Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
File:                     3231322e31382e3131362e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          jxLEsQ5U9DlI0m/Z9kNRLu7kGZcxJhqmeMHKdU/rCos=
Subject key identifier:   5F:60:C3:A9:E0:D7:4A:8D:5B:5D:5F:FA:7F:86:7C:49:FB:8E:9B:39
Certificate issuer:       /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial:       3DF84A15C23784904798EE557A738B87802AC434
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa
Signing time:             Sun 26 Nov 2023 08:03:28 +0000
ROA not before:           Sun 26 Nov 2023 07:58:28 +0000
ROA not after:            Sun 24 Nov 2024 08:03:28 +0000
asID:                     19437
IP address blocks:        212.18.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Oct 2024 13:20:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f8:4a:15:c2:37:84:90:47:98:ee:55:7a:73:8b:87:80:2a:c4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
        Validity
            Not Before: Nov 26 07:58:28 2023 GMT
            Not After : Nov 24 08:03:28 2024 GMT
        Subject: CN=5F60C3A9E0D74A8D5B5D5FFA7F867C49FB8E9B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:a8:36:64:62:d1:3c:18:0b:a7:99:b6:a3:
                    01:fb:6e:35:df:6c:c1:27:6f:cd:b0:86:70:bc:3a:
                    b8:70:28:85:7f:c3:9c:08:99:28:bc:46:03:59:c9:
                    27:9f:5f:a9:72:27:5b:bd:11:c6:14:d4:7e:21:cc:
                    29:1f:72:56:d8:87:32:72:12:a2:0e:da:8a:81:c4:
                    e3:a6:bc:e4:5e:ea:eb:23:84:5c:07:39:f1:4a:02:
                    15:c3:ad:f9:51:31:cb:59:6f:90:46:29:3c:49:7b:
                    57:71:e8:40:8e:d8:6c:bf:e5:5f:8b:2b:f7:13:98:
                    ad:c1:f6:bd:2b:94:00:0c:04:2b:76:ac:bb:62:1e:
                    78:7a:fc:cf:eb:d5:ea:79:cd:80:b9:a5:7a:70:f4:
                    60:d6:35:7d:63:20:ff:9b:cd:eb:b9:fe:e0:44:35:
                    56:e1:eb:ac:3c:ab:b8:29:ce:7d:c1:3d:fe:be:b1:
                    e4:44:21:29:b7:b9:63:2e:91:fe:40:d9:08:dc:45:
                    47:a1:14:64:9a:e4:07:3d:56:11:03:05:19:30:de:
                    e9:a6:32:1c:b1:d8:f5:f7:5f:a2:87:05:16:12:45:
                    7b:e4:06:0f:4c:1a:1a:46:c8:86:9a:2f:dc:5d:48:
                    a9:ba:ba:35:fc:70:91:7c:8e:9c:60:a4:82:75:23:
                    b4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:60:C3:A9:E0:D7:4A:8D:5B:5D:5F:FA:7F:86:7C:49:FB:8E:9B:39
            X509v3 Authority Key Identifier:
                keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/3231322e31382e3131362e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d5:57:7d:95:f5:8b:ec:84:ba:73:8b:e4:dd:f9:5e:80:c6:
         c0:cc:26:2e:0c:9a:31:a3:c3:5d:bc:f9:15:ed:cc:a1:d9:08:
         50:c2:58:88:c9:10:48:3f:30:6a:87:8b:76:1f:67:4c:3b:57:
         24:dd:21:b8:30:fd:02:b5:c1:48:9b:55:9d:cd:df:06:e7:47:
         ce:12:52:93:7e:f6:95:6c:99:55:be:00:35:e4:20:8f:3d:ca:
         62:9a:c9:1c:e7:7b:83:44:fe:fe:40:33:f6:92:49:46:d0:88:
         4a:47:10:08:6b:d5:95:f3:87:1b:5b:4d:52:ed:7e:20:d7:63:
         e4:59:88:5a:1a:01:75:8b:ae:38:a1:8f:23:cd:6b:05:11:e3:
         fe:5d:ee:5d:1f:90:3e:be:c7:9a:ce:34:29:32:4c:01:ca:cc:
         6f:a6:8b:89:6d:96:f4:50:58:e6:8e:cc:15:51:67:ea:a4:28:
         73:8d:0f:f0:9f:84:49:ab:9c:3a:17:b0:5c:7b:41:61:41:30:
         0f:e2:00:d6:fb:f4:27:12:4f:2d:dc:9b:fc:fb:85:18:cd:f1:
         37:ab:93:fa:eb:93:d5:7f:96:ae:72:17:4f:9c:a6:a6:ac:f3:
         58:b9:01:ed:cb:44:29:1b:93:94:7c:b5:c4:26:12:92:5c:84:
         fb:57:0f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 15:19:45 2024 by rpki-client on console-fra.rpki-client.org