Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa
File:                     326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa (raw, json)
Hash identifier:          wgRGnBbrEpKhoxbD0wQWPGF593T9BJoWcrjoDCKtgo8=
Subject key identifier:   DC:89:73:10:4C:BF:F5:2D:E6:93:3F:74:1F:52:D0:01:64:AD:58:4D
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       4C5A288A7E6C41A666082733037EECA136046965
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa
Signing time:             Fri 12 Jul 2024 15:12:34 +0000
ROA not before:           Fri 12 Jul 2024 15:07:34 +0000
ROA not after:            Fri 11 Jul 2025 15:12:34 +0000
asID:                     215956
IP address blocks:        2a0a:6044:bb01::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 17:48:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5a:28:8a:7e:6c:41:a6:66:08:27:33:03:7e:ec:a1:36:04:69:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 12 15:07:34 2024 GMT
            Not After : Jul 11 15:12:34 2025 GMT
        Subject: CN=DC8973104CBFF52DE6933F741F52D00164AD584D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9a:71:b5:1f:8c:27:c8:38:57:5f:a9:14:69:
                    12:5f:a5:15:a5:04:d3:d2:34:12:0a:40:ce:4a:33:
                    1d:67:eb:64:ca:fa:42:63:e8:db:86:73:58:7b:cc:
                    15:ef:3a:94:d1:7b:ff:76:42:cd:86:32:ca:c5:69:
                    8e:4e:f6:e8:63:98:e1:c6:72:60:4c:5b:e9:95:70:
                    21:aa:28:14:93:10:38:a3:a6:2d:fa:22:a0:57:3a:
                    8b:7b:a7:73:5b:d7:a5:7d:ed:71:db:42:b8:d3:0b:
                    de:f9:65:2f:58:94:6d:64:8a:09:06:da:c7:62:b5:
                    8f:0b:f6:3d:24:c5:b5:06:70:72:83:b0:f3:ff:6f:
                    4b:c6:43:28:0c:1a:48:93:d5:f4:cc:86:c6:5a:97:
                    73:de:42:48:f5:1f:70:50:ff:9a:ae:00:91:fe:f3:
                    84:a1:de:28:bf:fb:d9:c5:61:c6:1d:08:cd:c6:1c:
                    f9:85:f3:78:19:c0:f8:e5:ae:b8:32:09:a4:14:2a:
                    2e:8d:8d:d5:96:2e:fc:82:26:e2:fc:14:82:e0:6b:
                    5b:69:97:41:22:f2:4b:4d:2a:5b:aa:87:6e:83:24:
                    b0:98:1d:56:90:47:0c:be:81:f2:ab:f9:1d:f9:49:
                    35:ad:de:ba:5a:57:cd:b3:40:61:7a:40:3c:28:1b:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:89:73:10:4C:BF:F5:2D:E6:93:3F:74:1F:52:D0:01:64:AD:58:4D
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230313a3a2f34382d3438203d3e20323135393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb01::/48

    Signature Algorithm: sha256WithRSAEncryption
         eb:b5:ff:cd:9b:19:2f:c0:7c:a4:07:1a:c3:e4:99:79:7e:c5:
         d4:25:f2:0d:97:4b:f9:ab:16:f3:8f:39:cf:eb:df:35:e4:f5:
         19:00:8a:fb:0d:6d:f2:b0:53:8c:e8:85:e0:70:8a:b8:58:2e:
         f7:39:1e:c8:da:00:aa:87:1d:05:eb:1b:8e:d4:44:f5:21:ac:
         99:c7:40:5a:05:20:cc:08:cf:8b:b2:b1:c9:84:bc:58:1e:7d:
         b6:80:b2:74:6f:ce:5a:d0:79:59:b3:0c:6c:1d:84:56:a2:14:
         3e:37:e3:5b:03:89:2e:01:c4:5e:42:a3:a6:45:6b:55:af:8e:
         30:d3:aa:6b:87:6a:fb:24:70:e8:8f:a4:12:81:ac:8a:fb:37:
         cf:20:85:d4:09:9c:a1:5a:b6:57:2d:48:eb:e7:ba:b0:34:4f:
         03:e0:a7:ee:6a:b0:81:34:1a:9b:86:22:a6:da:21:f3:1e:27:
         7a:05:df:c5:9d:69:b4:d7:81:32:0c:f9:4c:cf:a9:ef:24:1f:
         7e:0f:d0:ff:bb:89:c6:68:9c:3d:21:a7:0c:ba:cd:74:dd:0e:
         4d:2a:05:49:30:d2:3e:5d:fa:45:65:ca:ef:fd:c0:df:95:cd:
         36:95:9a:fa:af:94:c5:e9:bf:a3:fc:7c:c8:47:35:92:55:82:
         4d:d9:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:09:06 2024 by rpki-client on console-fra.rpki-client.org