Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          hahaFQDZsW5KT+XMiGuLuOHPu1AUok6k1pISEh7hxUs=
Subject key identifier:   D0:54:37:A7:D7:80:4A:9D:4C:A3:C8:51:AD:07:D3:89:9F:57:48:B2
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       17BBC9B1FE36DB20909D18B1EFF5B95B9B631EDE
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Sun 25 Aug 2024 20:28:18 +0000
ROA not before:           Sun 25 Aug 2024 20:23:18 +0000
ROA not after:            Sun 24 Aug 2025 20:28:18 +0000
asID:                     215956
IP address blocks:        2a0a:6044:a521::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Nov 2024 23:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bb:c9:b1:fe:36:db:20:90:9d:18:b1:ef:f5:b9:5b:9b:63:1e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Aug 25 20:23:18 2024 GMT
            Not After : Aug 24 20:28:18 2025 GMT
        Subject: CN=D05437A7D7804A9D4CA3C851AD07D3899F5748B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:4e:ee:b9:1d:a3:f4:98:a7:19:dd:bc:c7:
                    b3:82:08:c2:ef:78:a5:73:09:23:46:6e:41:35:98:
                    c2:81:0d:86:f5:72:96:bf:83:04:da:90:9d:98:d3:
                    33:78:1b:f3:2d:e0:09:c1:8c:7c:69:41:d1:3f:d6:
                    5a:f9:9b:45:bd:f2:73:81:e4:c4:a8:64:ea:8d:ce:
                    b7:73:91:85:db:46:db:5a:4a:43:b1:4f:8a:ce:eb:
                    4f:2e:35:e5:c0:8b:47:b1:64:d4:2b:c0:90:69:0f:
                    9b:46:ad:28:e9:86:97:f4:59:49:1a:23:0e:0f:c5:
                    17:ea:a5:eb:ad:37:a3:96:d9:2a:60:d2:4b:a0:b8:
                    74:46:12:36:d9:ee:8d:17:4d:e7:96:4e:02:24:25:
                    a2:e2:c0:d8:f7:01:18:7d:89:c5:fd:dd:de:5c:94:
                    0c:f3:56:58:17:a5:f5:fb:7a:34:b4:63:78:0b:c1:
                    ff:e5:ce:54:79:25:99:75:95:03:fb:a7:9c:e6:e0:
                    33:79:e1:7b:7c:38:e4:d5:80:b5:21:e1:20:63:f6:
                    d3:c1:c9:3f:fc:91:e7:f8:e2:9b:36:c0:cb:ee:44:
                    22:40:bf:64:44:74:6d:3f:6b:7b:51:85:9f:a8:a7:
                    fb:dd:dc:35:db:04:62:70:1a:69:4c:79:f1:62:8f:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:54:37:A7:D7:80:4A:9D:4C:A3:C8:51:AD:07:D3:89:9F:57:48:B2
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a613532313a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a521::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:71:5d:42:ff:c5:09:9d:13:17:c6:ae:fa:9a:f6:c1:a0:
         63:e6:fb:e9:fd:7d:63:30:ec:0a:2f:a1:2c:5c:a9:18:71:34:
         97:4b:ac:fb:fd:eb:80:49:dc:50:0d:dd:85:29:bb:c0:cc:54:
         87:2e:b6:64:9a:6c:1a:6e:64:a7:e1:96:df:0d:f0:57:7c:c3:
