Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          ej2N5UnkMTDoBbF8R6czxT6P4bCWtIrY1r1BDLoVuoY=
Subject key identifier:   BF:44:30:19:E1:1A:D7:96:91:EC:14:29:26:C9:B4:55:C5:78:86:9D
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       65E76406B9C5B54188481402D921CDF1651C0DEA
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Fri 12 Jul 2024 15:06:55 +0000
ROA not before:           Fri 12 Jul 2024 15:01:55 +0000
ROA not after:            Fri 11 Jul 2025 15:06:55 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a50c::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e7:64:06:b9:c5:b5:41:88:48:14:02:d9:21:cd:f1:65:1c:0d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 12 15:01:55 2024 GMT
            Not After : Jul 11 15:06:55 2025 GMT
        Subject: CN=BF443019E11AD79691EC142926C9B455C578869D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:48:15:50:b5:4c:ff:51:35:00:88:8c:33:69:
                    0f:38:c2:1b:b6:c4:0a:53:b7:fe:82:1e:32:94:57:
                    05:0a:e0:f2:b0:24:61:96:ba:67:a1:ce:8e:a2:87:
                    28:e1:be:34:a3:98:02:68:81:99:bb:5c:3e:16:02:
                    77:23:74:48:f8:51:cd:a0:e2:a7:f6:9e:4b:f9:23:
                    80:c9:ca:b5:1c:7b:1d:3d:06:48:2a:79:87:f4:29:
                    85:bb:55:8d:d2:70:e1:76:e3:d0:47:fc:a0:c8:c7:
                    f3:4b:f9:a8:18:8d:9d:12:06:e5:5a:32:c1:81:27:
                    ec:3e:d0:db:d0:e5:81:eb:be:7c:38:aa:87:f4:f4:
                    fd:31:4c:23:95:a9:63:3c:2e:74:d7:48:8f:94:8c:
                    34:cc:fd:2e:2b:f9:66:dd:ac:be:e8:6c:a2:c8:38:
                    f3:85:94:81:93:06:63:ce:3b:9d:42:e6:59:ce:94:
                    d7:cb:97:70:ad:44:e4:b9:62:6e:54:41:5c:24:e9:
                    bb:7d:ea:f6:bd:f2:96:7a:a9:58:4d:26:ba:e3:ff:
                    b3:07:cb:65:05:a9:25:da:e7:a1:cd:18:10:f5:35:
                    7e:72:db:03:5f:4b:a1:05:43:84:a9:72:ba:bc:5b:
                    cd:27:42:f9:7c:d2:a5:ab:d8:f2:3d:c8:a0:e6:08:
                    42:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:44:30:19:E1:1A:D7:96:91:EC:14:29:26:C9:B4:55:C5:78:86:9D
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613530633a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a50c::/46

    Signature Algorithm: sha256WithRSAEncryption
         55:34:1b:96:04:d8:a7:3e:52:82:30:77:f0:4f:1d:4a:1c:f1:
         f7:f0:b2:c4:39:af:25:57:11:40:ff:dc:51:4d:97:05:56:14:
         ad:72:e7:99:77:1f:d8:fa:bc:fb:7a:e4:4d:f4:89:a5:39:49:
         14:ea:f8:b3:f6:3d:c2:34:7d:09:21:8a:a6:10:f2:ad:59:9c:
         81:85:eb:5f:8d:14:c9:aa:4f:45:73:73:5d:b9:38:ed:dc:0b:
         35:c2:9d:6a:b2:e0:fa:9f:14:67:57:cf:17:bd:9a:0c:cb:19:
         7e:4d:2b:a1:bb:f9:c1:b6:f0:ed:68:70:d9:ea:67:36:cf:8e:
         a7:5f:85:8a:93:dc:e8:2b:94:b1:51:05:fe:3a:8f:c1:9f:23:
         da:c2:6b:ab:9a:4e:b2:9b:d4:57:07:02:b0:e9:2f:4b:c6:d8:
         e1:03:68:3b:5d:63:a2:d5:a4:b7:87:61:81:0f:22:b6:22:e7:
         ab:30:4e:da:c8:18:ba:a3:a5:0f:b7:cd:7a:a0:2a:19:33:29:
         07:67:7d:b2:1c:ab:67:74:06:dd:59:8b:ea:b8:88:27:27:a2:
         f2:cc:9c:36:10:f5:61:e0:70:56:3d:9e:dc:a3:c8:e7:eb:b2:
         3a:5b:89:88:13:40:58:d7:88:43:0d:eb:b1:34:01:65:75:ab:
         e9:82:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:21 2024 by rpki-client on console-fra.rpki-client.org