Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376431303a3a2f34342d3434203d3e20323134353130.roa
File:                     326130613a363034343a376431303a3a2f34342d3434203d3e20323134353130.roa (raw, json)
Hash identifier:          eb+tBj0eYN7MvKVQb2AJqXQyKhlydWXGHOqyS73C/u4=
Subject key identifier:   18:48:CB:3B:27:80:3C:9F:86:1E:74:B4:5D:9B:FE:A8:B7:53:73:CC
Certificate issuer:       /CN=E48ABA5D969C9C557913482E3064E3BC626018E3
Certificate serial:       34B274EC6007643AE5EA11DD961060A43A349CC5
Authority key identifier: E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376431303a3a2f34342d3434203d3e20323134353130.roa
Signing time:             Sat 24 Aug 2024 07:28:52 +0000
ROA not before:           Sat 24 Aug 2024 07:23:52 +0000
ROA not after:            Sat 23 Aug 2025 07:28:52 +0000
asID:                     214510
IP address blocks:        2a0a:6044:7d10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b2:74:ec:60:07:64:3a:e5:ea:11:dd:96:10:60:a4:3a:34:9c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48ABA5D969C9C557913482E3064E3BC626018E3
        Validity
            Not Before: Aug 24 07:23:52 2024 GMT
            Not After : Aug 23 07:28:52 2025 GMT
        Subject: CN=1848CB3B27803C9F861E74B45D9BFEA8B75373CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4f:76:dd:44:15:24:01:22:7e:ac:fb:59:50:
                    47:8a:6b:b4:aa:ce:26:ee:2b:f6:4f:5c:5a:ff:d3:
                    4b:16:ef:8b:94:58:09:1f:ca:f5:6e:2b:50:a1:f4:
                    e8:b8:47:4a:a6:dc:ed:b8:98:2d:8e:01:cc:77:8e:
                    69:11:7f:7e:09:02:4c:e5:21:99:13:10:55:06:4f:
                    1e:64:d1:dc:3c:d7:dd:11:11:03:b9:36:a0:22:a3:
                    09:13:61:fe:30:44:29:1f:9f:85:50:e5:57:20:0e:
                    0c:06:15:79:5d:26:73:94:61:61:7f:f6:e0:46:6d:
                    d4:7c:d0:76:ef:3c:2b:16:46:de:c9:b1:28:db:e5:
                    93:c8:27:eb:ee:41:55:ba:59:4b:ce:ea:39:3a:66:
                    6b:36:6e:93:99:e5:ae:51:cf:88:8f:7e:28:83:73:
                    b5:ce:00:b7:28:38:aa:ef:13:2c:53:ff:f4:8a:0e:
                    2c:ef:fa:e3:80:2f:5d:81:a0:fd:f3:1f:fc:fa:9a:
                    19:e0:a8:17:1f:81:66:b5:d2:be:c0:91:6c:d9:c6:
                    85:87:eb:cd:50:ca:2f:60:52:a6:a6:9d:08:85:72:
                    6f:08:bf:7b:99:72:7c:61:fd:c3:67:25:b6:0c:2b:
                    df:b6:51:57:51:91:f5:2f:0f:c0:68:1d:98:21:1a:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:48:CB:3B:27:80:3C:9F:86:1E:74:B4:5D:9B:FE:A8:B7:53:73:CC
            X509v3 Authority Key Identifier:
                keyid:E4:8A:BA:5D:96:9C:9C:55:79:13:48:2E:30:64:E3:BC:62:60:18:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/E48ABA5D969C9C557913482E3064E3BC626018E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/E48ABA5D969C9C557913482E3064E3BC626018E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/1/326130613a363034343a376431303a3a2f34342d3434203d3e20323134353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         a1:cb:c2:ee:58:cf:79:c6:9e:de:58:55:3a:d7:d5:78:a7:29:
         1d:cf:6b:a5:1d:d8:d6:42:3e:35:f5:27:4d:e5:fa:12:04:91:
         60:75:64:6c:08:aa:ee:21:ba:f7:b5:06:ff:52:11:9b:6b:4e:
         e5:1e:09:bf:2a:82:6e:16:83:22:ea:5a:83:ca:10:2d:50:3b:
         4c:a2:6f:b6:0e:41:d5:f5:72:b0:07:17:9d:b2:34:d6:3d:95:
         4f:96:25:6f:96:96:73:e3:6a:90:de:9b:5c:e9:9b:0e:2e:47:
         8f:bd:33:bd:0b:dc:a4:c5:bf:6b:01:f8:15:52:71:4e:b0:20:
         12:89:a1:05:91:bf:83:b1:ed:b9:3d:d2:23:7b:c3:91:76:c4:
         3f:d5:d1:b5:47:3d:e1:90:80:6a:a7:63:0f:8e:b5:6a:c0:82:
         b2:a0:a0:ed:9b:54:16:8e:80:5d:e7:11:30:38:90:a7:35:63:
         e4:64:58:04:c9:98:10:01:99:ef:9c:0e:92:8a:fd:2d:05:17:
         91:79:9d:87:36:71:f1:6c:d3:2b:df:c7:f3:82:89:ca:4c:28:
         6e:2c:62:d1:86:48:24:34:61:c6:eb:b8:78:69:24:68:0b:0b:
         85:cc:af:0b:db:3c:1c:7e:92:1e:53:9e:4c:53:9c:96:98:29:
         da:cf:e6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:51 2024 by rpki-client on console-fra.rpki-client.org