Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393035303a3a2f34342d3434203d3e20323135353930.roa
File:                     326130613a363034343a393035303a3a2f34342d3434203d3e20323135353930.roa (raw, json)
Hash identifier:          4s76+hjle7KOmr0oXZaew7Z44NKxKS5Gb9h6WpO2Mqk=
Subject key identifier:   66:25:0B:24:60:E3:EA:63:8C:C8:22:17:DD:21:51:4F:D5:ED:DB:FF
Certificate issuer:       /CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
Certificate serial:       6694E223946A21CC06A944D59125F1C47874DE18
Authority key identifier: 48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393035303a3a2f34342d3434203d3e20323135353930.roa
Signing time:             Sat 18 May 2024 14:05:16 +0000
ROA not before:           Sat 18 May 2024 14:00:16 +0000
ROA not after:            Sat 17 May 2025 14:05:16 +0000
asID:                     215590
IP address blocks:        2a0a:6044:9050::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:94:e2:23:94:6a:21:cc:06:a9:44:d5:91:25:f1:c4:78:74:de:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF
        Validity
            Not Before: May 18 14:00:16 2024 GMT
            Not After : May 17 14:05:16 2025 GMT
        Subject: CN=66250B2460E3EA638CC82217DD21514FD5EDDBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:ec:02:c3:67:75:7e:c0:ce:1a:75:b8:68:
                    0b:3f:c9:6e:ed:56:aa:c8:51:21:8b:dc:63:68:93:
                    91:f9:4d:20:d7:e7:43:ac:eb:12:c7:6b:21:23:d7:
                    37:3a:6d:b3:c7:10:f8:01:7a:d3:49:4c:a3:d2:ec:
                    eb:a1:66:11:20:84:e0:45:c7:ad:74:7f:a0:03:b4:
                    09:3c:50:99:27:c9:59:be:3e:c4:63:c5:06:db:3a:
                    6b:56:e0:1e:17:ad:70:3c:fc:21:0a:72:5e:20:ff:
                    82:5a:51:bb:46:b1:9d:23:ed:fd:36:b7:a2:9e:54:
                    d0:5c:4a:8c:60:55:e6:20:0e:eb:85:e6:3a:16:f4:
                    3b:e5:87:26:84:53:04:78:b1:35:dc:83:20:4a:15:
                    77:90:17:ea:fb:21:97:d3:a6:9d:17:03:0c:82:db:
                    f4:46:c7:88:a0:25:54:33:25:6b:67:1e:e2:af:92:
                    62:6a:04:83:9f:5e:1b:58:e8:9e:0e:c2:30:ea:b1:
                    c3:ee:20:0e:7e:36:60:59:c8:a6:8c:a7:90:b8:38:
                    2a:d0:b0:b3:c0:b0:ca:64:23:9e:a9:08:b9:91:a1:
                    87:b5:0a:83:dc:84:a8:83:d4:fb:cf:c1:13:35:12:
                    89:30:ee:cc:36:85:1d:99:55:24:7e:8e:8a:ff:91:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:25:0B:24:60:E3:EA:63:8C:C8:22:17:DD:21:51:4F:D5:ED:DB:FF
            X509v3 Authority Key Identifier:
                keyid:48:8B:D8:6A:FD:B1:BE:23:8E:1E:3E:AD:E8:5A:05:20:B2:AF:66:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/488BD86AFDB1BE238E1E3EADE85A0520B2AF66DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ecb30322-94f7-4e61-8691-5c1b611b0a95/1/326130613a363034343a393035303a3a2f34342d3434203d3e20323135353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:9050::/44

    Signature Algorithm: sha256WithRSAEncryption
         c9:f7:2b:1e:d9:8d:cc:d3:2a:86:84:4d:2c:5e:b3:85:f1:7e:
         fb:45:b7:c6:b8:0a:7a:e8:19:68:17:89:60:9e:aa:a9:e0:df:
         3c:4a:ac:a8:d3:b7:c2:2f:91:55:e6:05:e3:1c:9d:68:6e:da:
         cd:8f:3c:0c:72:55:d7:4c:80:45:04:cd:b6:2b:3f:52:70:1a:
         2c:8e:c4:42:8e:61:49:d6:d1:8d:30:14:5c:a2:36:ef:0f:bb:
         11:80:9f:de:38:35:f1:74:57:79:d7:61:b6:24:d7:9c:81:5f:
         7d:d6:1a:7a:b7:f4:e4:37:45:e8:f4:84:71:31:1f:a6:f9:6d:
         f8:06:0d:70:b2:b3:1d:8e:68:14:b6:14:58:95:bb:b6:43:37:
         13:16:ff:bc:58:39:a5:46:df:42:ab:cf:3e:d6:f3:b6:86:f9:
         1f:3b:35:a8:62:d2:93:85:7b:a1:fb:f2:11:c4:b2:8b:57:9d:
         b8:b7:71:44:32:a6:b9:6a:2b:2b:ad:53:4e:a4:22:7a:95:58:
         34:4d:8a:97:90:2b:de:7b:e4:70:17:c1:61:42:3b:4d:d3:64:
         f6:f3:51:dc:10:21:d0:c4:37:f2:d1:03:e8:92:52:a2:e6:ef:
         81:f7:6e:03:4e:69:a2:6a:68:13:ef:ec:e1:6c:f0:20:7e:da:
         89:5d:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org