Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207764.roa
File:                     AS207764.roa (raw, json)
Hash identifier:          dMWQaOI1/2SYep4ZzJ8MD19EbbB5EBAgnWn73AQ82Ek=
Subject key identifier:   3F:15:5A:5A:48:EA:7F:2B:5E:1F:6C:8C:31:E6:FC:B2:F8:FA:2F:FB
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       32E0244E4B961324F3ACE01E84BB83217BDC8A8E
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207764.roa
Signing time:             Thu 23 May 2024 16:49:10 +0000
ROA not before:           Thu 23 May 2024 16:44:10 +0000
ROA not after:            Thu 22 May 2025 16:49:10 +0000
asID:                     207764
IP address blocks:        2a0f:85c1:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jul 2024 13:47:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e0:24:4e:4b:96:13:24:f3:ac:e0:1e:84:bb:83:21:7b:dc:8a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: May 23 16:44:10 2024 GMT
            Not After : May 22 16:49:10 2025 GMT
        Subject: CN=3F155A5A48EA7F2B5E1F6C8C31E6FCB2F8FA2FFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:89:b0:29:1b:7e:de:86:c1:14:ae:6f:82:35:
                    d3:4d:c2:87:cc:1d:a9:96:c4:11:79:22:e4:03:a8:
                    df:4f:a0:ed:04:b2:45:6b:49:f7:4b:27:e0:77:df:
                    b7:a0:35:46:48:68:34:9d:1f:0f:18:62:96:97:2d:
                    51:8d:9b:f5:5d:b3:ec:1f:68:12:30:1a:b7:18:b1:
                    5b:0b:e7:c2:bc:07:d7:4b:bb:1d:9d:93:b4:3e:54:
                    fb:90:72:07:39:e6:a4:a9:dd:6f:54:60:d3:18:6d:
                    9f:80:bf:ab:4a:78:33:fb:7c:79:23:82:e9:c9:64:
                    66:27:11:b5:67:c2:df:22:db:5f:8b:66:6e:34:3e:
                    01:7c:cb:cc:8a:63:40:26:42:14:99:63:c4:1c:32:
                    fb:44:23:51:9d:d6:75:b8:40:43:1a:99:7a:ff:8e:
                    8e:78:64:eb:c3:82:c5:c6:d1:b7:08:3b:a5:70:8b:
                    1d:b3:98:99:5d:0b:cc:24:d1:dc:54:40:16:5d:a2:
                    ad:1c:80:a1:6b:b5:82:39:8f:43:8b:4c:ca:e7:0b:
                    03:8e:16:aa:24:ed:96:80:31:ec:a4:7f:66:be:db:
                    ab:a1:73:9e:65:60:fb:7a:b5:97:f8:e9:1b:34:93:
                    e6:7d:2a:22:e7:1d:91:a8:8d:ad:76:a8:7c:45:e3:
                    d7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:15:5A:5A:48:EA:7F:2B:5E:1F:6C:8C:31:E6:FC:B2:F8:FA:2F:FB
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS207764.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:f7:ca:40:63:90:d4:1d:24:91:dd:81:94:13:ce:c2:af:4b:
         41:28:60:fc:1f:8b:c5:ab:05:75:3d:5e:23:0b:a3:05:5f:77:
         49:70:91:3f:fd:4e:96:92:5e:b1:40:15:64:96:ba:e5:89:f2:
         0d:87:96:ed:d2:43:b4:73:d7:93:a1:8d:8b:81:a0:a7:20:3a:
         63:5e:6f:5c:8b:2d:fd:e8:ee:6e:19:12:7c:9f:9d:68:f3:08:
         21:61:86:a3:ce:63:b9:53:e9:7a:b8:ee:61:e6:32:11:c8:a4:
         b9:9d:fd:8e:3e:dc:de:8a:d2:a6:ba:a6:a6:f2:a8:39:1c:f6:
         ff:8a:01:76:af:f7:5f:c8:10:fa:f8:10:50:2a:30:3f:48:31:
         37:f3:f0:e8:43:d5:49:1e:72:b7:fc:31:4f:37:4c:b9:41:16:
         43:75:5d:1f:e4:0d:db:d7:e1:e1:c9:4d:2f:f3:bc:38:a9:48:
         71:fc:24:fc:5a:02:e4:e0:e4:93:3c:12:82:bc:fe:68:c8:df:
         74:6c:bd:b4:d3:aa:31:14:a1:28:5e:55:df:f2:4a:fe:79:e6:
         71:e3:a2:6d:6f:9f:13:7d:eb:2b:a4:00:66:ba:28:a8:24:34:
         92:6a:95:1b:9c:56:6b:d3:36:07:9c:00:55:a5:ca:d7:ad:95:
         1f:90:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 22:48:20 2024 by rpki-client on console-ams.rpki-client.org