Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa
File:                     323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa (raw, json)
Hash identifier:          Qw2OI9+MD5VqriO6WOxSInNdtJa74AfRdb+iWLHcqXs=
Subject key identifier:   CC:ED:42:3A:FE:1D:66:65:44:C0:1E:E0:91:42:A6:F6:AC:83:0B:B7
Certificate issuer:       /CN=0839a93dab544c296ffa143456844a8b2818b1d0
Certificate serial:       1A3C3576FE77622E88025B0986489CC272F18D64
Authority key identifier: 08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa
Signing time:             Sun 30 Jun 2024 12:15:19 +0000
ROA not before:           Sun 30 Jun 2024 12:10:19 +0000
ROA not after:            Sun 29 Jun 2025 12:15:19 +0000
asID:                     207960
IP address blocks:        2001:678:fc8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:3c:35:76:fe:77:62:2e:88:02:5b:09:86:48:9c:c2:72:f1:8d:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0839a93dab544c296ffa143456844a8b2818b1d0
        Validity
            Not Before: Jun 30 12:10:19 2024 GMT
            Not After : Jun 29 12:15:19 2025 GMT
        Subject: CN=CCED423AFE1D666544C01EE09142A6F6AC830BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:00:6a:8a:4f:57:1b:59:e8:63:fa:6e:c7:
                    7d:89:24:77:31:75:08:21:af:66:be:5b:1c:35:ed:
                    b4:19:12:95:ab:74:25:e7:a1:db:16:6b:38:60:b8:
                    bd:a5:d3:ce:72:d1:d0:29:61:7e:79:53:1b:af:a8:
                    4d:26:ab:1a:8c:2b:bb:54:c0:3b:c7:01:1f:33:be:
                    1b:cb:50:d0:8f:fd:1d:58:27:aa:60:0d:18:3b:4f:
                    13:35:92:60:7d:b2:eb:cf:72:95:b2:83:07:25:d5:
                    1f:bf:c8:9e:3c:60:73:b9:21:9a:6a:f6:54:48:ae:
                    8f:c3:d1:33:09:e7:63:4f:68:00:93:3b:8c:bb:6b:
                    da:a6:09:c3:13:cf:22:21:47:82:7f:61:61:34:61:
                    f4:72:ec:d4:38:02:b8:f7:16:84:07:e7:04:b0:c5:
                    88:eb:32:34:c4:52:b0:56:ef:b5:ee:0c:f2:b6:07:
                    a1:ee:3e:95:80:1c:ac:25:cd:b7:d3:69:19:f4:f1:
                    51:05:93:61:ea:1f:f3:1f:5b:3e:f7:01:85:94:5c:
                    de:55:2b:3e:29:b6:3f:75:a9:b8:f6:4f:4b:34:83:
                    25:b1:3a:00:4b:da:58:e3:a7:95:f1:01:d5:9d:64:
                    3f:eb:31:b3:04:6d:ae:b2:31:2e:0d:3e:ec:bf:12:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:ED:42:3A:FE:1D:66:65:44:C0:1E:E0:91:42:A6:F6:AC:83:0B:B7
            X509v3 Authority Key Identifier:
                keyid:08:39:A9:3D:AB:54:4C:29:6F:FA:14:34:56:84:4A:8B:28:18:B1:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/323030313a3637383a6663383a3a2f34382d3438203d3e20323037393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:678:fc8::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:aa:b1:fe:9b:27:77:02:26:28:d1:24:4e:61:5f:e4:f5:6b:
