Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/326131343a373538303a343030303a3a2f33362d3336203d3e20323135363634.roa
File:                     326131343a373538303a343030303a3a2f33362d3336203d3e20323135363634.roa (raw, json)
Hash identifier:          EroBiARMiR9Tr+DNWHTks5VLbZZVtL2qY5ZcSwNbJUw=
Subject key identifier:   EB:BD:4D:2B:0E:EB:28:40:17:FA:1B:3E:FD:BF:BF:05:17:B5:6E:3C
Certificate issuer:       /CN=5D86A1FAB8C19115720081D417D39278074047FB
Certificate serial:       4360F55CDDDA29D0B1864FC806B8F50CAA7A42D2
Authority key identifier: 5D:86:A1:FA:B8:C1:91:15:72:00:81:D4:17:D3:92:78:07:40:47:FB
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5D86A1FAB8C19115720081D417D39278074047FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/326131343a373538303a343030303a3a2f33362d3336203d3e20323135363634.roa
Signing time:             Thu 22 Aug 2024 15:54:43 +0000
ROA not before:           Thu 22 Aug 2024 15:49:43 +0000
ROA not after:            Thu 21 Aug 2025 15:54:43 +0000
asID:                     215664
IP address blocks:        2a14:7580:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5D86A1FAB8C19115720081D417D39278074047FB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 17:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:60:f5:5c:dd:da:29:d0:b1:86:4f:c8:06:b8:f5:0c:aa:7a:42:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D86A1FAB8C19115720081D417D39278074047FB
        Validity
            Not Before: Aug 22 15:49:43 2024 GMT
            Not After : Aug 21 15:54:43 2025 GMT
        Subject: CN=EBBD4D2B0EEB284017FA1B3EFDBFBF0517B56E3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:03:19:30:f2:8c:25:ba:f6:22:25:9b:88:75:
                    55:01:df:21:17:f0:a1:a9:e9:f9:d8:7b:76:4f:47:
                    f1:8f:c4:92:7b:95:e8:46:d9:fe:93:fb:06:ca:39:
                    a3:fd:02:80:de:4c:64:11:a2:c6:e8:76:a9:92:ed:
                    ab:e4:68:51:57:9e:d4:a1:1d:39:0d:cd:50:e2:13:
                    d7:7c:bf:ac:d2:3f:e9:8b:6c:36:79:27:e3:0f:3d:
                    dc:93:57:21:32:fd:82:2c:3b:4b:14:ca:a2:7c:e1:
                    e2:e6:e7:ba:d5:dd:09:be:30:f1:42:2b:2a:4e:f9:
                    83:6c:0e:22:31:0f:71:8c:cd:0d:ba:d9:fd:ea:6a:
                    46:07:1a:88:27:b0:a0:f5:a3:a9:60:16:7b:67:f3:
                    96:a0:30:9c:f3:bd:a0:73:6c:95:54:17:8c:33:2c:
                    31:91:f6:69:88:31:77:e3:b1:3e:07:56:84:9c:41:
                    44:9c:de:c5:70:9a:bb:e6:4e:b2:5a:25:0c:f0:11:
                    c8:6b:f5:d3:4a:6c:0d:0b:99:ad:84:91:74:7a:01:
                    f0:23:0e:79:9c:98:67:20:92:26:38:95:08:41:c9:
                    d3:66:42:70:60:44:72:f5:04:7b:a6:67:72:06:79:
                    bc:39:45:40:71:75:2e:aa:58:0e:ce:6c:cb:ba:c1:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BD:4D:2B:0E:EB:28:40:17:FA:1B:3E:FD:BF:BF:05:17:B5:6E:3C
            X509v3 Authority Key Identifier:
