Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230363a3a2f34372d3438203d3e20323134383138.roa
File:                     326130613a363034343a626230363a3a2f34372d3438203d3e20323134383138.roa (raw, json)
Hash identifier:          aPIvThhHdg3Qq9n27OPciShzp6/7Jzqtewaze4DF22o=
Subject key identifier:   62:C6:4E:E3:62:CE:FC:BF:07:F0:5E:6B:BB:12:86:5A:99:65:9D:B3
Certificate issuer:       /CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
Certificate serial:       6E8805B151FEEB11C229BCE3911A20A5D1EFCAF3
Authority key identifier: 13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230363a3a2f34372d3438203d3e20323134383138.roa
Signing time:             Sat 13 Jul 2024 17:22:40 +0000
ROA not before:           Sat 13 Jul 2024 17:17:40 +0000
ROA not after:            Sat 12 Jul 2025 17:22:40 +0000
asID:                     214818
IP address blocks:        2a0a:6044:bb06::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:88:05:b1:51:fe:eb:11:c2:29:bc:e3:91:1a:20:a5:d1:ef:ca:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1303BB8808F766B73D5473CFA7B884E98BCFE97D
        Validity
            Not Before: Jul 13 17:17:40 2024 GMT
            Not After : Jul 12 17:22:40 2025 GMT
        Subject: CN=62C64EE362CEFCBF07F05E6BBB12865A99659DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2a:5a:14:18:71:d6:44:51:7f:23:d9:50:82:
                    d3:14:74:55:c0:54:30:64:35:f7:f7:01:19:10:bd:
                    56:01:78:e2:b6:e5:58:77:2c:24:a6:d4:0a:c1:33:
                    d9:a2:9b:40:56:0e:42:f6:0a:5a:b3:f2:91:fa:ee:
                    16:1e:65:0f:34:72:86:be:da:ff:11:2f:1d:b6:0a:
                    95:a7:bf:b9:b7:a8:08:c7:eb:79:2c:38:82:64:31:
                    ac:59:1e:14:6b:90:1f:02:3e:80:49:50:3d:71:3e:
                    b7:92:c1:fc:c5:a8:cd:25:d5:2b:6c:d0:ba:4e:35:
                    db:2f:95:bb:14:16:e6:44:fb:c3:fd:fa:f8:dc:bf:
                    31:cb:5f:0b:e5:d2:93:8b:b7:7a:3f:52:f7:a0:ae:
                    9e:c8:6f:9f:b1:a5:7a:f5:77:d5:75:37:ca:ac:ec:
                    9e:bb:5f:37:15:79:0b:86:b8:3d:21:ed:0c:33:de:
                    a0:a4:35:a2:9d:24:d8:c1:c5:96:c5:50:50:31:6d:
                    a8:04:ae:21:86:92:4c:1c:5a:2f:c5:c2:7e:e6:36:
                    98:86:90:86:a3:b7:a5:1e:e2:30:10:ac:81:5b:f6:
                    6c:08:6e:95:60:63:55:28:30:15:46:f3:b4:de:75:
                    57:d2:38:08:cb:14:af:44:30:9a:dc:56:16:9c:43:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C6:4E:E3:62:CE:FC:BF:07:F0:5E:6B:BB:12:86:5A:99:65:9D:B3
            X509v3 Authority Key Identifier:
                keyid:13:03:BB:88:08:F7:66:B7:3D:54:73:CF:A7:B8:84:E9:8B:CF:E9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/1303BB8808F766B73D5473CFA7B884E98BCFE97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/1303BB8808F766B73D5473CFA7B884E98BCFE97D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ebf04c7c-f82d-471d-85ad-98c65de1c912/1/326130613a363034343a626230363a3a2f34372d3438203d3e20323134383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:bb06::/47

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:48:9f:59:ff:d0:ac:35:7f:7a:7a:d5:67:46:b1:4a:e9:
         89:79:02:1a:b1:b6:61:5d:43:e5:84:26:86:03:5e:32:f4:ff:
         00:b7:87:5d:3b:48:b5:b3:19:f7:f2:e6:e7:53:88:b5:39:4f:
         60:50:fe:20:13:2d:82:dd:3d:49:c4:9f:f8:02:be:87:e4:e6:
         99:43:5f:55:dc:94:c6:84:18:54:f6:af:e0:d9:6a:2c:1f:85:
         67:20:35:89:aa:de:92:be:23:45:ad:b0:6a:6e:d7:8c:59:6f:
         92:ce:c9:37:00:a6:03:6d:b3:99:09:b0:cb:c9:5b:f0:61:ac:
         72:fe:77:68:b5:f9:cd:87:8b:6d:76:3a:67:44:c9:ad:7d:27:
         fb:34:c6:5a:6a:1b:b9:d2:fc:72:e5:f1:08:db:8b:1a:2b:f8:
         04:92:bb:f8:e7:6d:ee:7b:f4:b8:49:b9:48:c5:db:42:41:c2:
         01:ec:1e:2a:f6:3b:5f:12:d1:c9:58:41:58:e9:7e:e3:76:81:
         52:d5:a1:3e:38:6d:e9:20:00:c9:50:5b:3e:3c:e0:02:43:41:
         0b:c8:71:a4:c9:6d:80:4b:39:bc:a0:eb:e9:79:bb:97:45:b0:
         dd:d1:46:ac:3d:1f:6d:02:b7:86:cc:ab:19:86:1f:7a:be:be:
         de:e9:a7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:37 2024 by rpki-client on console-fra.rpki-client.org