Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa
File:                     326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier:          HJoECgLXm4t3nDLrhbJp0Ky5LOqd1ckyEjqW5ASUlIE=
Subject key identifier:   CC:0E:21:F4:F4:9A:A8:6E:68:45:1D:90:CB:A2:6F:0F:EB:32:FB:54
Certificate issuer:       /CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
Certificate serial:       620C3DA997DCFCDA005499DA42AFAE8AA5DDF8F3
Authority key identifier: 92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa
Signing time:             Fri 23 Aug 2024 16:30:09 +0000
ROA not before:           Fri 23 Aug 2024 16:25:09 +0000
ROA not after:            Fri 22 Aug 2025 16:30:09 +0000
asID:                     8075
IP address blocks:        2a0a:6044:8ffe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 12:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:0c:3d:a9:97:dc:fc:da:00:54:99:da:42:af:ae:8a:a5:dd:f8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92E983F766C144A0CEAC0B6FC5C20934091D7E02
        Validity
            Not Before: Aug 23 16:25:09 2024 GMT
            Not After : Aug 22 16:30:09 2025 GMT
        Subject: CN=CC0E21F4F49AA86E68451D90CBA26F0FEB32FB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:22:2f:36:08:46:98:3d:40:b8:57:a1:e2:92:
                    45:24:ba:c2:14:93:ff:4b:cc:48:8e:da:cf:8e:54:
                    02:57:fc:a5:a2:75:1b:6d:e2:8e:cf:f2:11:23:a1:
                    ed:80:de:a6:d3:c5:d5:25:c9:af:1e:f3:d5:b2:61:
                    81:95:98:e0:e8:9f:38:75:bd:15:b8:9a:6c:81:5c:
                    30:03:ca:f2:2f:a9:7d:4a:b8:94:bd:6e:e8:d3:c7:
                    6f:b8:67:97:95:c9:9b:3b:73:64:d2:c2:1a:48:41:
                    64:69:93:11:4e:ff:34:a0:c8:79:83:c8:fe:6f:71:
                    c8:1b:d9:2f:da:7a:5b:ae:20:49:bf:a4:e4:13:2b:
                    60:e9:12:5b:bc:a3:36:ff:c0:f6:e8:69:f0:ab:9c:
                    c3:b9:5c:a2:0a:0a:c3:5e:66:a2:25:c7:4c:98:e0:
                    9b:f8:bc:03:98:34:08:a6:83:96:86:1f:e6:47:82:
                    99:ec:d9:90:dc:43:5d:86:2d:ec:31:ec:af:30:30:
                    c7:bb:87:4f:1c:2b:32:aa:76:d9:fb:db:81:ed:c0:
                    c2:89:77:54:c3:8a:df:62:a1:13:76:77:5a:33:8b:
                    5c:eb:e4:b4:80:c9:17:25:d5:5b:2f:32:43:bf:23:
                    39:c2:00:37:33:d5:dc:4f:fd:a8:69:35:47:46:09:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0E:21:F4:F4:9A:A8:6E:68:45:1D:90:CB:A2:6F:0F:EB:32:FB:54
            X509v3 Authority Key Identifier:
                keyid:92:E9:83:F7:66:C1:44:A0:CE:AC:0B:6F:C5:C2:09:34:09:1D:7E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/92E983F766C144A0CEAC0B6FC5C20934091D7E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/0/326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:8ffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:09:a8:da:d7:74:aa:ae:b7:fb:d5:52:e0:02:a9:ee:b5:
         99:22:cd:04:41:ea:e1:2c:ee:21:9a:51:10:f4:c6:e2:68:9d:
         a3:a0:88:29:c9:b3:18:ec:05:9f:04:d1:28:83:ec:0c:f7:71:
         d9:35:e6:af:0a:3e:58:fe:bc:a4:9a:45:6c:9b:24:1a:51:55:
         05:4c:df:a8:36:c6:86:63:7b:d6:9f:45:bd:19:6e:5d:7b:01:
         80:fe:f5:2e:ca:e2:40:a9:c1:74:60:3e:19:a0:ab:51:40:7e:
         13:cd:ca:40:9a:8d:ea:48:4d:21:c1:e3:85:15:98:84:c1:a7:
         8b:cc:af:1b:b9:9f:2c:3e:62:58:04:37:b7:55:3b:f7:f4:81:
         fa:f1:78:eb:55:a6:26:0a:8e:91:88:cc:5d:9d:51:5a:f4:67:
         06:0a:7c:7f:ff:92:fb:37:70:b7:15:1c:12:02:a5:1e:7b:68:
         b9:c8:8c:57:ed:42:9d:54:15:26:73:22:96:be:a4:9b:d3:4b:
         3b:b5:3d:a6:65:cf:11:7e:ff:30:8c:a7:f7:8f:b0:71:24:32:
         20:24:f5:36:a8:bb:d3:ed:e4:e4:46:5f:32:55:9f:81:2b:e0:
         6e:5e:c2:dd:48:2d:4e:a4:4c:03:7f:13:a1:39:90:f6:b0:d6:
         95:9a:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:00:20 2024 by rpki-client on console-ams.rpki-client.org