Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa
File:                     326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (raw, json)
Hash identifier:          YuOIEPf0TASFCOu7Q8E8vk4AwFujiL332rMHZ16VhZ8=
Subject key identifier:   5B:05:44:D3:E7:B0:F0:09:9F:B8:1E:B9:2B:67:CB:45:22:90:3D:35
Certificate issuer:       /CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4
Certificate serial:       66DFFE1BE7DE0BE1A9E67060C7C8485C0BE62EAA
Authority key identifier: 27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa
Signing time:             Sat 10 Aug 2024 12:34:30 +0000
ROA not before:           Sat 10 Aug 2024 12:29:30 +0000
ROA not after:            Sat 09 Aug 2025 12:34:30 +0000
asID:                     214486
IP address blocks:        2a0a:6044:7e00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:df:fe:1b:e7:de:0b:e1:a9:e6:70:60:c7:c8:48:5c:0b:e6:2e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4
        Validity
            Not Before: Aug 10 12:29:30 2024 GMT
            Not After : Aug  9 12:34:30 2025 GMT
        Subject: CN=5B0544D3E7B0F0099FB81EB92B67CB4522903D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:95:76:d6:f1:03:1d:95:c4:c6:ca:f3:6f:
                    51:f0:ba:44:49:a0:10:97:09:f0:b9:cc:b6:11:7b:
                    1e:63:97:d1:f4:e9:12:35:8a:ee:db:5f:ad:13:4d:
                    17:f0:a9:67:b0:43:dd:5e:57:24:20:fe:73:70:47:
                    72:03:c9:12:1f:b7:5b:38:5d:f7:33:b2:a1:72:0c:
                    51:ed:b9:6e:56:cf:d8:cd:32:6c:16:05:80:5f:42:
                    cb:c6:bc:d0:a1:6d:de:2f:cf:0b:1d:b6:d5:3e:91:
                    26:c8:6b:a5:cc:85:a4:13:4c:a8:17:0c:57:33:33:
                    f3:13:50:bb:84:57:fb:cd:0a:5b:b2:a1:3a:fc:50:
                    1d:02:04:b7:f9:0a:88:84:7e:78:90:aa:2b:d9:c7:
                    b8:f1:75:7e:eb:c4:52:d5:4f:f0:72:61:72:1d:d1:
                    f2:6b:10:ea:63:c2:02:ba:56:0e:f7:50:47:8b:9e:
                    29:a1:9f:a3:93:c7:86:03:25:13:a8:4c:94:c4:22:
                    2b:1e:49:44:bd:ff:83:21:a9:46:de:93:59:ff:4c:
                    9d:3e:a7:65:9b:c5:03:ea:b8:70:cf:f5:08:61:93:
                    35:ab:27:b6:3d:b6:3f:68:aa:06:46:bf:5a:71:30:
                    4c:27:f6:b0:4e:6b:b7:8f:b0:d0:d9:4c:81:62:8f:
                    78:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:44:D3:E7:B0:F0:09:9F:B8:1E:B9:2B:67:CB:45:22:90:3D:35
            X509v3 Authority Key Identifier:
                keyid:27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:a5:a8:2b:f8:ad:8e:f9:e7:18:2a:f2:ac:f2:0f:59:54:3b:
         56:67:69:90:60:9a:2d:ff:9d:29:6a:65:b5:58:a9:9e:9c:f9:
         4d:fc:82:04:a6:56:58:d8:58:74:11:8f:a4:e6:ad:c1:20:6e:
         bc:cd:5f:15:ca:1f:20:22:b5:70:29:24:3c:92:68:27:b1:76:
         62:7e:01:13:3b:86:e2:f0:06:20:c2:87:f4:ce:91:74:f9:1e:
         bf:b1:d1:0b:04:07:41:36:2b:11:e2:05:81:a9:15:d4:1e:80:
         c6:69:4b:46:20:e3:fa:a9:38:26:d9:4a:11:5e:80:f0:dd:6e:
         29:cc:d1:62:5d:44:74:59:7e:58:06:4e:06:7b:c8:f6:1e:52:
         eb:46:cc:4e:be:c1:f8:52:2e:79:e8:89:5a:f7:67:da:e9:6b:
         9d:7e:63:2a:04:94:97:b0:e1:3a:60:f9:99:be:ae:bb:78:a8:
         7e:e1:3e:14:61:cc:37:6b:23:42:fd:5b:20:b3:f8:c3:4d:7e:
         5c:86:7c:bb:e1:76:7f:9f:c3:8a:93:ff:57:0b:03:2b:73:3a:
         fb:cf:6d:76:2e:8f:a6:93:85:a1:1b:cd:56:27:75:5e:d1:50:
         ea:e2:3c:7a:38:9a:28:fb:4e:70:6a:32:46:0f:cd:7c:61:09:
         6a:67:13:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 14:22:21 2024 by rpki-client on console-ams.rpki-client.org