Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34382d3438203d3e20323134353130.roa
File:                     326130613a363034343a376430303a3a2f34382d3438203d3e20323134353130.roa (raw, json)
Hash identifier:          0KgEt5dxk6TLiVBAdeFh7c2ht1AiCvtZKsON7AMnLGY=
Subject key identifier:   05:D6:CE:2D:78:FF:93:11:A3:BD:B7:1B:08:50:1D:89:22:1B:C9:D0
Certificate issuer:       /CN=E48ABA5D969C9C557913482E3064E3BC626018E3
Certificate serial:       40FFFF00F728F8005966ED8A6E490B9557587953
Authority key identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34382d3438203d3e20323134353130.roa
Signing time:             Sun 25 Aug 2024 09:46:00 +0000
ROA not before:           Sun 25 Aug 2024 09:41:00 +0000
ROA not after:            Sun 24 Aug 2025 09:46:00 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ff:ff:00:f7:28:f8:00:59:66:ed:8a:6e:49:0b:95:57:58:79:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48ABA5D969C9C557913482E3064E3BC626018E3
        Validity
            Not Before: Aug 25 09:41:00 2024 GMT
            Not After : Aug 24 09:46:00 2025 GMT
        Subject: CN=05D6CE2D78FF9311A3BDB71B08501D89221BC9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:c5:f3:9e:88:25:eb:21:d8:23:b0:3c:9d:
                    6e:be:3a:c2:27:fe:55:51:2f:33:a9:70:b0:cf:fc:
                    af:03:db:2a:83:54:ff:1a:9d:da:5f:e0:2e:4a:49:
                    b7:21:92:ee:08:13:24:77:da:79:b7:ce:73:91:7a:
                    8a:3e:a1:78:17:1b:66:51:b3:53:71:57:5f:6e:b2:
                    fa:24:64:f4:68:6c:59:a3:d3:a9:6d:db:bd:e2:60:
                    a8:81:92:55:82:03:55:87:88:b8:01:8c:ec:ec:03:
                    21:4e:65:2f:f8:ee:f2:93:87:28:1d:4d:7d:32:07:
                    5c:b2:f3:51:56:15:1f:54:2f:81:3e:c0:ab:43:f9:
                    a5:0b:c5:76:12:ef:0b:a6:4c:aa:2b:47:6e:fc:1a:
                    60:2a:a7:d0:bb:c2:84:6e:40:b9:8e:d0:65:7e:7a:
                    f8:98:57:49:f8:02:0d:d0:e0:3d:8a:9a:b5:d7:06:
                    05:7e:2b:12:10:58:e5:04:f1:7a:ec:dd:b5:02:52:
                    ab:3e:ea:8b:a5:86:6c:3a:c1:70:1a:e0:66:78:18:
                    d3:8d:63:e6:a6:28:a7:05:ce:ce:e6:f4:87:bb:05:
                    fa:c6:9a:4e:b6:4f:0f:e2:93:da:31:42:eb:1b:81:
                    ad:91:ab:75:07:27:49:b0:f6:b8:30:40:3b:ea:fd:
                    a1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D6:CE:2D:78:FF:93:11:A3:BD:B7:1B:08:50:1D:89:22:1B:C9:D0
            X509v3 Authority Key Identifier:
                keyid:E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376430303a3a2f34382d3438203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:0d:b4:a0:6c:07:61:af:8a:86:dd:37:36:fd:61:06:38:84:
