Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214675.roa
File:                     AS214675.roa (raw, json)
Hash identifier:          xx6PQOdyc40PstfJhLNqzqDVAI5W3zC5VFLrmS8ImB4=
Subject key identifier:   B1:3D:0A:4F:13:71:10:A4:3A:69:B1:5A:20:A8:6F:1B:E7:C0:62:38
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       700E3F4E0C8A5013658875EBBF1EDB5AF8A9F6E6
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214675.roa
Signing time:             Fri 23 Aug 2024 08:01:21 +0000
ROA not before:           Fri 23 Aug 2024 07:56:21 +0000
ROA not after:            Fri 22 Aug 2025 08:01:21 +0000
asID:                     214675
IP address blocks:        2a0f:85c1:3fa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:0e:3f:4e:0c:8a:50:13:65:88:75:eb:bf:1e:db:5a:f8:a9:f6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Aug 23 07:56:21 2024 GMT
            Not After : Aug 22 08:01:21 2025 GMT
        Subject: CN=B13D0A4F137110A43A69B15A20A86F1BE7C06238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:49:3d:e5:10:2a:c2:18:ff:df:c8:ad:38:
                    c0:14:6c:40:2b:fc:f1:92:10:84:f6:40:27:04:6a:
                    de:92:c2:6f:cb:36:d3:86:7b:88:98:1b:b1:f7:22:
                    b7:ba:61:de:db:e4:96:34:35:dd:e6:fe:18:02:35:
                    9f:ad:e2:7b:41:89:78:87:a9:6f:a7:38:f4:df:d2:
                    dc:83:a4:0f:9a:8b:98:99:0d:c0:7a:b3:6b:ee:0e:
                    6d:83:f9:b7:8b:56:6f:09:30:46:41:a3:88:89:80:
                    17:05:f4:a1:20:4a:3f:e8:23:ff:49:17:bf:fb:96:
                    ad:0f:1b:18:26:e4:2d:93:c9:55:63:54:d9:fc:ad:
                    dc:42:ba:c0:c0:b0:ca:04:01:0b:6c:8b:db:de:de:
                    4d:d4:f2:56:78:15:03:92:bd:58:9f:52:61:a7:d5:
                    e2:e9:c3:1d:88:44:97:7e:b1:1a:31:e0:99:3c:92:
                    06:5f:67:e2:3b:6b:e7:79:60:2f:4b:61:41:09:ce:
                    d0:c8:16:5f:4c:ec:b9:25:73:dc:50:b9:a9:28:ea:
                    7f:b3:76:d3:44:9f:a3:06:5b:95:91:d7:78:6b:7b:
                    c2:62:7f:7f:9e:33:0e:41:49:b9:9d:86:a3:af:e3:
                    9a:75:49:5a:af:5a:83:53:ee:bd:d6:74:87:df:5a:
                    23:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3D:0A:4F:13:71:10:A4:3A:69:B1:5A:20:A8:6F:1B:E7:C0:62:38
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS214675.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:3fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:92:76:9c:f3:e5:cc:a4:de:16:51:b8:ec:2d:de:56:ff:c8:
         31:aa:13:b8:09:ed:58:90:3e:89:9a:b0:ed:62:e5:42:11:16:
         e9:05:05:85:85:71:78:62:59:85:e9:77:fb:58:0f:a6:5c:b5:
         9f:aa:e8:af:5b:1b:f8:43:d5:30:8c:6f:1c:5e:d3:38:1e:60:
         57:5e:f1:21:19:d3:dd:79:e4:ba:d3:59:5b:90:cf:9e:17:c5:
         dc:13:14:12:cc:a1:f1:01:2c:79:50:6e:95:32:43:ea:b1:59:
         1d:28:54:9c:f1:bb:53:2a:39:ef:60:06:51:66:84:df:34:4a:
         4a:59:3e:6c:62:48:57:3f:84:6a:7c:70:ea:16:b2:a4:62:c7:
         1e:a0:65:d5:74:01:d5:70:07:9e:18:3a:e7:96:ad:db:28:bc:
         4c:26:78:23:9f:f8:97:30:0c:54:9b:1f:27:c5:19:ca:63:2f:
         49:b3:bf:7d:77:49:23:b5:ad:27:b5:65:06:e3:dd:ab:66:7c:
         6d:95:a3:dc:95:4e:a9:5b:74:a2:e9:ef:3e:2c:3e:e4:f6:00:
         25:16:c4:49:5d:52:df:ff:22:87:bb:d0:9f:f2:62:5d:50:2e:
         da:73:e5:a7:82:9e:ab:f4:a9:4c:83:72:33:ca:98:64:d6:40:
         a5:12:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----