Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215516.roa
File:                     AS215516.roa (raw, json)
Hash identifier:          eCgjw8eGt0oyf456sOUZ3OXN95BLC1O0azLe/wLshzM=
Subject key identifier:   EE:D8:A9:1E:C6:80:EC:57:64:5B:F9:AB:4C:B9:14:27:FB:D6:02:E0
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       12716E51E7F8413C204A24F702F4C7F8C1F6C907
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215516.roa
Signing time:             Thu 23 May 2024 16:49:07 +0000
ROA not before:           Thu 23 May 2024 16:44:07 +0000
ROA not after:            Thu 22 May 2025 16:49:07 +0000
asID:                     215516
IP address blocks:        2a0f:85c1:366::/48 maxlen: 48
                          2a0f:85c1:380::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jul 2024 20:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:71:6e:51:e7:f8:41:3c:20:4a:24:f7:02:f4:c7:f8:c1:f6:c9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: May 23 16:44:07 2024 GMT
            Not After : May 22 16:49:07 2025 GMT
        Subject: CN=EED8A91EC680EC57645BF9AB4CB91427FBD602E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:71:fa:76:91:d3:65:47:c9:36:62:8d:7f:
                    09:da:27:d9:2c:cf:dd:40:f3:a9:18:67:45:81:0a:
                    66:f8:a1:aa:35:81:10:f4:ac:d9:d2:ba:6d:d4:62:
                    de:1a:c3:4b:4c:65:e9:ee:43:aa:26:4b:65:de:b5:
                    62:45:1a:84:3e:46:9e:d5:69:1a:ac:3f:88:71:37:
                    fc:b9:a4:8c:0a:f0:2a:9e:b9:af:d5:76:da:68:f7:
                    9e:19:a3:ec:ac:c9:89:d9:c2:ef:f0:b1:82:1c:3c:
                    e8:f3:e5:b2:3c:81:e6:d0:28:6e:63:0b:f4:61:35:
                    4f:09:82:ca:f0:ed:55:24:c2:15:1b:df:38:97:af:
                    7b:bb:4f:88:64:e5:bc:9d:df:f0:0b:05:45:66:25:
                    bc:3f:2e:c3:3b:49:2c:bc:23:0c:c0:33:39:cb:90:
                    9b:a6:9a:37:34:ec:f9:ca:b1:08:39:fa:57:cf:b9:
                    38:f0:a0:ee:e4:42:31:7c:0d:cc:bb:7b:5c:ed:c4:
                    8f:23:02:68:ef:5d:3a:7f:73:65:20:8f:8e:83:d1:
                    fb:40:08:04:54:0b:ae:65:81:38:da:67:c6:73:d1:
                    e0:0a:a9:a7:43:52:54:07:a8:b1:af:bc:f6:47:db:
                    63:1e:9a:31:af:06:67:00:1e:4d:2c:12:aa:3a:66:
                    ff:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:A9:1E:C6:80:EC:57:64:5B:F9:AB:4C:B9:14:27:FB:D6:02:E0
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS215516.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:366::/48
                  2a0f:85c1:380::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:7a:e9:30:f6:a8:7e:25:5c:e1:cb:c8:9e:af:d2:a9:1a:
         ab:51:12:93:f2:4e:40:03:cd:69:2f:2e:a2:0c:63:90:7b:10:
         fe:41:7f:2e:b1:be:e9:ac:00:5b:71:84:36:55:e9:bb:ba:c8:
         c5:e7:dc:82:11:46:52:4d:d0:81:e4:ab:c6:8c:04:5a:e1:c9:
         a5:d4:23:d1:7c:f9:e8:cf:af:82:75:53:6c:b3:1f:37:33:9c:
         75:5e:5e:f5:c4:60:00:e1:73:95:b0:c6:ed:6c:07:3a:bc:6d:
         bf:04:1f:53:a8:d3:c8:83:64:5f:54:4f:1c:d8:f2:2d:0c:0b:
         90:76:5f:f4:be:cc:de:f6:6f:fa:8d:52:74:cc:cf:33:00:fa:
         8d:f9:a4:ac:3b:e5:03:4e:9e:e2:61:fb:0c:73:e9:d2:b5:4b:
         f3:08:0e:d6:32:9c:6d:46:8d:2c:12:ab:c8:6c:ce:40:b9:d2:
         59:34:1c:e3:55:48:ca:2c:49:fb:78:2a:cf:f6:e1:79:ed:1c:
         06:7c:f9:7c:54:6c:f1:85:f1:e6:a8:45:05:6d:2c:6a:67:5a:
         b6:41:db:1b:38:86:96:14:c1:a4:8a:76:62:66:92:72:78:9b:
         5e:00:28:83:14:8c:9c:30:c1:69:84:0b:d0:c0:22:89:12:d1:
         35:6d:f1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 04:35:22 2024 by rpki-client on console-ams.rpki-client.org