         d8:38:ad:2b:48:ba:d9:46:4b:18:53:c3:40:5f:c5:e2:29:9e:
         19:fd:74:45:3d:4f:86:0e:ef:3f:d6:ba:ed:e1:c3:a9:e2:a1:
         35:e5:ea:88:0f:ba:d7:08:41:df:92:1d:9d:1f:cb:3e:8b:0c:
         2d:00:0e:5e:85:21:f0:51:c0:88:ca:d5:f5:0e:43:fd:7e:1e:
         fc:e9:6d:38:a5:1b:4d:05:74:29:23:20:b3:b0:53:a3:cb:df:
         66:88:06:a2:b6:09:03:16:41:60:fb:e2:eb:c7:ad:02:6e:ef:
         1d:73:27:42:d4:09:19:37:04:bc:58:0f:4c:5f:d3:ec:4e:40:
         b3:79:38:92:97:e7:bd:2a:e8:47:58:83:78:53:bf:e2:39:52:
         0f:86:43:ea:53:7a:9f:0d:e9:be:44:5e:88:50:76:30:9e:83:
         e7:ac:54:d9:97:bd:40:e9:4e:9e:e3:59:54:02:ff:3d:8f:1a:
         60:39:d9:86
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUF7vJsf422yCQnRix7/W5W5tjHt4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4
QkNGRTk3RDAeFw0yNDA4MjUyMDIzMThaFw0yNTA4MjQyMDI4MThaMDMxMTAvBgNV
BAMTKEQwNTQzN0E3RDc4MDRBOUQ0Q0EzQzg1MUFEMDdEMzg5OUY1NzQ4QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0S07uuR2j9JinGd28x7OCCMLv
eKVzCSNGbkE1mMKBDYb1cpa/gwTakJ2Y0zN4G/Mt4AnBjHxpQdE/1lr5m0W98nOB
5MSoZOqNzrdzkYXbRttaSkOxT4rO608uNeXAi0exZNQrwJBpD5tGrSjphpf0WUka
Iw4PxRfqpeutN6OW2Spg0kuguHRGEjbZ7o0XTeeWTgIkJaLiwNj3ARh9icX93d5c
lAzzVlgXpfX7ejS0Y3gLwf/lzlR5JZl1lQP7p5zm4DN54Xt8OOTVgLUh4SBj9tPB
yT/8kef44ps2wMvuRCJAv2REdG0/a3tRhZ+op/vd3DXbBGJwGmlMefFij48VAgMB
AAGjggKFMIICgTAdBgNVHQ4EFgQU0FQ3p9eASp1Mo8hRrQfTiZ9XSLIwHwYDVR0j
BBgwFoAUEwO7iAj3Zrc9VHPPp7iE6YvP6X0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWJmMDRjN2MtZjgyZC00NzFkLTg1YWQtOThjNjVkZTFj
OTEyLzEvMTMwM0JCODgwOEY3NjZCNzNENTQ3M0NGQTdCODg0RTk4QkNGRTk3RC5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1
NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8xMzAzQkI4ODA4Rjc2NkI3M0Q1NDczQ0ZB
N0I4ODRFOThCQ0ZFOTdELmNlcjCBtwYIKwYBBQUHAQsEgaowgacwgaQGCCsGAQUF
BzALhoGXcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9lYmYwNGM3Yy1mODJkLTQ3MWQtODVhZC05OGM2NWRlMWM5MTIvMS8zMjYxMzA2
MTNhMzYzMDM0MzQzYTYxMzUzMjMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIz
MTM1MzkzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgRKUhMA0GCSqGSIb3DQEBCwUAA4IBAQBx
ynFdQv/FCZ0TF8au+pr2waBj5vvp/X1jMOwKL6EsXKkYcTSXS6z7/euASdxQDd2F
KbvAzFSHLrZkmmwabmSn4ZbfDfBXfMPYOK0rSLrZRksYU8NAX8XiKZ4Z/XRFPU+G
Du8/1rrt4cOp4qE15eqID7rXCEHfkh2dH8s+iwwtAA5ehSHwUcCIytX1DkP9fh78
6W04pRtNBXQpIyCzsFOjy99miAaitgkDFkFg++Lrx60Cbu8dcydC1AkZNwS8WA9M
X9PsTkCzeTiSl+e9KuhHWIN4U7/iOVIPhkPqU3qfDem+RF6IUHYwnoPnrFTZl71A
6U6e41lUAv89jxpgOdmG
-----END CERTIFICATE-----
Generated at Sat Nov 9 17:00:36 2024 by rpki-client on console-fra.rpki-client.org