Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa
File:                     326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa (raw, json)
Hash identifier:          cDRjR1Gs+0Iu9xhCGCcpko1viLmb0+uf6ywJ7Kgfxpo=
Subject key identifier:   B5:FD:25:BB:5D:3B:44:60:DE:01:F7:0A:53:E1:B1:4A:5E:E6:C4:75
Certificate issuer:       /CN=AC2082F41576F66D1AA264309E33E738246AC454
Certificate serial:       4A691C8EF7525F082BB2C00DB1186539A294CF79
Authority key identifier: AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa
Signing time:             Thu 12 Jun 2025 16:38:15 +0000
ROA not before:           Thu 12 Jun 2025 16:33:15 +0000
ROA not after:            Thu 11 Jun 2026 16:38:15 +0000
asID:                     211358
IP address blocks:        2a14:7584:4800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 04:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:69:1c:8e:f7:52:5f:08:2b:b2:c0:0d:b1:18:65:39:a2:94:cf:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2082F41576F66D1AA264309E33E738246AC454
        Validity
            Not Before: Jun 12 16:33:15 2025 GMT
            Not After : Jun 11 16:38:15 2026 GMT
        Subject: CN=B5FD25BB5D3B4460DE01F70A53E1B14A5EE6C475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2e:41:95:fe:c1:92:1e:3b:77:db:8c:6e:1f:
                    dd:ae:d6:9c:03:4e:8f:5c:c1:78:1b:7b:70:33:69:
                    40:e4:09:81:49:86:de:f4:7a:a3:14:7e:1f:00:b0:
                    47:9f:93:63:07:03:ee:87:3f:48:fb:54:67:88:04:
                    3b:40:6f:9f:7a:b0:dd:47:56:54:1e:2f:6a:f7:03:
                    ab:9f:f9:dd:79:98:98:b6:8c:9b:bc:19:e8:8e:6d:
                    e7:a5:75:13:62:3f:9d:48:e0:d8:e9:14:06:77:fe:
                    e5:7a:7c:85:c9:a5:18:71:9a:ab:70:91:b7:0e:f0:
                    aa:c9:24:4b:cf:a1:cb:34:ec:c6:32:53:e5:71:3e:
                    77:d1:ea:48:3a:24:41:79:2b:70:83:9e:07:5d:fc:
                    c4:e0:28:9d:fe:40:a1:ee:e1:76:05:e7:36:47:e9:
                    db:ba:2c:2a:1a:a9:e5:ae:fd:06:f4:d2:ce:21:96:
                    58:61:29:b2:5c:bf:7f:46:19:8c:a6:2d:6e:90:df:
                    a6:23:c9:01:2f:02:0e:58:fb:92:2a:48:2e:cc:5f:
                    8e:5b:d8:8d:04:b3:d7:e8:c0:cd:05:df:b9:f8:9d:
                    e3:25:35:31:f3:da:85:3b:4d:40:b3:2e:26:23:4f:
                    0f:23:5a:bd:7d:50:d6:20:dd:24:dc:05:c7:c0:0a:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FD:25:BB:5D:3B:44:60:DE:01:F7:0A:53:E1:B1:4A:5E:E6:C4:75
            X509v3 Authority Key Identifier:
                keyid:AC:20:82:F4:15:76:F6:6D:1A:A2:64:30:9E:33:E7:38:24:6A:C4:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/AC2082F41576F66D1AA264309E33E738246AC454.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AC2082F41576F66D1AA264309E33E738246AC454.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59c83e5c-4b55-4a1a-8003-1b7ecc51d47a/2/326131343a373538343a343830303a3a2f34382d3438203d3e20323131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7584:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:11:1d:9e:e9:53:99:8c:2d:28:e7:9d:05:a1:4d:f3:47:4b:
         90:39:8f:08:1b:28:a7:05:29:56:93:72:d9:d3:bb:a5:b3:d1:
         2b:c1:ce:0a:bb:d1:1e:16:3c:04:cd:16:f5:40:05:68:ea:4c:
         98:02:50:3a:6d:ed:97:73:fa:d1:24:d4:4a:8a:5d:0e:67:b9:
         6b:5b:6a:6a:f1:5c:d1:a9:16:39:0d:54:f8:4d:a7:9c:5a:63:
         12:b5:bc:6e:bb:68:b0:a7:9d:d8:0c:ee:92:df:bf:e7:dd:f5:
         fd:03:57:3c:3c:59:47:4f:44:c3:e3:0c:73:3b:0f:32:08:66:
         16:fb:86:84:9b:9b:3e:dd:aa:f0:1a:6f:07:48:6c:22:d9:4c:
         9f:37:be:d8:93:1a:b3:45:47:4a:3b:03:d0:ad:c6:84:5a:c0:
         e5:f1:4a:09:ad:a1:12:da:5a:2c:ca:dc:a8:6b:c3:81:b7:f6:
         38:cd:c0:79:c7:d2:a0:3c:a1:91:74:a2:6c:97:be:d6:99:cd:
         ba:3c:9d:bf:9c:3f:5d:fc:7b:19:ab:47:db:37:46:c7:88:e3:
         b6:00:0b:a7:cb:90:42:10:06:89:b9:bb:3b:15:eb:21:95:f2:
         2e:21:b0:02:59:36:d0:9d:37:1e:5a:b8:6d:8e:89:3c:af:fd:
         c1:2b:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:26:03 2025 by rpki-client