Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a366434303a3a2f34322d3432203d3e20323136333630.roa
File:                     326130373a353463373a366434303a3a2f34322d3432203d3e20323136333630.roa (raw, json)
Hash identifier:          l6IAGSay1QbED9E2YWNz1+wgHGwKUfriNfzCvnSTL58=
Subject key identifier:   8C:3D:11:DB:7B:7B:81:33:61:34:DF:83:67:AF:C1:04:C2:56:82:07
Certificate issuer:       /CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
Certificate serial:       66458A0A344F1B0E51CE021CAE5B45AFF7210D4C
Authority key identifier: F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a366434303a3a2f34322d3432203d3e20323136333630.roa
Signing time:             Mon 04 Mar 2024 01:06:53 +0000
ROA not before:           Mon 04 Mar 2024 01:01:53 +0000
ROA not after:            Mon 03 Mar 2025 01:06:53 +0000
asID:                     216360
IP address blocks:        2a07:54c7:6d40::/42 maxlen: 42

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 29 Jun 2024 07:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:45:8a:0a:34:4f:1b:0e:51:ce:02:1c:ae:5b:45:af:f7:21:0d:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1ABD9429F3A733668CAC698C113A9E343C99B3E
        Validity
            Not Before: Mar  4 01:01:53 2024 GMT
            Not After : Mar  3 01:06:53 2025 GMT
        Subject: CN=8C3D11DB7B7B81336134DF8367AFC104C2568207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:66:cd:34:85:e8:65:ab:9d:ff:28:45:82:71:
                    51:dc:6f:58:6a:7d:88:99:28:e0:a2:fa:99:f0:d6:
                    f0:92:58:3d:65:04:96:03:ad:df:1a:51:8c:74:0f:
                    08:4b:7b:91:5d:70:e3:51:a2:25:0f:7c:26:e8:ef:
                    44:ee:12:a5:a5:83:8d:cf:8c:3f:3a:f4:10:55:9c:
                    05:ae:89:05:76:0b:d1:ae:d8:e3:96:af:81:20:b6:
                    e5:a0:cb:82:24:ba:fb:53:c6:b7:c9:4e:f8:a3:b4:
                    09:22:6d:24:a7:25:6a:71:ed:fb:c9:7b:79:42:8a:
                    fa:0e:c3:8f:c5:1b:56:96:17:72:89:07:5f:66:33:
                    c2:20:a0:92:bd:b6:56:d1:a1:6b:c7:d8:59:2a:1c:
                    5c:2d:ed:7e:1b:b7:26:3f:c2:fa:6c:67:21:75:fe:
                    8a:f7:06:ec:71:ff:e4:91:58:1a:b5:17:56:d4:c7:
                    26:47:44:48:2f:3b:76:4e:28:30:54:a3:da:f1:29:
                    2d:e3:4e:e2:f3:52:4a:6f:fb:c2:59:79:42:5c:62:
                    92:b7:ad:a5:83:05:c4:ba:11:cb:d0:bb:88:34:52:
                    2b:55:85:13:bf:4f:b3:8d:38:b9:93:8d:8c:09:a3:
                    7f:7c:18:0c:6a:d9:d4:b3:f9:f7:93:b7:8c:1e:1f:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3D:11:DB:7B:7B:81:33:61:34:DF:83:67:AF:C1:04:C2:56:82:07
            X509v3 Authority Key Identifier:
                keyid:F1:AB:D9:42:9F:3A:73:36:68:CA:C6:98:C1:13:A9:E3:43:C9:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F1ABD9429F3A733668CAC698C113A9E343C99B3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f536a1e4-3bf0-4352-9061-66694d2bcbd3/0/326130373a353463373a366434303a3a2f34322d3432203d3e20323136333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c7:6d40::/42

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:97:80:29:96:a1:fd:a7:bb:17:c8:52:4b:64:a8:e5:d9:
         cc:66:93:0c:aa:88:da:31:d5:94:5d:50:14:47:b7:0b:59:c3:
         f4:e2:fc:c8:72:62:1d:b1:ad:21:29:4f:e5:7b:18:72:06:f4:
         32:fd:20:b8:c0:30:50:c4:a3:29:94:bb:13:d1:b8:97:d3:15:
         d4:d5:79:f2:6c:c7:06:f3:b1:52:39:36:ef:9e:67:92:42:37:
         16:d2:47:4a:f8:10:c6:82:0f:4d:15:c9:7f:cd:d3:e0:13:d4:
         e0:e8:81:22:99:20:3b:d4:cf:f7:62:c6:ce:ec:0d:db:35:85:
         a9:85:c6:f0:71:04:bf:cb:97:67:ec:4a:71:14:18:f7:e8:7f:
         7c:d3:08:b7:94:89:15:5b:6d:1b:02:93:9e:92:66:c3:4d:8e:
         fa:a0:23:b4:6b:63:dd:db:aa:69:de:51:d9:73:52:1c:37:1e:
         67:31:01:a9:96:03:77:0e:9d:5a:a8:58:f8:71:32:19:f0:ec:
         ee:07:f1:12:ea:58:a9:44:90:d8:49:be:90:2b:12:c5:f7:30:
         ab:98:9e:bb:1c:1e:c3:f2:f3:0a:3a:5c:2a:b6:04:5b:e7:d4:
         eb:a0:34:9a:00:cd:9f:50:32:e1:69:cb:d2:4c:25:af:73:c4:
         37:57:bc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 23:14:45 2024 by rpki-client on console-fra.rpki-client.org