Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS216324.roa
File:                     AS216324.roa (raw, json)
Hash identifier:          W9umW3SwtOm+uv1mq0mI8C6ABVnq6VX3CrkA/wkRPF0=
Subject key identifier:   1A:2E:8E:F7:BF:C3:5B:7F:5D:A6:2D:3D:4B:FF:A2:90:51:6F:08:1A
Certificate issuer:       /CN=5ae4437029659539f54f900b35e43be06a94b37b
Certificate serial:       32535CA6646591B92B3E7EFF0AE7622F56277D53
Authority key identifier: 5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS216324.roa
Signing time:             Thu 23 May 2024 16:49:09 +0000
ROA not before:           Thu 23 May 2024 16:44:09 +0000
ROA not after:            Thu 22 May 2025 16:49:09 +0000
asID:                     216324
IP address blocks:        2a0f:85c1:600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jul 2024 20:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:53:5c:a6:64:65:91:b9:2b:3e:7e:ff:0a:e7:62:2f:56:27:7d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4437029659539f54f900b35e43be06a94b37b
        Validity
            Not Before: May 23 16:44:09 2024 GMT
            Not After : May 22 16:49:09 2025 GMT
        Subject: CN=1A2E8EF7BFC35B7F5DA62D3D4BFFA290516F081A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:2e:2b:9e:71:0e:73:14:30:19:1f:6f:2b:
                    20:e2:4e:7c:51:7a:34:41:e6:15:4a:5e:22:3a:1a:
                    eb:5e:e1:af:c4:c8:00:32:33:ae:6c:fe:20:ab:f5:
                    50:f3:c3:f7:08:62:d6:5d:cf:32:6b:8d:fa:45:cc:
                    51:e0:44:3d:c5:fb:eb:ee:f4:8b:ca:73:eb:3c:fd:
                    18:75:33:1f:70:94:3b:51:b7:fd:87:c1:3c:80:96:
                    80:97:13:bc:2d:eb:0f:ff:fb:3e:c7:f4:36:82:e6:
                    52:b6:95:c7:b4:34:63:e8:06:60:8c:8d:a4:11:0d:
                    5f:79:3a:67:38:da:34:33:04:c3:2c:ca:e7:ec:26:
                    f7:95:b5:f9:35:03:52:04:0c:5c:f1:78:2a:ac:21:
                    13:73:01:be:4a:ed:b3:35:3f:45:a5:51:de:9e:2d:
                    81:12:32:a6:69:aa:25:57:8a:b7:45:b3:cb:85:7b:
                    84:12:39:42:fc:10:dc:f4:f1:90:46:6c:24:3b:a8:
                    b8:5e:0e:52:e9:cf:d7:a2:b5:ba:7b:88:c0:3c:6b:
                    0e:cb:61:c5:7c:fe:c9:32:2c:f3:46:53:c3:20:66:
                    04:a1:8d:4b:f0:b2:04:b0:f0:26:da:b8:b5:89:f6:
                    d2:c1:7f:e6:07:06:d2:96:30:d4:a6:b1:d1:7c:d4:
                    a4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2E:8E:F7:BF:C3:5B:7F:5D:A6:2D:3D:4B:FF:A2:90:51:6F:08:1A
            X509v3 Authority Key Identifier:
                keyid:5A:E4:43:70:29:65:95:39:F5:4F:90:0B:35:E4:3B:E0:6A:94:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/AS216324.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:95:30:9f:29:d0:ba:e4:cc:85:7c:b8:f7:0b:b1:c2:54:c3:
         41:d4:14:3c:44:8a:3a:2e:0d:40:68:7f:6a:c1:db:ca:8e:77:
         6c:62:6f:24:87:6c:1e:06:f7:66:1f:2a:62:53:d0:41:ba:66:
         75:5e:20:60:c1:4d:ea:fb:20:1c:3a:ac:60:61:ed:df:80:43:
         f8:b6:06:36:e4:53:1c:0c:aa:3e:bd:ee:0d:b6:29:9a:6a:61:
         38:b6:5e:8b:d0:70:53:b0:94:f6:89:03:21:a0:76:61:48:91:
         55:46:d4:cc:6e:7c:3e:8a:4c:cd:20:c7:3a:01:0a:1b:89:3a:
         d0:a4:9b:a4:e7:15:71:52:f0:71:4c:69:4a:4c:1b:0a:49:b5:
         e7:cd:fa:85:a0:0f:18:9c:41:09:38:ea:5f:99:68:5e:d3:66:
         dc:57:1f:79:fa:f6:3f:29:83:99:96:0c:2a:b0:a6:d2:00:bc:
         18:4c:e3:84:75:5b:4f:92:b5:ec:4f:d3:a4:0c:5b:03:65:66:
         0c:a6:90:e0:7f:f4:48:59:c3:b1:2c:76:61:37:a7:58:0e:a5:
         0c:74:74:fb:08:7e:a8:cb:3d:cb:6d:2e:33:ce:fc:22:89:cf:
         51:f2:12:f7:9d:8d:42:8f:02:ce:e2:91:19:23:bc:6f:45:c9:
         6e:d1:70:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 04:35:22 2024 by rpki-client on console-ams.rpki-client.org