Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa
File:                     326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          NJQqKvGlOHupI65wfdVjxqd1qX4ASkrcFYmK3N6/Zaw=
Subject key identifier:   36:ED:96:95:73:97:1A:A8:B7:1E:03:2A:F2:2F:34:C3:08:3F:0E:10
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       13E0CAEDEFED5FC962706448158ADEA6C8FFF1FE
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa
Signing time:             Fri 12 Jul 2024 15:07:39 +0000
ROA not before:           Fri 12 Jul 2024 15:02:39 +0000
ROA not after:            Fri 11 Jul 2025 15:07:39 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a518::/46 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 07:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e0:ca:ed:ef:ed:5f:c9:62:70:64:48:15:8a:de:a6:c8:ff:f1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 12 15:02:39 2024 GMT
            Not After : Jul 11 15:07:39 2025 GMT
        Subject: CN=36ED969573971AA8B71E032AF22F34C3083F0E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:a2:fa:fc:9d:75:06:a5:32:b1:d5:b3:a4:
                    c5:24:65:ea:bf:f3:16:0c:5d:5b:c7:2a:83:32:6c:
                    35:cc:65:f2:ca:96:95:ae:b2:d8:3a:c4:ea:da:82:
                    b0:5e:30:e4:87:f3:99:94:96:44:3a:6b:83:63:79:
                    77:70:fd:a2:0f:1d:6b:b1:7c:a4:c4:61:51:bb:fa:
                    50:99:bf:94:ec:27:d7:2d:00:4d:fb:64:65:4d:6f:
                    53:c3:6e:ed:80:e0:07:7a:86:9a:ce:70:99:d1:67:
                    ad:a7:eb:09:e3:9d:28:84:b5:6b:98:a3:66:ad:cd:
                    c6:46:97:b5:e2:19:40:70:bb:8d:bb:d6:b1:6f:b4:
                    4d:fc:38:1e:16:f4:4d:2e:3b:30:53:cc:20:6a:a8:
                    78:58:b6:c7:2b:4a:ca:c9:41:66:73:c9:ea:39:14:
                    82:80:b8:14:b6:9d:34:83:38:f9:8e:71:92:61:c0:
                    b9:a5:21:e9:d7:f3:4e:88:c5:27:8c:fe:10:c3:aa:
                    d4:18:84:85:d0:35:97:f0:af:f6:aa:7d:32:76:07:
                    a9:1b:36:33:dd:a6:45:ef:e5:a5:f9:44:75:4f:d9:
                    4f:62:3b:c9:7b:46:96:7f:b5:1e:f4:67:f2:fd:f4:
                    83:be:8c:95:39:ef:cd:94:00:63:77:16:a5:6a:94:
                    4c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:ED:96:95:73:97:1A:A8:B7:1E:03:2A:F2:2F:34:C3:08:3F:0E:10
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613531383a3a2f34362d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a518::/46

    Signature Algorithm: sha256WithRSAEncryption
         24:06:6b:01:cb:f6:da:51:4f:52:cb:09:f7:a5:52:d3:f6:85:
         6c:94:ae:9d:c3:7f:b7:d8:8e:c0:4c:73:79:e3:3b:0c:b0:77:
         83:e7:9a:29:66:64:29:bd:63:b0:bc:86:58:ab:57:d3:31:68:
         4e:a8:6c:81:ca:4b:0a:36:5d:0f:61:d7:1a:fe:a4:2e:6e:1c:
         13:b8:f0:55:82:74:e7:9a:89:d8:a3:91:75:16:0c:1b:b7:66:
         5f:be:e9:d5:e5:d4:2d:d0:26:9a:6a:59:f1:02:76:15:8d:c5:
         35:24:48:c3:99:09:bd:ed:08:44:e3:d0:b5:df:f5:19:6d:24:
         90:e5:61:1c:57:23:14:59:d2:ce:f4:18:4a:c6:ac:91:6a:da:
         89:3d:a2:20:9f:b3:09:1d:d7:cb:a1:57:c0:5b:9b:fa:ee:a5:
         94:d5:3f:ea:a8:44:ff:1b:96:2e:fe:d9:26:03:f3:bc:8e:1c:
         08:58:a4:3e:b4:e1:c5:2d:bb:c6:f2:e0:14:58:a9:9e:c2:9e:
         0e:19:75:61:03:74:54:2d:74:18:2d:8c:a9:bf:0c:bf:e3:c7:
         06:75:87:84:95:98:b5:47:0a:e6:d2:fc:05:4c:59:98:0f:68:
         af:dc:55:51:a7:38:f5:b4:20:8d:75:83:c2:a0:d6:5d:08:23:
         21:1c:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:37 2024 by rpki-client on console-ams.rpki-client.org