Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa
File:                     326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa (raw, json)
Hash identifier:          ZmUx6T9QZCqdwLpnTe2pjNUl5+p3SFgFCFUVwxwmZA4=
Subject key identifier:   C6:F1:F7:57:02:2C:FB:47:16:8E:93:F8:C6:F2:A7:4D:D1:1B:BB:41
Certificate issuer:       /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial:       07AA19CEB3EAE56AD1F6ADDAF03E551A834D41
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa
Signing time:             Thu 28 Mar 2024 00:25:34 +0000
ROA not before:           Thu 28 Mar 2024 00:20:34 +0000
ROA not after:            Thu 27 Mar 2025 00:25:34 +0000
asID:                     215232
IP address blocks:        2a0a:6044:9030::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Dec 2024 01:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:aa:19:ce:b3:ea:e5:6a:d1:f6:ad:da:f0:3e:55:1a:83:4d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
        Validity
            Not Before: Mar 28 00:20:34 2024 GMT
            Not After : Mar 27 00:25:34 2025 GMT
        Subject: CN=C6F1F757022CFB47168E93F8C6F2A74DD11BBB41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:e0:46:16:b5:ce:ad:5f:33:03:f2:25:a5:
                    95:49:0f:47:98:a6:04:69:73:66:1d:24:16:57:6c:
                    09:b3:60:e3:c7:fb:ff:0b:e2:a7:e2:52:5b:51:4b:
                    aa:3f:f9:47:74:8e:b8:b0:15:f3:d4:ef:1f:d4:69:
                    3f:35:ce:7a:32:97:e9:b5:48:00:d8:20:33:32:f4:
                    cb:d1:cb:8b:39:bf:33:f5:aa:82:5c:d0:1d:9f:50:
                    fd:84:5c:f4:07:33:b6:5f:ec:5e:c3:1a:3d:56:1f:
                    5d:52:b4:72:b6:ba:0e:5a:79:dd:34:c2:d4:59:25:
                    9c:45:09:30:7d:54:f3:bd:dc:20:93:c3:19:8d:83:
                    ef:75:9a:72:d0:30:95:fc:af:1c:81:ca:ab:ce:79:
                    8d:a6:ed:e4:ef:7b:c1:97:12:24:79:a1:0e:62:41:
                    43:f5:ff:6f:d2:7b:9a:bc:28:50:d6:19:ea:a9:82:
                    f2:79:0c:76:1a:9c:02:57:08:c1:a4:86:11:7f:28:
                    dd:a4:e2:7b:ea:37:b2:b7:1f:50:92:44:c6:5a:ad:
                    f7:82:a6:00:1e:0b:e1:e6:7b:bf:96:76:03:60:77:
                    7e:f7:91:79:30:9d:11:3e:e3:2b:80:c3:41:4e:c8:
                    18:db:1d:64:fa:0f:ef:b4:c7:a4:c9:4b:9f:ff:a4:
                    f4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F1:F7:57:02:2C:FB:47:16:8E:93:F8:C6:F2:A7:4D:D1:1B:BB:41
            X509v3 Authority Key Identifier:
                keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393033303a3a2f34342d3434203d3e20323135323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:9030::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:c2:ad:fb:21:4a:47:d2:ed:68:35:05:e6:ed:29:97:08:
         35:94:4a:7d:30:5b:4b:26:48:a1:7d:5b:72:e5:89:7f:a6:e9:
