Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS141892.roa
File:                     AS141892.roa (raw, json)
Hash identifier:          mlFG9vBssiVBSwbsLtyNPGLfS573wHUgE99T0WAwc4U=
Subject key identifier:   4D:69:EF:A2:4D:03:B4:73:7E:62:77:1D:2D:7D:AA:E0:4D:BB:9C:7E
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       378E4FA294E506A518D38B4531067AC8351D399D
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS141892.roa
Signing time:             Thu 23 May 2024 16:49:13 +0000
ROA not before:           Thu 23 May 2024 16:44:13 +0000
ROA not after:            Thu 22 May 2025 16:49:13 +0000
asID:                     141892
IP address blocks:        2a0f:85c1:3c6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jul 2024 13:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8e:4f:a2:94:e5:06:a5:18:d3:8b:45:31:06:7a:c8:35:1d:39:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: May 23 16:44:13 2024 GMT
            Not After : May 22 16:49:13 2025 GMT
        Subject: CN=4D69EFA24D03B4737E62771D2D7DAAE04DBB9C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1d:7f:bf:cc:d0:99:49:46:57:39:f2:34:80:
                    42:3d:c7:35:64:c9:d5:88:25:27:4f:c0:6d:3d:73:
                    f6:96:e9:ed:9d:f5:fc:9d:c6:52:ca:6a:9e:65:ef:
                    b3:cb:d1:87:f5:98:8a:36:cf:81:39:3e:48:f0:f3:
                    e6:7d:5d:72:ad:48:cc:24:08:51:ba:e9:0f:97:fb:
                    3d:9b:e0:2f:06:ab:f2:c8:85:37:62:89:96:cb:33:
                    aa:88:3e:92:fe:18:e3:b5:27:6f:0f:e3:50:b1:63:
                    92:e5:a9:b2:78:ce:33:28:d9:9e:18:94:d8:cf:f6:
                    f5:71:14:9f:ce:6a:33:49:6a:2e:fa:4b:35:5f:53:
                    2b:96:77:f2:37:01:18:b1:f0:10:91:11:a8:3a:4e:
                    40:70:4a:a6:37:e6:53:1c:a7:5f:9a:88:60:e6:90:
                    0d:62:87:33:86:e4:9d:4d:b7:cc:0d:0d:33:c3:2d:
                    0d:06:d0:4d:95:a5:0e:4a:3a:7a:f5:41:b6:4f:17:
                    ec:fb:29:0a:9e:ca:79:72:19:8d:b2:d1:26:c9:ce:
                    b4:4f:5a:78:df:e1:31:e3:03:94:1d:c3:ff:5b:4f:
                    03:14:52:fd:5f:aa:da:c3:cd:93:1e:e9:df:9b:cc:
                    ff:c3:81:7a:9f:1f:83:2c:76:07:cb:7b:bb:3e:6d:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:69:EF:A2:4D:03:B4:73:7E:62:77:1D:2D:7D:AA:E0:4D:BB:9C:7E
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS141892.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:3c6::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:9b:1a:dc:9d:6e:ce:27:a8:97:ab:93:e5:d9:3e:42:76:a0:
         f8:97:e0:c2:eb:a1:bc:49:a1:e2:f8:2e:a0:dd:2d:d6:fc:a0:
         b0:93:e5:72:1b:10:87:f2:5c:b7:53:40:c1:b1:26:f0:f9:ce:
         75:fd:42:b8:6c:23:c2:ca:88:32:95:76:df:bf:37:0b:02:f6:
         ac:27:b2:89:25:19:c5:82:fb:3e:4a:c4:cb:c9:81:7d:16:d3:
         4b:7a:75:26:ae:63:32:f1:11:80:5b:49:08:46:6c:26:7b:0d:
         32:eb:29:8b:a3:2e:0f:3d:cc:71:29:4a:db:96:2a:4a:e1:e7:
         78:98:cb:f1:ba:98:20:60:59:56:e2:e4:6c:a0:ae:97:2a:49:
         15:60:92:d8:e1:53:91:e8:15:96:3f:76:60:b4:d6:2b:a3:87:
         1e:db:ee:cf:fd:23:6b:3a:cf:e7:66:0f:8f:fa:ac:4c:03:ec:
         30:6d:3c:3b:f0:a8:5f:60:af:6d:fc:c5:93:23:b8:d0:3c:fb:
         d5:51:a7:10:3d:76:a2:45:33:12:d2:7e:ab:69:e9:2b:80:19:
         61:40:15:b7:13:63:31:94:8c:c9:73:c2:53:4c:c9:f2:6a:a7:
         ff:14:32:bd:cc:d7:7d:94:bb:0c:4e:57:22:e5:14:dc:64:e6:
         a5:40:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 22:48:20 2024 by rpki-client on console-ams.rpki-client.org