         b7:f2:a2:38:f4:af:6e:ea:36:9c:dd:08:48:74:d4:9b:4c:05:
         48:0d:7d:08:c4:ab:e0:04:64:7c:14:13:6c:cf:46:74:49:28:
         c3:0a:1f:f8:52:dc:79:be:68:23:99:d2:3a:76:b3:75:1a:3a:
         12:29:0f:9a:df:68:3b:5c:58:84:7b:6b:bc:1f:25:44:b2:7f:
         43:1d:14:22:39:f5:71:35:90:8f:d4:bb:42:de:03:2f:23:01:
         f3:72:ec:bb:64:4b:b6:0c:26:98:07:9f:cb:e3:4d:81:05:1c:
         2c:de:8f:11:8d:69:ca:19:69:7a:b4:ad:e4:92:6a:5a:0c:be:
         cc:64:62:dc:47:3c:c8:ec:2c:a6:b5:4f:71:37:a6:2c:c5:c3:
         5b:96:58:33:ae:30:c3:59:8d:08:27:2e:6f:87:76:a1:a5:b3:
         97:62:f6:0b:48:e9:50:8e:60:c0:f9:31:cd:06:99:2d:ce:79:
         f9:ba:08:42:c9:53:4c:c0:6b:b1:d2:0a:b4:93:30:7a:6e:9e:
         b4:29:5f:75:75:70:75:a3:bc:db:55:2a:32:8d:00:e7:75:9d:
         b9:0d:59:30:9c:10:87:ab:3d:65:58:27:07:c0:07:3f:4e:b5:
         8f:0f:07:a1
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUQP//APco+ABZZu2KbkkLlVdYeVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ4QUJBNUQ5NjlDOUM1NTc5MTM0ODJFMzA2NEUzQkM2
MjYwMThFMzAeFw0yNDA4MjUwOTQxMDBaFw0yNTA4MjQwOTQ2MDBaMDMxMTAvBgNV
BAMTKDA1RDZDRTJENzhGRjkzMTFBM0JEQjcxQjA4NTAxRDg5MjIxQkM5RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMLMXznogl6yHYI7A8nW6+OsIn
/lVRLzOpcLDP/K8D2yqDVP8andpf4C5KSbchku4IEyR32nm3znOReoo+oXgXG2ZR
s1NxV19usvokZPRobFmj06lt273iYKiBklWCA1WHiLgBjOzsAyFOZS/47vKThygd
TX0yB1yy81FWFR9UL4E+wKtD+aULxXYS7wumTKorR278GmAqp9C7woRuQLmO0GV+
eviYV0n4Ag3Q4D2KmrXXBgV+KxIQWOUE8Xrs3bUCUqs+6oulhmw6wXAa4GZ4GNON
Y+amKKcFzs7m9Ie7BfrGmk62Tw/ik9oxQusbga2Rq3UHJ0mw9rgwQDvq/aHPAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQUBdbOLXj/kxGjvbcbCFAdiSIbydAwHwYDVR0j
BBgwFoAU5Iq6XZacnFV5E0guMGTjvGJgGOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDdlMzAyZTYtODgxZS00ZDkzLWFlM2UtOWI3Yzk3YTli
OWQwLzEvRTQ4QUJBNUQ5NjlDOUM1NTc5MTM0ODJFMzA2NEUzQkM2MjYwMThFMy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9FNDhBQkE1RDk2OUM5QzU1NzkxMzQ4MkUz
MDY0RTNCQzYyNjAxOEUzLmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9kN2UzMDJlNi04ODFlLTRkOTMtYWUzZS05YjdjOTdhOWI5ZDAvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTM3NjQzMDMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM0MzUzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRH0AMA0GCSqGSIb3DQEBCwUAA4IBAQAH
DbSgbAdhr4qG3Tc2/WEGOIS38qI49K9u6jac3QhIdNSbTAVIDX0IxKvgBGR8FBNs
z0Z0SSjDCh/4Utx5vmgjmdI6drN1GjoSKQ+a32g7XFiEe2u8HyVEsn9DHRQiOfVx
NZCP1LtC3gMvIwHzcuy7ZEu2DCaYB5/L402BBRws3o8RjWnKGWl6tK3kkmpaDL7M
ZGLcRzzI7CymtU9xN6YsxcNbllgzrjDDWY0IJy5vh3ahpbOXYvYLSOlQjmDA+THN
Bpktznn5ughCyVNMwGux0gq0kzB6bp60KV91dXB1o7zbVSoyjQDndZ25DVkwnBCH
qz1lWCcHwAc/TrWPDweh
-----END CERTIFICATE-----
Generated at Thu Sep 19 09:37:04 2024 by rpki-client on console-ams.rpki-client.org