Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215216.roa
File:                     AS215216.roa (raw, json)
Hash identifier:          FGm4mKjZXZFr1J0YA+bIcC86WwsAlNqQXfg9Htgvqi4=
Subject key identifier:   1A:2F:CA:5E:77:5D:D4:34:AF:73:2C:A9:03:A6:70:23:6E:C3:A8:C7
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       5DD7258BD528100002742175DF2C4BE2B2AD3EB9
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215216.roa
Signing time:             Thu 23 May 2024 16:49:11 +0000
ROA not before:           Thu 23 May 2024 16:44:11 +0000
ROA not after:            Thu 22 May 2025 16:49:11 +0000
asID:                     215216
IP address blocks:        2a0f:85c1:3a8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jul 2024 20:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d7:25:8b:d5:28:10:00:02:74:21:75:df:2c:4b:e2:b2:ad:3e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: May 23 16:44:11 2024 GMT
            Not After : May 22 16:49:11 2025 GMT
        Subject: CN=1A2FCA5E775DD434AF732CA903A670236EC3A8C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:44:41:5f:4b:49:b0:d3:65:4f:c8:f9:f7:
                    b9:12:6b:3a:e8:d4:44:92:71:27:66:ec:52:53:a7:
                    a9:99:0f:a5:eb:46:1e:23:5b:c1:46:30:73:2a:4d:
                    a9:68:4e:9a:28:5a:68:f9:6a:47:c4:39:9f:4c:e7:
                    a5:29:1b:92:2e:cc:2c:d7:ad:a0:45:7e:04:6a:11:
                    dd:4d:6a:17:b4:a4:bd:eb:60:6f:c3:42:41:fb:cd:
                    b0:c2:1f:1d:e1:fa:0c:d6:ea:cb:14:c9:2a:2f:18:
                    15:3d:7d:fd:6a:f9:88:dd:e4:2c:ee:e7:2e:1a:82:
                    92:f5:39:ac:2f:42:e9:8a:cf:fa:38:d5:a2:9c:9b:
                    35:93:a0:d2:47:e3:b1:e4:56:49:3d:32:7f:f0:ce:
                    d0:44:8a:20:56:27:24:92:45:58:dd:39:45:82:86:
                    5c:ce:fe:97:44:37:be:4c:30:9e:a1:d9:c8:fc:e5:
                    bc:b7:f8:6e:73:5a:43:c7:d1:21:ab:8f:38:dd:2f:
                    fd:a7:6e:19:8b:9d:f9:55:96:be:e9:37:c8:19:28:
                    bc:55:5c:23:6e:a9:db:6d:d5:5f:63:2e:02:c1:63:
                    71:8b:4b:88:a4:93:e2:9a:c0:3e:0e:35:6f:67:e2:
                    cc:94:e4:b4:a7:f0:ad:74:a6:95:dc:68:40:be:56:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2F:CA:5E:77:5D:D4:34:AF:73:2C:A9:03:A6:70:23:6E:C3:A8:C7
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215216.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:3a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:07:c0:99:87:6a:aa:34:8a:3a:08:d4:29:24:6a:54:f3:2c:
         99:a3:0d:52:ad:5a:8f:7a:cd:ff:c0:c2:7d:dc:66:88:1a:c5:
         c8:f0:be:9e:63:a1:ef:8b:24:77:49:eb:68:a6:0b:a7:1c:73:
         f7:66:40:8a:83:d8:42:f1:36:14:c3:97:2f:a4:d7:64:c4:d8:
         1e:37:91:75:03:86:26:bc:72:7c:a3:59:20:63:18:7a:d5:b2:
         d6:cb:04:69:bc:1f:f7:ae:0d:bd:a9:51:85:17:62:59:cf:30:
         18:66:6e:06:78:9e:6c:0c:f1:4f:f3:d9:51:4b:5e:51:a3:fc:
         1a:f9:12:3b:4d:18:42:62:45:6e:c8:05:2c:47:01:51:19:19:
         ae:a3:c4:dd:c3:c9:fb:29:49:2f:df:41:37:96:7e:be:7e:02:
         08:8f:ae:cb:b8:50:b0:cb:d1:c0:71:4b:69:d0:f3:68:08:d8:
         ed:a3:9d:78:6a:0d:77:d7:61:f5:9f:b0:69:7d:60:a1:38:14:
         f9:53:66:28:ee:f4:04:3c:ec:6f:23:a9:7d:e5:42:e9:d2:7a:
         c2:00:44:2f:cf:f3:9c:40:46:57:c6:e7:6a:58:4e:4d:ff:74:
         c9:f0:a9:68:44:4a:2e:ac:05:16:b9:26:b1:5a:aa:c3:ce:86:
         7f:4f:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 04:39:55 2024 by rpki-client on console-fra.rpki-client.org