Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa
File:                     326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          4vV1NPLNtJ5Sem5fwMjyfRCUw2Hm0zuf9K0F0M5JmTU=
Subject key identifier:   71:0F:5B:1D:5E:11:34:4C:FE:2D:B6:F7:F3:73:14:89:76:E0:BB:88
Certificate issuer:       /CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
Certificate serial:       0C2C633E6034EF2E705BE1E4AEA8D1E79B995C9D
Authority key identifier: 3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa
Signing time:             Sun 28 Jul 2024 10:46:31 +0000
ROA not before:           Sun 28 Jul 2024 10:41:31 +0000
ROA not after:            Sun 27 Jul 2025 10:46:31 +0000
asID:                     54681
IP address blocks:        2a14:6f44:dead::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2c:63:3e:60:34:ef:2e:70:5b:e1:e4:ae:a8:d1:e7:9b:99:5c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eeebb946a8d21d4083c93dc09cee557bb2ac32e
        Validity
            Not Before: Jul 28 10:41:31 2024 GMT
            Not After : Jul 27 10:46:31 2025 GMT
        Subject: CN=710F5B1D5E11344CFE2DB6F7F373148976E0BB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bf:5a:71:23:5f:3e:a8:50:84:59:3a:aa:77:
                    2b:7d:47:46:28:09:75:0d:2d:e7:f7:86:50:9d:b0:
                    94:0c:a6:9a:6f:68:76:71:aa:ae:4e:5b:8c:36:f0:
                    dc:40:e6:30:35:71:6a:65:8e:17:33:ff:1e:4a:dc:
                    e4:af:8e:5f:61:8d:0f:87:8c:d5:ac:45:bf:14:ce:
                    d8:e7:b3:c5:16:b1:e5:24:70:ca:ab:34:43:d2:26:
                    76:57:31:01:4b:c1:87:39:69:27:5d:42:cf:b4:b2:
                    1d:1a:bc:4d:86:38:81:a1:c9:93:95:4c:be:ed:79:
                    40:42:6a:cb:fa:5a:08:a1:9f:e6:bb:c7:08:cc:1a:
                    fb:37:e1:c7:0e:99:e5:9f:32:54:40:95:6d:4e:35:
                    75:d8:6c:ad:2d:1b:8d:7b:2b:ad:ed:4d:40:04:4e:
                    a9:32:d2:2a:d7:94:16:6c:7e:63:df:8c:b3:5f:76:
                    27:96:69:5a:63:3d:11:ad:15:7a:9d:6c:ee:38:e6:
                    eb:33:96:b8:60:54:7f:08:22:48:48:b6:91:78:8e:
                    fb:e8:53:da:6f:5f:8f:b7:89:01:ca:3f:69:9e:cc:
                    75:58:3b:8d:c0:a5:70:ec:16:cc:16:df:95:88:d8:
                    03:2e:a1:5b:05:1a:b3:ba:78:a3:3f:27:8c:76:02:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:5B:1D:5E:11:34:4C:FE:2D:B6:F7:F3:73:14:89:76:E0:BB:88
            X509v3 Authority Key Identifier:
                keyid:3E:EE:BB:94:6A:8D:21:D4:08:3C:93:DC:09:CE:E5:57:BB:2A:C3:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/326131343a366634343a646561643a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f44:dead::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:dc:92:48:32:6d:9c:fe:f4:88:da:73:55:0b:d1:cb:84:50:
