Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215516.roa
File:                     AS215516.roa (raw, json)
Hash identifier:          0ByAl7lMQqaJFakng+LetDgy8NNaOlIFZkhrNW0XwVg=
Subject key identifier:   AA:C6:2B:14:38:CF:EA:2C:1D:ED:EB:B2:67:2C:73:DC:25:3D:AD:F7
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       37930940EC8100FDEFE022C96F9BDC96A5C2B052
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215516.roa
Signing time:             Fri 23 Aug 2024 08:01:20 +0000
ROA not before:           Fri 23 Aug 2024 07:56:20 +0000
ROA not after:            Fri 22 Aug 2025 08:01:20 +0000
asID:                     215516
IP address blocks:        2a0f:85c1:366::/48 maxlen: 48
                          2a0f:85c1:380::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:09:40:ec:81:00:fd:ef:e0:22:c9:6f:9b:dc:96:a5:c2:b0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Aug 23 07:56:20 2024 GMT
            Not After : Aug 22 08:01:20 2025 GMT
        Subject: CN=AAC62B1438CFEA2C1DEDEBB2672C73DC253DADF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:3a:30:e1:90:08:68:39:cb:94:6a:f4:69:
                    eb:76:92:b0:6d:a2:a9:73:29:04:e7:af:b2:c1:8e:
                    b9:77:16:00:1d:98:4e:96:f3:e6:1a:8e:f2:07:50:
                    98:4e:40:45:bb:6c:88:3f:4e:e4:be:64:cb:76:e1:
                    03:c0:5c:e5:01:c1:7e:ed:b3:7d:a9:5a:30:b1:37:
                    d1:04:d6:c8:78:7d:fd:e9:8f:33:50:66:e3:a9:ac:
                    f8:ad:65:38:49:6d:65:de:c9:1a:4d:50:c9:35:b2:
                    c3:d4:04:48:56:48:5b:9f:59:10:fc:7f:29:65:c3:
                    58:09:86:7c:6a:7a:0e:24:01:35:f4:6f:46:f7:e8:
                    99:9f:f6:0a:bb:13:28:29:81:99:62:e2:ca:15:cf:
                    49:40:42:8b:9a:34:b7:2f:bd:74:39:37:89:61:07:
                    82:d5:3b:5f:d1:21:2e:8f:16:85:56:64:41:26:90:
                    5e:fb:f4:fb:ed:ba:e6:83:68:a2:e6:c7:0a:f2:64:
                    4e:a3:aa:fc:13:a2:25:4a:3e:e8:44:78:c3:63:51:
                    13:3e:e7:66:26:87:ab:2a:2d:10:e3:85:0b:c7:3c:
                    e6:93:d1:cf:42:8e:01:27:41:59:aa:4a:9f:60:dc:
                    65:1e:5f:78:f3:32:c9:4d:76:ab:95:cb:a6:6e:70:
                    8c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C6:2B:14:38:CF:EA:2C:1D:ED:EB:B2:67:2C:73:DC:25:3D:AD:F7
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215516.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:366::/48
                  2a0f:85c1:380::/44

    Signature Algorithm: sha256WithRSAEncryption
         c0:9a:44:25:29:d2:1f:25:2d:d8:d5:d8:e4:c2:86:3d:e9:a0:
         12:b6:9d:a5:97:64:1f:39:1c:9c:ca:c2:6e:8e:18:ba:48:29:
         b2:0d:63:25:e0:14:56:bb:24:85:da:c0:87:d0:3b:d9:9e:0c:
         8e:4f:5e:cd:29:98:74:64:ba:c4:73:0c:c6:34:53:c2:2d:14:
         a3:05:a3:9e:9d:a0:3b:c4:4b:5a:c9:46:ef:52:4c:10:9a:e7:
         bf:a7:3b:5e:60:91:e8:d6:e1:cc:95:af:6e:d5:83:a2:34:08:
         b5:64:f6:97:33:67:80:f8:53:b6:76:56:4f:3a:5c:cb:ea:08:
         e2:ea:db:5e:14:2d:92:0e:e2:8d:14:d7:58:97:9f:c4:78:ec:
         4d:3c:c7:5a:99:9e:83:5e:8d:d4:59:e5:65:95:ec:2e:17:04:
         b7:01:34:9a:4e:f8:79:20:06:c1:2c:66:18:cc:f8:e1:36:f8:
         b3:3c:e6:75:d6:b4:3f:36:31:40:b9:6e:3a:36:df:1b:9e:ca:
         62:ab:c0:7d:24:29:c3:d0:39:f5:14:0e:33:80:cc:19:9d:55:
         13:9f:9d:95:df:0e:fb:34:9b:54:73:2b:e1:1e:bf:51:80:89:
         99:c8:e2:de:73:91:9d:a0:c7:4d:32:3c:88:76:9b:f4:bf:b3:
         5d:d9:74:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:20:22 2024 by rpki-client on console-fra.rpki-client.org