Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS210376.roa
File:                     AS210376.roa (raw, json)
Hash identifier:          WRYYXuFvw+8WHfh/RWD7up+kdvqVWlO4yHgCnwzpCmA=
Subject key identifier:   B3:23:79:19:F9:BD:98:59:2C:F6:39:27:8F:3A:0F:70:1F:21:97:78
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       74D364A38F55D1D6E5D4AE6452654DD92A75D23C
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS210376.roa
Signing time:             Thu 23 May 2024 16:49:09 +0000
ROA not before:           Thu 23 May 2024 16:44:09 +0000
ROA not after:            Thu 22 May 2025 16:49:09 +0000
asID:                     210376
IP address blocks:        2a0f:85c1:29::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jul 2024 20:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d3:64:a3:8f:55:d1:d6:e5:d4:ae:64:52:65:4d:d9:2a:75:d2:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: May 23 16:44:09 2024 GMT
            Not After : May 22 16:49:09 2025 GMT
        Subject: CN=B3237919F9BD98592CF639278F3A0F701F219778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:a8:80:ff:60:be:c3:8a:e9:94:29:4f:de:
                    76:5d:d3:05:bc:a4:3b:b8:9f:95:a6:35:f3:80:3a:
                    c4:9e:df:0e:b2:d6:06:16:45:c6:e2:15:aa:b5:54:
                    41:91:b1:b0:01:7f:b4:0e:86:f2:05:e5:19:7c:4b:
                    ca:6b:fe:2f:e5:26:6e:74:05:1f:a1:f2:91:e1:3a:
                    a6:25:6b:d0:4d:8e:b5:52:e3:be:e8:c8:4c:58:25:
                    6e:72:07:a4:f6:7b:89:20:75:f8:87:1e:ab:bf:f7:
                    f6:9f:c0:32:ae:e1:88:7c:17:6c:fe:1d:ad:a9:0b:
                    e5:16:0b:31:5e:a9:d0:77:53:9d:9f:8f:99:6c:67:
                    83:a3:a9:73:2a:c0:af:91:99:ca:fc:b2:34:a9:33:
                    ed:89:3f:fe:43:60:4c:71:84:dd:8f:7b:1d:10:93:
                    15:44:6a:3a:cc:e5:d4:d7:9d:3b:e0:5a:4c:15:47:
                    77:47:34:ec:a7:48:ed:08:d3:0b:54:7c:92:ea:76:
                    61:4c:39:14:27:17:3d:5d:9f:35:ab:ad:90:0b:2e:
                    e8:b4:85:73:60:b0:14:82:c4:56:10:39:1a:c7:2d:
                    d1:e0:2c:ec:bc:b7:4f:3d:34:c2:dd:1e:73:e8:1c:
                    db:a7:4a:17:6e:13:9e:bf:4a:42:86:d6:8b:3a:ac:
                    14:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:23:79:19:F9:BD:98:59:2C:F6:39:27:8F:3A:0F:70:1F:21:97:78
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS210376.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:29::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:21:0c:a9:3f:6c:9d:24:7b:c5:c4:2c:84:89:fd:29:70:7c:
         21:16:b1:64:a2:18:c0:c5:79:17:2b:b1:a1:58:3d:a8:b2:10:
         4c:ab:03:d8:3e:1c:80:6d:b4:0e:1d:97:0e:6d:e8:aa:fd:f2:
         ce:81:ed:6c:cb:b4:89:0b:c4:bc:2b:77:b6:be:94:a3:70:76:
         b8:b0:4b:c8:96:ab:9c:5c:96:b1:c5:34:56:74:46:b7:81:50:
         7c:63:6f:cc:0c:5e:fc:52:7d:6e:3c:cc:9f:e5:61:a7:cf:bc:
         fc:ae:94:79:62:ae:11:ac:bb:33:9a:4e:93:82:6c:72:9e:ff:
         f0:fb:5e:9f:95:0a:e1:b0:68:a6:9c:8e:38:b6:e0:2b:7b:bb:
         b2:c5:3d:61:83:78:a8:b1:0b:7a:3c:20:82:c8:24:e0:79:fb:
         5b:60:c2:f6:60:c8:aa:9c:30:36:c7:11:7b:aa:b0:36:17:ff:
         5f:e6:8a:4a:6b:c7:cf:82:30:cd:6c:db:64:59:22:70:83:3b:
         90:63:f1:2c:57:c8:d1:79:5e:45:06:48:e4:09:37:8e:dd:1c:
         1e:55:72:55:ba:ee:c1:fc:3f:5d:fc:48:fe:50:5b:0a:6c:63:
         93:6d:62:dc:39:14:77:40:ce:98:29:08:df:a8:81:51:69:66:
         ea:6a:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 04:39:55 2024 by rpki-client on console-fra.rpki-client.org