Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323132343737.roa
File:                     38322e3131382e32362e302f32342d3234203d3e20323132343737.roa (raw, json)
Hash identifier:          aiOeDal6m+bAQzSvZkV64kXDrptEZ/U0hTQdTiMW74s=
Subject key identifier:   2F:A1:2F:6F:1D:04:18:87:2E:D2:CF:E7:56:F1:A3:3E:B4:F1:19:3E
Certificate issuer:       /CN=0d059f10d18d00052c808eb8069f90d47e30564a
Certificate serial:       6D882D73B16257BF0BC14AE030E7AECB3425A1F5
Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323132343737.roa
Signing time:             Sun 03 Sep 2023 00:26:10 +0000
ROA not before:           Sun 03 Sep 2023 00:21:10 +0000
ROA not after:            Sun 01 Sep 2024 00:26:10 +0000
asID:                     212477
IP address blocks:        82.118.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 19:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:88:2d:73:b1:62:57:bf:0b:c1:4a:e0:30:e7:ae:cb:34:25:a1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a
        Validity
            Not Before: Sep  3 00:21:10 2023 GMT
            Not After : Sep  1 00:26:10 2024 GMT
        Subject: CN=2FA12F6F1D0418872ED2CFE756F1A33EB4F1193E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:74:04:f9:de:67:4c:72:5a:36:51:2c:dd:
                    9a:9f:be:2b:07:0d:2e:52:79:95:f1:3d:e7:7c:57:
                    9a:0c:81:fc:f7:80:56:10:eb:98:2f:0a:74:80:1a:
                    ba:f8:44:24:7a:f6:87:6f:fc:21:56:1a:62:cb:d9:
                    43:c5:7f:5b:d0:ed:ad:3d:28:1e:0f:33:1b:31:ed:
                    06:25:f3:62:e9:71:d1:7e:fc:9d:f6:a8:7e:f3:c2:
                    6e:ae:2d:ac:2a:1e:59:b3:76:81:3c:65:17:14:66:
                    96:1b:3c:2b:7c:e3:89:6f:77:d3:52:f5:55:58:44:
                    d1:e4:61:31:fe:06:6c:28:93:aa:a3:bc:8a:e0:da:
                    63:dc:40:3a:27:0e:91:c8:5e:32:ab:01:11:d2:26:
                    0b:c5:57:40:d6:40:a0:88:42:95:27:5e:4d:1e:2c:
                    f6:18:26:dd:43:0e:a6:4d:65:69:3e:d1:08:24:6c:
                    ed:96:ec:8b:f7:35:7e:86:cb:1c:f1:b0:39:b8:e2:
                    88:29:b9:85:bd:4b:df:83:23:e7:ae:85:cb:78:cb:
                    8c:0d:9a:c3:29:fb:a7:aa:72:62:a2:26:d0:eb:fa:
                    d1:2d:62:93:fc:4f:ea:21:32:59:6c:6e:80:e5:8d:
                    90:49:95:62:83:8d:ad:0f:94:9a:e9:1f:82:1e:0e:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A1:2F:6F:1D:04:18:87:2E:D2:CF:E7:56:F1:A3:3E:B4:F1:19:3E
            X509v3 Authority Key Identifier:
                keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/38322e3131382e32362e302f32342d3234203d3e20323132343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.118.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:28:63:df:28:40:b9:42:af:89:03:be:7b:8b:25:13:24:44:
         16:3e:a1:e5:45:7a:14:d5:88:14:37:5a:ec:a1:5a:dd:f2:d0:
         94:76:cd:77:14:0a:64:c0:53:9b:08:e2:b8:81:a9:e7:49:bb:
         de:c9:17:f8:7c:06:ce:3a:55:46:f5:16:3a:6f:5c:17:07:45:
         89:c9:7b:1c:7f:d8:dd:9b:fe:1a:af:1f:bb:82:56:d3:47:a4:
         e8:ba:bd:d2:b6:a9:ee:6f:46:af:0c:f6:ca:02:8d:29:5e:6a:
         1f:07:63:9f:a5:86:09:18:f8:80:6d:e0:c5:12:ef:c9:dc:4d:
         1e:86:7d:28:02:e5:08:c6:9c:d5:bc:30:a2:82:85:88:98:48:
         40:63:64:da:75:41:9c:b5:be:42:e9:a1:32:fe:95:81:b8:3c:
         ab:68:13:7e:2f:d1:cf:1e:9d:07:d8:bb:44:e9:c8:cc:e4:ee:
         8b:ae:c6:a6:29:9a:8e:ae:b8:6d:a6:f5:98:50:23:db:57:af:
         d4:2d:a3:7d:0c:f9:8a:f7:bf:50:97:a0:c2:85:a3:05:88:82:
         3c:35:05:57:7b:72:a6:09:bd:36:f6:0c:d7:bb:2f:ac:0e:9b:
         c1:f4:a0:ab:dd:0f:d9:d9:70:42:54:fe:e4:f4:f1:60:be:1f:
         e1:42:58:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:12:24 2024 by rpki-client on console-ams.rpki-client.org