         3d:a8:5a:af:2a:7f:a3:06:e9:dd:ce:2b:08:cd:37:47:8a:01:
         f6:56:57:3e:b3:e5:c9:63:73:4c:35:ab:8c:37:8f:68:d6:9c:
         32:fb:bb:2c:df:dd:68:7c:6e:19:e7:4f:be:17:7a:78:fb:26:
         c8:07:7f:35:fc:44:6c:a3:2e:61:5e:0d:34:ec:ba:a7:a3:46:
         07:5f:a0:76:07:e9:d0:8d:67:c8:72:b9:b8:39:ed:35:d5:27:
         72:d1:48:59:29:3a:a7:77:ae:50:45:c9:1a:2e:23:26:be:e7:
         73:f6:65:b7:44:4e:b6:21:f8:bc:3d:60:39:3c:b5:36:3c:cf:
         ba:81:86:88:0e:71:04:bf:5e:2a:44:4d:c7:dc:c2:77:d1:1c:
         84:ba:46:64:8a:0f:bd:33:a9:fb:4e:28:70:02:ac:e3:48:ef:
         f3:da:70:da:7e:ff:c6:0a:4d:8f:d7:35:7d:ec:fb:62:ff:0b:
         21:f1:84:d2:86:21:cb:dd:47:9b:ac:6c:55:14:10:d8:3a:d5:
         e1:f6:18:c2:ba:93:f3:f5:fd:65:e5:e8:93:e1:a1:33:a9:44:
         22:4d:ec:4b:fb:7d:f5:8d:8b:2f:0f:f2:dd:3a:0a:42:fc:7f:
         45:5d:49:c7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIUGjw1dv53Yi6IAlsJhkicwnLxjWQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDgzOWE5M2RhYjU0NGMyOTZmZmExNDM0NTY4NDRhOGIy
ODE4YjFkMDAeFw0yNDA2MzAxMjEwMTlaFw0yNTA2MjkxMjE1MTlaMDMxMTAvBgNV
BAMTKENDRUQ0MjNBRkUxRDY2NjU0NEMwMUVFMDkxNDJBNkY2QUM4MzBCQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+gBqik9XG1noY/pux32JJHcx
dQghr2a+Wxw17bQZEpWrdCXnodsWazhguL2l085y0dApYX55UxuvqE0mqxqMK7tU
wDvHAR8zvhvLUNCP/R1YJ6pgDRg7TxM1kmB9suvPcpWygwcl1R+/yJ48YHO5IZpq
9lRIro/D0TMJ52NPaACTO4y7a9qmCcMTzyIhR4J/YWE0YfRy7NQ4Arj3FoQH5wSw
xYjrMjTEUrBW77XuDPK2B6HuPpWAHKwlzbfTaRn08VEFk2HqH/MfWz73AYWUXN5V
Kz4ptj91qbj2T0s0gyWxOgBL2ljjp5XxAdWdZD/rMbMEba6yMS4NPuy/EpPXAgMB
AAGjggJGMIICQjAdBgNVHQ4EFgQUzO1COv4dZmVEwB7gkUKm9qyDC7cwHwYDVR0j
BBgwFoAUCDmpPatUTClv+hQ0VoRKiygYsdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGRlODM3ZmItNjM5MC00MWI1LTgyYTAtZjBkMDJjMDNh
MmM2LzcvMDgzOUE5M0RBQjU0NEMyOTZGRkExNDM0NTY4NDRBOEIyODE4QjFEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NEbXBQYXRVVENsdi1oUTBWb1JLaXln
WXNkQS5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZGRlODM3ZmIt
NjM5MC00MWI1LTgyYTAtZjBkMDJjMDNhMmM2LzcvMzIzMDMwMzEzYTM2MzczODNh
NjY2MzM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM3MzkzNjMwLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAIAEGeA/IMA0GCSqGSIb3DQEBCwUAA4IBAQBTqrH+myd3AiYo0SROYV/k
9Ws9qFqvKn+jBundzisIzTdHigH2Vlc+s+XJY3NMNauMN49o1pwy+7ss391ofG4Z
50++F3p4+ybIB381/ERsoy5hXg007Lqno0YHX6B2B+nQjWfIcrm4Oe011Sdy0UhZ
KTqnd65QRckaLiMmvudz9mW3RE62Ifi8PWA5PLU2PM+6gYaIDnEEv14qRE3H3MJ3
0RyEukZkig+9M6n7TihwAqzjSO/z2nDafv/GCk2P1zV97Pti/wsh8YTShiHL3Ueb
rGxVFBDYOtXh9hjCupPz9f1l5eiT4aEzqUQiTexL+331jYsvD/LdOgpC/H9FXUnH
-----END CERTIFICATE-----