Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393032303a3a2f34342d3434203d3e20323135353930.roa
File:                     326130613a363034343a393032303a3a2f34342d3434203d3e20323135353930.roa (raw, json)
Hash identifier:          8z/u3oMp7pRsAS7NaPJ16DpgAAP2eKfJs4XUiSJwoZg=
Subject key identifier:   2F:8B:5B:AB:18:51:9B:B1:60:6C:6B:EB:30:6B:A4:55:17:90:2F:82
Certificate issuer:       /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial:       014CA3B04DA873A38E8EB687E7D1B8832BF15203
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393032303a3a2f34342d3434203d3e20323135353930.roa
Signing time:             Wed 21 Feb 2024 05:47:56 +0000
ROA not before:           Wed 21 Feb 2024 05:42:56 +0000
ROA not after:            Wed 19 Feb 2025 05:47:56 +0000
asID:                     215590
IP address blocks:        2a0a:6044:9020::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:4c:a3:b0:4d:a8:73:a3:8e:8e:b6:87:e7:d1:b8:83:2b:f1:52:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
        Validity
            Not Before: Feb 21 05:42:56 2024 GMT
            Not After : Feb 19 05:47:56 2025 GMT
        Subject: CN=2F8B5BAB18519BB1606C6BEB306BA45517902F82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f9:4a:c3:ac:0a:69:cc:9e:29:4d:52:8f:d3:
                    0e:9d:b3:2a:13:11:b2:57:75:22:12:3d:85:f4:32:
                    42:0f:11:8d:29:07:15:2a:3c:65:80:e6:58:eb:60:
                    18:65:a1:17:07:91:69:23:e3:59:b8:16:52:05:43:
                    20:24:37:8a:27:1f:81:fa:98:2f:8e:f1:1c:de:fa:
                    41:8f:ad:8d:6a:52:96:95:d3:ce:17:b7:85:4a:53:
                    37:3e:5c:c6:cf:3f:52:50:d5:a7:ff:8b:ef:df:30:
                    a8:74:bb:b4:bd:2d:af:e6:42:92:7a:92:2e:f6:5b:
                    06:6b:37:73:47:12:2c:d4:5c:6c:43:f2:54:48:c6:
                    d5:11:bd:d9:17:5d:f1:04:2e:ca:14:c7:77:80:06:
                    e3:39:60:18:59:9b:67:13:4d:bc:7d:0f:09:dd:cc:
                    c8:b6:e0:c7:f5:82:f3:85:95:88:c7:c9:4b:b7:39:
                    e9:fd:49:0e:1c:33:35:2f:b5:63:4e:e1:7d:18:71:
                    8c:a9:7e:9e:8c:b8:91:9f:d1:f1:3f:83:6b:b5:81:
                    d2:08:53:b9:73:95:03:b5:1f:d0:fc:c8:ea:0a:3d:
                    fe:f2:c4:b6:90:c6:4f:4b:c1:af:4e:eb:7d:6f:c3:
                    06:bb:1b:18:bb:a0:29:3a:7b:ea:5c:5c:2f:16:a8:
                    ac:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8B:5B:AB:18:51:9B:B1:60:6C:6B:EB:30:6B:A4:55:17:90:2F:82
            X509v3 Authority Key Identifier:
                keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393032303a3a2f34342d3434203d3e20323135353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:9020::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:90:09:88:f7:fa:42:5e:6c:51:43:6d:74:34:dd:29:cd:9a:
         22:ff:f4:60:65:e0:b3:e6:dd:49:ab:b0:6f:f8:dc:6d:25:f7:
         e4:55:75:80:76:7a:7e:be:27:c3:2b:5f:5a:c0:4c:41:c3:d7:
         76:38:a7:af:cf:b4:b6:79:15:36:e3:f8:7c:53:d6:09:54:ad:
         e5:a3:24:a1:cc:fb:06:c0:c5:f4:dc:0d:c5:b8:e9:35:d6:aa:
         b0:5a:6a:37:bb:31:78:cd:d7:e8:63:83:49:f6:ba:6c:33:f5:
         8c:62:95:3a:af:bc:40:7b:67:cf:2b:b9:ad:1e:6a:fb:28:cd:
         43:85:f6:62:50:8e:7f:3c:7e:2e:52:89:a2:9b:50:35:5a:ea:
         71:42:59:16:ac:84:a4:54:9a:2c:8a:2f:8d:a0:4d:65:2e:4a:
         c4:4e:91:d6:18:a3:10:e2:c9:33:f9:f6:bd:8e:0d:23:7b:32:
         27:2a:88:3d:d5:36:6a:b3:78:6d:fe:a3:64:da:c7:3a:bc:35:
         5f:1f:8e:9c:fb:bf:1a:b8:07:6d:26:c1:74:3c:ae:75:fb:2f:
         79:61:b6:c2:1a:61:fb:a1:5d:86:fd:fe:c5:3f:9a:49:83:72:
         b6:8a:17:b6:ef:da:f4:53:37:6d:a8:ef:e8:62:c3:d5:88:c3:
         0d:a8:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:21 2024 by rpki-client on console-ams.rpki-client.org