd:f3:2f:77:5d:f3:
         74:a8:9b:81:08:a6:ed:92:fc:41:66:38:9f:73:95:5a:8a:d0:
         79:7a:cf:00:09:91:9b:a9:6f:fa:ff:0b:da:33:bf:9c:cf:0a:
         c5:5a:67:08:12:d3:b4:58:af:e4:db:a5:41:cb:81:10:a5:5b:
         bc:ea:a6:2a:3a:5b:06:09:41:18:6a:24:48:85:9a:ce:cb:b2:
         55:4a:5d:32:b1:fe:0e:3a:99:9d:40:79:94:f4:9b:b2:f7:92:
         ad:26:f9:f7:a4:88:10:e2:93:94:e6:5c:28:87:2f:e1:ff:9f:
         7a:54:96:fc:f2:71:ee:18:87:9a:63:c8:83:cb:1d:56:bd:2d:
         01:a6:60:eb:a8:f6:35:12:49:08:b6:ed:03:99:1a:1f:2e:2e:
         ab:3c:87:89:a6:a7:7d:4b:93:7e:f6:79:cb:89:e0:a3:f3:de:
         f4:90:bf:c4:ff:6d:d2:ef:75:3c:6e:f8:fd:49:8f:e5:be:22:
         5f:04:0e:fb:0a:fa:44:61:7f:6b:92:ca:e5:08:ab:26:9d:0b:
         16:78:98:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:50 2024 by rpki-client on console-fra.rpki-client.org