Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa
File:                     326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa (raw, json)
Hash identifier:          r13dPxkBVRnJ9LFgnamybFzEfdUcVckfUSGQWmPRcGk=
Subject key identifier:   15:34:65:46:26:55:22:2D:82:79:7F:28:E2:A1:74:02:D7:8A:4E:DF
Certificate issuer:       /CN=E48ABA5D969C9C557913482E3064E3BC626018E3
Certificate serial:       7C713C87AD1FD58CAC5C7BF17E3D43BBC51D677F
Authority key identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa
Signing time:             Sun 25 Aug 2024 09:45:46 +0000
ROA not before:           Sun 25 Aug 2024 09:40:46 +0000
ROA not after:            Sun 24 Aug 2025 09:45:46 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:71:3c:87:ad:1f:d5:8c:ac:5c:7b:f1:7e:3d:43:bb:c5:1d:67:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48ABA5D969C9C557913482E3064E3BC626018E3
        Validity
            Not Before: Aug 25 09:40:46 2024 GMT
            Not After : Aug 24 09:45:46 2025 GMT
        Subject: CN=153465462655222D82797F28E2A17402D78A4EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2c:84:ff:f7:58:96:02:72:c3:c7:36:c8:8a:
                    f6:08:3f:d0:6f:e8:1c:d3:3c:3f:bc:0b:11:ee:b2:
                    96:73:c1:e9:29:5a:aa:b1:39:18:2c:9c:c9:f6:47:
                    e8:9b:9a:0f:f8:7f:d9:52:cf:31:ee:53:14:74:25:
                    08:59:3e:1f:e3:d6:cd:a0:58:3e:d1:f1:d0:51:49:
                    ca:c4:f2:53:bf:ca:55:2f:8e:1c:c1:69:d7:c7:f5:
                    c7:34:ae:97:86:f5:0f:e7:6a:c4:bb:c1:96:c2:b1:
                    ca:0d:03:9c:68:4d:0a:cc:96:22:a1:71:05:ac:75:
                    49:55:f1:1b:da:f2:50:71:ab:00:eb:4a:7b:f6:f6:
                    34:22:f6:86:7a:3b:87:bf:3b:fb:66:95:4e:ca:b9:
                    e3:47:1b:e9:7b:07:08:b5:dd:42:24:28:be:c7:9c:
                    ef:65:5b:fd:ef:54:2c:ee:21:e8:9c:06:58:3f:8c:
                    88:42:5e:fc:62:d7:de:c3:82:4b:99:bf:27:fe:7d:
                    3d:33:a2:4f:27:8f:1e:ba:ce:28:91:95:a9:9e:ef:
                    60:f9:3a:9d:7e:fe:ac:24:28:0b:6d:f7:cc:ae:0f:
                    1d:ca:ae:7e:7d:50:dc:0d:ec:f6:a2:c9:90:ae:ac:
                    bd:d1:fd:1c:45:64:02:30:78:d6:90:49:8a:da:45:
                    22:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:65:46:26:55:22:2D:82:79:7F:28:E2:A1:74:02:D7:8A:4E:DF
            X509v3 Authority Key Identifier:
                keyid:E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34342d3434203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d00::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:24:02:1c:2f:39:2e:7a:e0:8b:ab:a2:27:56:1a:29:f9:f1:
         4c:a9:91:02:36:1a:4a:e8:34:9e:e6:7a:b8:97:da:7f:5e:e9:
         52:ef:62:7e:5e:09:42:b1:87:eb:97:08:71:d8:af:03:bb:9f:
         af:80:a4:b6:a4:e4:86:24:5d:8f:b5:61:6b:34:55:f9:ea:63:
         b1:95:d9:bd:73:d9:08:04:9a:ab:22:87:96:59:53:e1:63:81:
         ba:36:a9:bc:4d:1d:54:af:2b:8b:df:18:fc:66:92:4b:2d:18:
         d6:c3:08:1f:bc:7e:d3:11:2b:40:9d:32:cc:c4:9e:ab:d0:4f:
         06:8b:fa:49:ba:c5:9f:e7:16:54:8b:62:d2:45:78:f0:1a:23:
         3d:b0:64:7b:ba:b1:88:1f:22:bd:2a:7b:7b:8c:f4:6b:7e:7a:
         89:24:94:ce:b8:83:5e:ee:96:ff:ce:86:52:6c:6d:a2:72:c9:
         5e:d4:88:08:1c:aa:a7:d5:84:93:b1:86:2e:03:2d:af:64:c0:
         a2:96:4d:70:59:c3:3d:92:57:87:6c:2e:ae:62:13:1c:53:fb:
         de:8d:2e:36:8d:2f:9c:c9:4d:67:86:3f:f0:dd:a7:52:04:94:
         7b:27:21:ac:ab:83:ad:be:5e:b6:19:75:cd:a6:da:33:41:bc:
         e3:ec:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:51 2024 by rpki-client on console-fra.rpki-client.org