         3c:70:73:8e:79:35:b4:95:b3:b6:0e:96:10:27:4e:3e:52:7e:
         38:9a:c7:42:da:aa:55:5a:fb:0b:b8:59:93:af:15:c2:68:d1:
         8a:be:66:4a:8f:ff:8d:24:b5:25:d3:1c:ca:85:92:b3:98:e5:
         50:6e:16:f6:ba:b3:4d:90:9f:3f:39:03:63:47:15:8e:e9:fc:
         24:a9:5c:8c:0e:d7:b7:fe:0e:09:64:e0:40:6a:15:9d:2c:98:
         a2:33:a3:49:70:93:a6:4f:66:db:76:1c:81:86:74:20:31:11:
         b7:b0:79:7f:bc:93:f1:6b:c8:f3:6f:15:05:1e:bc:12:93:bf:
         63:cf:95:10:97:36:a8:61:c8:36:cd:42:31:fc:9f:07:3f:29:
         a1:4b:97:22:19:8e:4b:8f:45:cd:fb:da:80:07:c2:3a:fd:7a:
         10:e8:41:27:89:31:82:54:63:89:53:19:a3:f2:aa:e3:9b:73:
         4c:51:96:86:b8:03:e6:d5:da:9a:9b:1e:18:22:df:d7:e3:56:
         02:c9:51:6f:d7:34:bc:ce:db:0b:ac:ff:1d:28:2b:fb:c8:44:
         08:25:d8:b1
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgITB6oZzrPq5WrR9q3a8D5VGoNNQTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0ODhCRDg2QUZEQjFCRTIzOEUxRTNFQURFODVBMDUyMEIy
QUY2NkRGMB4XDTI0MDMyODAwMjAzNFoXDTI1MDMyNzAwMjUzNFowMzExMC8GA1UE
AxMoQzZGMUY3NTcwMjJDRkI0NzE2OEU5M0Y4QzZGMkE3NEREMTFCQkI0MTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALSi4EYWtc6tXzMD8iWllUkPR5im
BGlzZh0kFldsCbNg48f7/wvip+JSW1FLqj/5R3SOuLAV89TvH9RpPzXOejKX6bVI
ANggMzL0y9HLizm/M/WqglzQHZ9Q/YRc9Acztl/sXsMaPVYfXVK0cra6Dlp53TTC
1FklnEUJMH1U873cIJPDGY2D73WactAwlfyvHIHKq855jabt5O97wZcSJHmhDmJB
Q/X/b9J7mrwoUNYZ6qmC8nkMdhqcAlcIwaSGEX8o3aTie+o3srcfUJJExlqt94Km
AB4L4eZ7v5Z2A2B3fveReTCdET7jK4DDQU7IGNsdZPoP77THpMlLn/+k9EcCAwEA
AaOCAoUwggKBMB0GA1UdDgQWBBTG8fdXAiz7RxaOk/jG8qdN0Ru7QTAfBgNVHSME
GDAWgBRIi9hq/bG+I44ePq3oWgUgsq9m3zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS9lY2IzMDMyMi05NGY3LTRlNjEtODY5MS01YzFiNjExYjBh
OTUvMS80ODhCRDg2QUZEQjFCRTIzOEUxRTNFQURFODVBMDUyMEIyQUY2NkRGLmNy
bDCBngYIKwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5j
LnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0
MS1iY2MxLTI3NjU0M2EyNWM3ZC8wLzQ4OEJEODZBRkRCMUJFMjM4RTFFM0VBREU4
NUEwNTIwQjJBRjY2REYuY2VyMIG3BggrBgEFBQcBCwSBqjCBpzCBpAYIKwYBBQUH
MAuGgZdyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2VjYjMwMzIyLTk0ZjctNGU2MS04NjkxLTVjMWI2MTFiMGE5NS8xLzMyNjEzMDYx
M2EzNjMwMzQzNDNhMzkzMDMzMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMjMx
MzUzMjMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUH
AQcBAf8EEzARMA8EAgACMAkDBwQqCmBEkDAwDQYJKoZIhvcNAQELBQADggEBAH/A
wq37IUpH0u1oNQXm7SmXCDWUSn0wW0smSKF9W3LliX+m6Txwc455NbSVs7YOlhAn
Tj5Sfjiax0LaqlVa+wu4WZOvFcJo0Yq+ZkqP/40ktSXTHMqFkrOY5VBuFva6s02Q
nz85A2NHFY7p/CSpXIwO17f+Dglk4EBqFZ0smKIzo0lwk6ZPZtt2HIGGdCAxEbew
eX+8k/FryPNvFQUevBKTv2PPlRCXNqhhyDbNQjH8nwc/KaFLlyIZjkuPRc372oAH
wjr9ehDoQSeJMYJUY4lTGaPyquObc0xRloa4A+bV2pqbHhgi39fjVgLJUW/XNLzO
2wus/x0oK/vIRAgl2LE=
-----END CERTIFICATE-----
Generated at Wed Dec 11 17:13:13 2024 by rpki-client on console-fra.rpki-client.org