Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215087.roa
File:                     AS215087.roa (raw, json)
Hash identifier:          gyh5QbkyZkuR+JXlo7QNmW1nm+7VPT5CaNEIgaxwkSU=
Subject key identifier:   79:87:C6:00:88:72:E5:09:DB:1D:31:3A:21:F5:F7:8A:B9:F1:65:5A
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       5BD7BA83292D79E91F8BBE49E772671004C44C43
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215087.roa
Signing time:             Thu 23 May 2024 16:49:12 +0000
ROA not before:           Thu 23 May 2024 16:44:12 +0000
ROA not after:            Thu 22 May 2025 16:49:12 +0000
asID:                     215087
IP address blocks:        2a0f:85c1:3b6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jul 2024 20:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d7:ba:83:29:2d:79:e9:1f:8b:be:49:e7:72:67:10:04:c4:4c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: May 23 16:44:12 2024 GMT
            Not After : May 22 16:49:12 2025 GMT
        Subject: CN=7987C6008872E509DB1D313A21F5F78AB9F1655A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:d2:3b:dd:8e:3c:77:b8:de:5a:a1:bf:75:
                    b7:84:8b:75:e2:99:4c:4b:b2:35:0c:3d:04:07:3a:
                    c7:2e:e8:da:6b:e4:45:bf:ac:f0:f8:bc:5a:ad:55:
                    d6:c7:f5:c8:3b:a1:cf:06:a3:17:b4:bb:c7:f9:95:
                    3f:c2:75:02:16:82:40:f8:3d:fd:7e:0f:04:b4:78:
                    84:36:db:c0:26:0d:dd:bb:4d:46:d7:8a:fa:0d:b2:
                    55:1e:cb:8f:7f:3b:e0:61:86:a0:56:b0:76:ff:99:
                    97:de:fd:0d:7a:ce:eb:c9:db:66:34:10:d1:65:37:
                    be:6b:e7:0d:a5:51:b8:01:41:e3:f4:61:73:ad:72:
                    44:a6:78:76:00:97:60:03:bc:b8:e8:55:5d:ef:da:
                    1b:24:3e:7f:f7:17:86:50:f6:ba:f4:36:fe:86:8b:
                    9f:2d:98:cc:da:a4:f5:4e:b8:b3:73:64:26:50:3e:
                    30:64:94:bc:40:2f:20:69:43:c2:54:d1:ea:b4:c1:
                    01:cb:6b:cf:e0:e3:77:d0:87:07:eb:8f:b8:6a:1f:
                    67:92:e5:06:3c:b2:75:be:2a:a4:c4:7d:e7:aa:7d:
                    76:71:5f:c3:be:7a:27:4f:ba:58:3b:6a:80:6b:10:
                    c0:84:18:ca:10:ee:a4:64:71:61:3a:06:13:91:b1:
                    a8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:87:C6:00:88:72:E5:09:DB:1D:31:3A:21:F5:F7:8A:B9:F1:65:5A
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215087.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:3b6::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:c5:a0:6e:ab:77:11:95:0b:75:c8:d6:7f:af:7a:be:e2:
         00:29:ca:00:e4:3a:5b:68:c7:81:d9:2a:e0:5f:93:4d:9c:bd:
         ae:fa:3b:9c:83:77:d1:4a:3e:8c:1a:1d:75:7c:5f:94:7a:29:
         c1:83:ba:6d:52:42:38:94:29:ea:ae:d2:73:0e:22:18:8c:00:
         5b:e1:3a:0b:46:4c:c8:70:7f:a2:a0:b4:a3:e0:cf:74:97:87:
         6a:5c:88:52:6b:82:2d:63:be:c9:11:f1:7c:89:80:60:06:16:
         1f:39:15:1c:24:81:13:01:99:ea:1b:36:51:64:8d:53:55:f2:
         34:ab:ef:17:d2:30:e8:ec:fc:84:25:c6:43:43:de:6c:48:55:
         eb:c4:aa:4a:53:af:7f:93:c0:f9:0c:39:df:24:b6:46:19:ed:
         90:3d:c8:66:ae:16:f0:30:84:74:07:47:c6:bb:50:19:06:b8:
         74:f0:2b:ac:1c:77:52:62:cb:6b:e0:1c:01:ec:4e:66:c0:b5:
         4c:8e:52:1b:9f:a5:b3:d1:1c:62:ba:67:84:2c:ed:49:ed:84:
         dd:00:e5:83:22:aa:60:5a:63:ab:24:4a:83:bf:23:b5:8e:d0:
         a7:9d:6b:64:9b:cd:d4:a5:4a:aa:cd:14:c4:15:fa:9d:ac:32:
         a1:b4:75:40
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUW9e6gykteekfi75J53JnEATETEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFlNDQzNzAyOTY1OTUzOWY1NGY5MDBiMzVlNDNiZTA2
YTk0YjM3YjAeFw0yNDA1MjMxNjQ0MTJaFw0yNTA1MjIxNjQ5MTJaMDMxMTAvBgNV
BAMTKDc5ODdDNjAwODg3MkU1MDlEQjFEMzEzQTIxRjVGNzhBQjlGMTY1NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u9I73Y48d7jeWqG/dbeEi3Xi
mUxLsjUMPQQHOscu6Npr5EW/rPD4vFqtVdbH9cg7oc8Goxe0u8f5lT/CdQIWgkD4
Pf1+DwS0eIQ228AmDd27TUbXivoNslUey49/O+BhhqBWsHb/mZfe/Q16zuvJ22Y0
ENFlN75r5w2lUbgBQeP0YXOtckSmeHYAl2ADvLjoVV3v2hskPn/3F4ZQ9rr0Nv6G
i58tmMzapPVOuLNzZCZQPjBklLxALyBpQ8JU0eq0wQHLa8/g43fQhwfrj7hqH2eS
5QY8snW+KqTEfeeqfXZxX8O+eidPulg7aoBrEMCEGMoQ7qRkcWE6BhORsajNAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUeYfGAIhy5QnbHTE6IfX3irnxZVowHwYDVR0j
BBgwFoAUWuRDcClllTn1T5ALNeQ74GqUs3swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmMyMGFkZDMtYTg4ZS00YmIyLWE4NGQtNTVkYTIxMjhm
MTk2LzAvNUFFNDQzNzAyOTY1OTUzOUY1NEY5MDBCMzVFNDNCRTA2QTk0QjM3Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d1UkRjQ2xsbFRuMVQ1QUxOZVE3NEdx
VXMzcy5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2ZjMjBhZGQzLWE4OGUt
NGJiMi1hODRkLTU1ZGEyMTI4ZjE5Ni8wL0FTMjE1MDg3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+F
wQO2MA0GCSqGSIb3DQEBCwUAA4IBAQAmucWgbqt3EZULdcjWf696vuIAKcoA5Dpb
aMeB2SrgX5NNnL2u+jucg3fRSj6MGh11fF+UeinBg7ptUkI4lCnqrtJzDiIYjABb
4ToLRkzIcH+ioLSj4M90l4dqXIhSa4ItY77JEfF8iYBgBhYfORUcJIETAZnqGzZR
ZI1TVfI0q+8X0jDo7PyEJcZDQ95sSFXrxKpKU69/k8D5DDnfJLZGGe2QPchmrhbw
MIR0B0fGu1AZBrh08CusHHdSYstr4BwB7E5mwLVMjlIbn6Wz0RxiumeELO1J7YTd
AOWDIqpgWmOrJEqDvyO1jtCnnWtkm83UpUqqzRTEFfqdrDKhtHVA
-----END CERTIFICATE-----
Generated at Wed Jul 17 04:39:55 2024 by rpki-client on console-fra.rpki-client.org