         8f:f7:22:04:78:08:f2:a2:b4:38:4b:db:01:c3:36:7a:e2:b0:
         74:3d:52:37:22:49:d2:65:45:86:4e:33:77:5f:c1:df:d3:53:
         cd:17:92:c2:64:29:a5:ea:fc:59:26:3d:85:e8:34:a6:f2:f1:
         9d:6a:d8:a7:c7:3f:01:dd:ae:30:0f:ec:ae:1d:41:11:99:41:
         26:14:4a:57:64:b2:13:02:ef:0f:e6:e9:7f:d8:67:1f:46:29:
         19:82:04:28:65:77:32:22:ff:71:c8:96:8d:f5:96:1b:af:00:
         ff:d0:58:95:c3:5f:58:25:98:54:c4:a7:dd:b5:c5:47:09:df:
         4a:3d:06:33:1e:83:b9:4c:dd:ab:84:fd:ab:60:1c:a5:8f:f9:
         a5:a0:d9:7e:2c:9d:a3:f4:58:52:1f:e9:65:25:d8:fd:a1:31:
         71:0a:81:40:46:a8:82:2e:78:4b:9e:36:65:44:c6:bd:59:a2:
         42:61:bd:3a:83:0b:f3:e7:f5:52:5c:1f:75:0a:8f:58:ee:76:
         cd:63:cc:e4:c9:17:0e:9b:6b:3f:bb:50:bc:82:5e:f4:d3:6d:
         7c:22:17:db:57:d6:87:19:55:95:e5:65:2b:7c:1e:e2:20:3c:
         5e:39:ef:75
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIUDCxjPmA07y5wW+HkrqjR55uZXJ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2VlZWJiOTQ2YThkMjFkNDA4M2M5M2RjMDljZWU1NTdi
YjJhYzMyZTAeFw0yNDA3MjgxMDQxMzFaFw0yNTA3MjcxMDQ2MzFaMDMxMTAvBgNV
BAMTKDcxMEY1QjFENUUxMTM0NENGRTJEQjZGN0YzNzMxNDg5NzZFMEJCODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBv1pxI18+qFCEWTqqdyt9R0Yo
CXUNLef3hlCdsJQMpppvaHZxqq5OW4w28NxA5jA1cWpljhcz/x5K3OSvjl9hjQ+H
jNWsRb8Uztjns8UWseUkcMqrNEPSJnZXMQFLwYc5aSddQs+0sh0avE2GOIGhyZOV
TL7teUBCasv6Wgihn+a7xwjMGvs34ccOmeWfMlRAlW1ONXXYbK0tG417K63tTUAE
Tqky0irXlBZsfmPfjLNfdieWaVpjPRGtFXqdbO445uszlrhgVH8IIkhItpF4jvvo
U9pvX4+3iQHKP2mezHVYO43ApXDsFswW35WI2AMuoVsFGrO6eKM/J4x2Anr3AgMB
AAGjggJIMIICRDAdBgNVHQ4EFgQUcQ9bHV4RNEz+Lbb383MUiXbgu4gwHwYDVR0j
BBgwFoAUPu67lGqNIdQIPJPcCc7lV7sqwy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5
YjNkLzQvM0VFRUJCOTQ2QThEMjFENDA4M0M5M0RDMDlDRUU1NTdCQjJBQzMyRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1B1NjdsR3FOSWRRSVBKUGNDYzdsVjdz
cXd5NC5jZXIwgbUGCCsGAQUFBwELBIGoMIGlMIGiBggrBgEFBQcwC4aBlXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODkt
ZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMzI2MTMxMzQzYTM2NjYzNDM0
M2E2NDY1NjE2NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzQzNjM4MzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAqFG9E3q0wDQYJKoZIhvcNAQELBQADggEBACrckkgybZz+9Ijac1UL
0cuEUI/3IgR4CPKitDhL2wHDNnrisHQ9UjciSdJlRYZOM3dfwd/TU80XksJkKaXq
/FkmPYXoNKby8Z1q2KfHPwHdrjAP7K4dQRGZQSYUSldkshMC7w/m6X/YZx9GKRmC
BChldzIi/3HIlo31lhuvAP/QWJXDX1glmFTEp921xUcJ30o9BjMeg7lM3auE/atg
HKWP+aWg2X4snaP0WFIf6WUl2P2hMXEKgUBGqIIueEueNmVExr1ZokJhvTqDC/Pn
9VJcH3UKj1juds1jzOTJFw6baz+7ULyCXvTTbXwiF9tX1ocZVZXlZSt8HuIgPF45
73U=
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:24:01 2024 by rpki-client on console-fra.rpki-client.org