                keyid:5D:86:A1:FA:B8:C1:91:15:72:00:81:D4:17:D3:92:78:07:40:47:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5D86A1FAB8C19115720081D417D39278074047FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/326131343a373538303a343030303a3a2f33362d3336203d3e20323135363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         ae:b8:2b:ce:4d:30:ae:4a:ec:a3:bf:91:59:5e:6a:01:bb:3b:
         9f:c9:e8:19:bc:13:83:07:e8:ea:aa:c5:13:f4:c9:13:fe:67:
         ae:26:2d:5c:2b:25:ec:1f:16:46:f5:65:5c:4a:fe:83:6a:40:
         ee:3a:4f:61:28:43:1f:94:ca:cd:b8:a5:ec:62:0d:16:de:03:
         6a:8f:a9:3c:f2:b7:f4:b8:9d:28:5a:0c:54:5c:1d:b6:9c:3b:
         16:02:4b:bf:b4:9b:b4:cf:25:54:df:4c:26:42:41:64:be:92:
         cc:11:dd:1c:4a:58:db:fb:85:ad:d1:49:de:43:12:98:bd:f3:
         eb:66:56:16:63:72:9a:c3:ed:5d:12:f5:98:7f:29:3f:b1:5e:
         75:a2:09:95:bf:53:6a:1f:4e:65:75:98:1b:22:de:68:e9:f7:
         eb:df:91:b5:06:ac:97:8d:28:2f:25:c4:ef:0f:6f:09:9b:a2:
         14:83:a0:a1:4d:83:9f:37:2c:6f:e5:02:ba:78:dd:bd:60:37:
         a3:c7:1a:0e:5f:e9:f0:d5:3c:ab:fc:4f:ad:e8:c7:c6:dd:be:
         30:60:4b:e7:0d:b3:cb:c4:36:3c:82:47:60:a6:e9:f8:c8:43:
         90:f0:e9:ce:2a:ba:67:2b:67:8c:40:6c:df:46:ce:38:ca:a8:
         e1:db:48:38
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgIUQ2D1XN3aKdCxhk/IBrj1DKp6QtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ4NkExRkFCOEMxOTExNTcyMDA4MUQ0MTdEMzkyNzgw
NzQwNDdGQjAeFw0yNDA4MjIxNTQ5NDNaFw0yNTA4MjExNTU0NDNaMDMxMTAvBgNV
BAMTKEVCQkQ0RDJCMEVFQjI4NDAxN0ZBMUIzRUZEQkZCRjA1MTdCNTZFM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeAxkw8owluvYiJZuIdVUB3yEX
8KGp6fnYe3ZPR/GPxJJ7lehG2f6T+wbKOaP9AoDeTGQRosbodqmS7avkaFFXntSh
HTkNzVDiE9d8v6zSP+mLbDZ5J+MPPdyTVyEy/YIsO0sUyqJ84eLm57rV3Qm+MPFC
KypO+YNsDiIxD3GMzQ262f3qakYHGognsKD1o6lgFntn85agMJzzvaBzbJVUF4wz
LDGR9mmIMXfjsT4HVoScQUSc3sVwmrvmTrJaJQzwEchr9dNKbA0Lma2EkXR6AfAj
DnmcmGcgkiY4lQhBydNmQnBgRHL1BHumZ3IGebw5RUBxdS6qWA7ObMu6wcb5AgMB
AAGjggKEMIICgDAdBgNVHQ4EFgQU671NKw7rKEAX+hs+/b+/BRe1bjwwHwYDVR0j
BBgwFoAUXYah+rjBkRVyAIHUF9OSeAdAR/swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTg4MjZiY2UtODU0YS00OGM2LTg2YWYtOTNjZjI4Mzkz
NTc2LzEvNUQ4NkExRkFCOEMxOTExNTcyMDA4MUQ0MTdEMzkyNzgwNzQwNDdGQi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81RDg2QTFGQUI4QzE5MTE1NzIwMDgxRDQx
N0QzOTI3ODA3NDA0N0ZCLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS85ODgyNmJjZS04NTRhLTQ4YzYtODZhZi05M2NmMjgzOTM1NzYvMS8zMjYxMzEz
NDNhMzczNTM4MzAzYTM0MzAzMDMwM2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzIz
MTM1MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAOBAIAAjAIAwYEKhR1gEAwDQYJKoZIhvcNAQELBQADggEBAK64
K85NMK5K7KO/kVleagG7O5/J6Bm8E4MH6OqqxRP0yRP+Z64mLVwrJewfFkb1ZVxK
/oNqQO46T2EoQx+Uys24pexiDRbeA2qPqTzyt/S4nShaDFRcHbacOxYCS7+0m7TP
JVTfTCZCQWS+kswR3RxKWNv7ha3RSd5DEpi98+tmVhZjcprD7V0S9Zh/KT+xXnWi
CZW/U2ofTmV1mBsi3mjp9+vfkbUGrJeNKC8lxO8PbwmbohSDoKFNg583LG/lArp4
3b1gN6PHGg5f6fDVPKv8T63ox8bdvjBgS+cNs8vENjyCR2Cm6fjIQ5Dw6c4qumcr
Z4xAbN9GzjjKqOHbSDg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 02:01:30 2024 by rpki-client on console-fra.rpki-client.org