Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215216.roa
File:                     AS215216.roa (raw, json)
Hash identifier:          bQLMdIMLSVrK0+mFKZc0KwW88OnRhE+FjM0Oh0iAQS4=
Subject key identifier:   B4:D6:B1:3B:B9:A6:67:83:78:79:89:0B:EB:CF:72:B3:FD:06:26:E1
Certificate issuer:       /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial:       42FEA48DB763407DD680EA01A2937C151109A202
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215216.roa
Signing time:             Fri 25 Jul 2025 08:07:44 +0000
ROA not before:           Fri 25 Jul 2025 08:02:44 +0000
ROA not after:            Fri 24 Jul 2026 08:07:44 +0000
asID:                     215216
IP address blocks:        2a0f:85c1:3a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:fe:a4:8d:b7:63:40:7d:d6:80:ea:01:a2:93:7c:15:11:09:a2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
        Validity
            Not Before: Jul 25 08:02:44 2025 GMT
            Not After : Jul 24 08:07:44 2026 GMT
        Subject: CN=B4D6B13BB9A667837879890BEBCF72B3FD0626E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:cb:38:0b:7a:c6:a1:c4:b4:5c:a3:02:2d:
                    f8:6a:a7:4b:ef:41:58:be:91:dd:7d:32:38:5e:89:
                    32:5f:c8:c2:ae:3a:e3:7b:aa:ad:3a:04:60:ab:7f:
                    ba:96:79:d9:91:11:4b:46:26:68:67:24:c5:03:80:
                    30:21:30:60:13:77:e3:b9:7a:27:3e:66:0f:b4:dd:
                    5f:fe:6b:3b:21:0b:d9:1a:c9:4e:14:82:75:21:c9:
                    cc:a4:b6:70:6d:22:87:7d:82:16:6d:80:79:18:82:
                    e8:b5:42:53:e4:ee:75:24:8d:42:7f:1a:6e:10:72:
                    55:7f:d2:e2:da:73:fc:ce:be:b8:4a:5d:d2:3e:2f:
                    93:a4:54:5e:a8:d2:fd:cf:9d:57:a6:b7:36:13:c8:
                    b0:3c:8c:2e:97:22:4d:9c:ef:87:e3:70:c5:d1:f9:
                    e9:12:3f:8c:5b:97:14:7f:68:05:0a:eb:89:0d:d4:
                    95:93:71:f1:79:fb:65:7a:e0:ba:33:bf:c3:d0:7c:
                    25:e4:07:b5:95:a1:a6:80:c4:b8:b7:17:37:97:ba:
                    9a:d2:01:de:bf:7e:9a:92:7a:cd:81:9c:ea:20:d9:
                    66:6e:c9:06:34:6e:7d:f8:d6:4f:4f:3e:25:48:6b:
                    32:64:65:b3:c8:04:10:d6:29:0a:72:fc:44:18:45:
                    2d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D6:B1:3B:B9:A6:67:83:78:79:89:0B:EB:CF:72:B3:FD:06:26:E1
            X509v3 Authority Key Identifier:
                keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215216.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:85c1:3a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:0e:1a:b6:5b:89:d4:34:c1:87:0c:6c:05:65:5b:b5:df:b1:
         1e:f2:1b:11:1b:24:2a:bf:73:f4:cc:ca:29:ce:13:c2:21:85:
         7d:65:20:75:21:57:7d:65:e4:3b:b0:34:7d:58:51:04:03:40:
         be:dd:44:bd:26:4f:9b:9d:e9:7f:7f:01:b8:4a:af:2c:6d:06:
         3a:3f:45:43:eb:5e:72:52:70:3f:3e:01:9b:ad:f0:1d:0d:ce:
         3c:bb:26:0c:4e:e3:d2:ae:e9:08:84:39:92:16:c8:77:d9:7c:
         bd:74:60:10:a3:84:82:01:b2:60:13:ee:b8:30:68:10:8c:f2:
         a1:8e:3b:33:30:5e:74:32:bb:1d:56:dc:01:e2:27:1a:3a:58:
         6f:8d:56:2c:56:91:dc:a7:b7:d5:9b:10:af:d2:36:37:56:c0:
         72:87:d8:0c:fa:91:0d:78:4f:de:0b:99:b2:fb:94:0e:e3:52:
         52:16:06:83:a9:8b:8b:bd:41:fc:73:cc:89:c6:50:98:58:3f:
         5a:54:09:64:de:b9:90:71:80:83:ac:05:07:20:7a:53:9c:1e:
         af:13:f5:f4:18:69:f5:dc:70:7d:d2:ae:c9:5a:b1:77:3c:49:
         b0:b8:c0:89:95:75:b0:97:de:2b:15:12:d4:9f:13:93:f3:d1:
         09:e2:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:21:13 2025 by rpki-client