Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa
File:                     326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa (raw, json)
Hash identifier:          Wq0EddndEQwRsWZU5YkqtBwM2UgP834fvVY7Cr7ewow=
Subject key identifier:   EF:8E:60:22:29:C6:9E:5E:5C:88:4E:36:CC:03:05:05:CA:D9:1A:DE
Certificate issuer:       /CN=8D57D440906265349F6DEF98557AC28D0381C47E
Certificate serial:       5554692F02B09C0B8D83F6B6D139B643ECDDFB4B
Authority key identifier: 8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa
Signing time:             Fri 13 Sep 2024 20:09:37 +0000
ROA not before:           Fri 13 Sep 2024 20:04:37 +0000
ROA not after:            Fri 12 Sep 2025 20:09:37 +0000
asID:                     202881
IP address blocks:        2a12:dd47:8250::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Sep 2024 23:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:54:69:2f:02:b0:9c:0b:8d:83:f6:b6:d1:39:b6:43:ec:dd:fb:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57D440906265349F6DEF98557AC28D0381C47E
        Validity
            Not Before: Sep 13 20:04:37 2024 GMT
            Not After : Sep 12 20:09:37 2025 GMT
        Subject: CN=EF8E602229C69E5E5C884E36CC030505CAD91ADE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:96:94:b8:ad:09:29:47:32:c8:a0:1d:17:
                    f4:45:3f:72:58:b5:2e:48:4c:79:c7:83:c0:48:52:
                    15:d5:ef:3f:30:d6:c5:d3:3b:11:c8:db:15:ab:0c:
                    e6:ca:69:d8:1f:6f:2d:37:7a:f5:cf:25:b2:0a:44:
                    74:cc:83:a4:78:0b:c1:02:4f:ba:15:7d:b4:36:f9:
                    9d:db:2c:4c:58:d0:a0:5a:3f:b1:c0:fe:14:b2:1c:
                    8a:99:2d:04:b4:15:c9:00:98:d7:62:68:88:a5:4f:
                    70:4b:3c:8f:b1:40:90:1a:70:26:dc:98:db:2a:2d:
                    f2:d4:5b:41:70:4b:9d:c8:bb:35:c9:0c:9c:0a:23:
                    e9:96:0e:18:e7:1d:9b:bc:62:84:67:ab:05:87:25:
                    76:1e:85:55:cc:db:5c:15:52:f4:38:48:6c:68:8d:
                    81:e3:34:c1:e5:10:cb:98:9d:e4:f1:ab:3c:86:b5:
                    f1:24:d6:dc:42:71:c3:3c:de:fc:7e:09:62:ec:cc:
                    4d:d2:80:b5:20:bb:b4:0f:9d:78:ad:0d:cb:23:77:
                    32:75:46:b6:c3:a3:bd:1f:6b:d0:a5:a9:f6:0e:71:
                    c2:40:4f:c6:dd:c5:be:c5:a3:d3:54:97:8d:12:64:
                    7b:14:1d:69:80:95:2b:35:69:36:c8:eb:9a:31:62:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8E:60:22:29:C6:9E:5E:5C:88:4E:36:CC:03:05:05:CA:D9:1A:DE
            X509v3 Authority Key Identifier:
                keyid:8D:57:D4:40:90:62:65:34:9F:6D:EF:98:55:7A:C2:8D:03:81:C4:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/8D57D440906265349F6DEF98557AC28D0381C47E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/8D57D440906265349F6DEF98557AC28D0381C47E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/4/326131323a646434373a383235303a3a2f34342d3434203d3e20323032383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8250::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:49:ef:0f:15:ca:52:63:a6:c2:86:e8:0e:4c:39:4f:04:3f:
         54:5a:c0:26:11:c7:4c:58:5e:11:e8:13:a3:7d:06:3f:15:c9:
         39:3e:b6:3b:4d:d8:5c:06:db:b1:42:70:5b:38:6b:01:d8:5c:
         0c:f1:b0:60:86:d3:be:15:71:b3:46:4d:f4:fe:af:ce:92:e8:
         61:51:6b:23:5b:ed:23:6e:47:3b:93:6b:c1:50:df:b4:89:68:
         af:1f:1f:ff:47:f0:9a:9e:c2:c0:2f:dc:78:fd:49:ab:3d:3a:
         3e:9a:83:79:25:f2:a7:3c:0f:19:4e:4c:e4:e9:c7:37:ff:16:
         1d:66:e2:68:78:6e:72:04:a2:e6:bc:f0:e7:05:5b:82:4e:f1:
         b7:b3:fd:99:68:fc:f3:07:3b:1c:60:b2:93:2b:2d:86:c4:e5:
         6a:c7:c1:8d:ff:2f:f2:26:ab:e0:79:34:18:29:f9:de:3e:78:
         39:78:65:70:a6:81:60:01:f4:5e:58:51:c8:f8:d9:fd:63:74:
         8f:a7:77:39:1c:82:ac:03:84:50:0e:05:ef:6f:eb:d0:47:41:
         67:a5:81:90:b7:03:b6:57:14:f4:77:b5:85:ec:45:fe:ff:91:
         10:85:f1:aa:25:56:cc:7d:8f:b8:d2:4c:23:d7:0f:6c:87:23:
         9a:2e:bc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 14:04:54 2024 by rpki-client on console-ams.rpki-client.org