Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          HneQtYqjLe+9XA6508OWRrLk4y5besqLoVAfaeWBh4s=
Subject key identifier:   6C:D0:C8:7A:75:EC:79:B7:19:10:3E:6A:6C:8A:3B:07:D3:54:7F:8D
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       5B41AD8D85F084ADF9A5F417C79CDBC6E5CB0034
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Fri 12 Jul 2024 15:10:20 +0000
ROA not before:           Fri 12 Jul 2024 15:05:20 +0000
ROA not after:            Fri 11 Jul 2025 15:10:20 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a510::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 07:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:41:ad:8d:85:f0:84:ad:f9:a5:f4:17:c7:9c:db:c6:e5:cb:00:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 12 15:05:20 2024 GMT
            Not After : Jul 11 15:10:20 2025 GMT
        Subject: CN=6CD0C87A75EC79B719103E6A6C8A3B07D3547F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a3:96:5a:2d:03:36:22:bd:9f:dd:85:b6:5d:
                    50:8e:f2:5d:67:df:15:13:47:ca:9d:34:e5:ea:e8:
                    b3:0e:c5:2b:61:7d:83:a3:68:cd:7d:60:0f:cb:da:
                    78:88:12:d2:71:aa:f7:bd:53:c5:16:72:3b:a7:0e:
                    2f:6f:52:58:ca:82:27:70:fc:82:a3:c8:ff:66:a9:
                    21:6c:dd:e6:4e:22:e8:79:d2:e6:8e:ca:24:f3:c8:
                    4f:db:ba:e3:bc:7b:80:6d:21:91:ea:9e:e1:66:45:
                    aa:5f:c6:27:7d:01:37:00:fb:e9:0a:7a:df:f0:c8:
                    dc:4c:c3:72:7f:7d:b0:c0:c3:c8:6e:41:16:b1:34:
                    ae:57:85:b5:b1:0d:f8:24:12:4c:03:a6:35:27:ee:
                    5a:a4:17:35:22:fd:36:3c:51:ce:7e:0a:25:a8:cc:
                    bb:ce:88:0b:4c:ab:7c:b7:39:23:44:62:2b:32:7d:
                    e1:ea:80:3b:ac:c4:ac:b0:1c:98:bb:05:70:85:d3:
                    56:26:8b:75:87:47:d4:95:91:47:4b:4a:5b:68:47:
                    98:2c:fe:2a:eb:ed:2d:a7:97:80:3d:7f:2d:59:ae:
                    50:e5:57:26:10:0e:58:db:3c:2d:f7:87:19:c2:54:
                    2e:7b:91:1f:e4:c4:7f:1d:6a:ab:b1:6b:12:55:be:
                    20:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:C8:7A:75:EC:79:B7:19:10:3E:6A:6C:8A:3B:07:D3:54:7F:8D
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531303a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a510::/46

    Signature Algorithm: sha256WithRSAEncryption
         1b:78:3e:19:c7:ea:22:08:9e:a9:0c:3b:d9:cc:42:d2:7b:5d:
         2a:9c:53:34:8d:8e:34:21:36:74:0e:b9:4a:ac:bb:7a:21:63:
         59:c7:99:53:a1:72:82:5e:0a:b5:45:6d:ca:d3:c7:2b:90:fc:
         3e:95:d6:c6:c5:cb:56:ab:64:20:a8:88:b4:6d:55:ce:47:77:
         15:4d:50:e4:1b:fb:41:82:f9:d4:61:0a:16:de:58:8d:b1:c2:
         7b:d8:fa:85:e9:e3:6b:c6:4e:19:df:d4:f3:70:68:08:e6:9c:
         2d:ed:1d:60:e6:35:e7:41:08:19:0a:10:de:53:81:1d:eb:3a:
         06:91:b6:b2:a1:48:32:ba:e6:36:c7:91:44:2f:32:53:d5:c8:
         32:8c:2b:06:63:61:f9:cc:f6:c2:47:e1:6f:03:3e:08:e0:75:
         c1:c3:c6:81:5a:56:63:42:8d:9a:23:4b:bc:ae:0b:aa:06:fa:
         67:24:54:56:8f:69:6c:19:b5:1f:a2:48:92:f3:ac:b9:3b:6a:
         b0:06:2e:b6:35:79:80:78:96:53:eb:36:d7:46:28:63:df:ea:
         7c:a5:3d:9a:50:7d:92:48:0a:9c:f0:09:26:c6:fa:f5:69:cc:
         cf:47:11:7a:32:36:45:5a:be:f8:26:1a:0b:08:95:e1:ee:d4:
         15:25:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:37 2024 by rpki-client on console-ams.rpki-client.org