Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373130303a3a2f34382d3438203d3e20323134393135.roa
File:                     326131343a3763303a373130303a3a2f34382d3438203d3e20323134393135.roa (raw, json)
Hash identifier:          INYrEMqgiQUlPtAbaJRpY0yqWQ+U703rSVEDdQcaA4w=
Subject key identifier:   A3:90:13:52:FA:16:B0:23:CA:ED:02:35:28:0F:BF:BB:81:0A:C4:89
Certificate issuer:       /CN=6F08383FF15292BFB6A427602811D5E225F0853C
Certificate serial:       4601BF2C32E7A76D4A99F97796C2CCD000F3CF2D
Authority key identifier: 6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
Authority info access:    rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373130303a3a2f34382d3438203d3e20323134393135.roa
Signing time:             Wed 26 Jun 2024 12:47:14 +0000
ROA not before:           Wed 26 Jun 2024 12:42:14 +0000
ROA not after:            Wed 25 Jun 2025 12:47:14 +0000
asID:                     214915
IP address blocks:        2a14:7c0:7100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl
                          rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
                          rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:01:bf:2c:32:e7:a7:6d:4a:99:f9:77:96:c2:cc:d0:00:f3:cf:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F08383FF15292BFB6A427602811D5E225F0853C
        Validity
            Not Before: Jun 26 12:42:14 2024 GMT
            Not After : Jun 25 12:47:14 2025 GMT
        Subject: CN=A3901352FA16B023CAED0235280FBFBB810AC489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b0:47:3f:0a:fe:b3:8c:89:15:98:dc:2b:89:
                    f4:0d:11:d4:6b:2c:89:a1:ce:fc:3b:1b:78:a7:f4:
                    09:4b:08:34:36:66:ac:f8:70:91:3d:86:a4:27:65:
                    75:14:5b:ef:e0:9c:11:47:e0:18:6d:3d:64:40:82:
                    0d:93:27:9d:46:ad:7a:06:55:c4:82:75:43:71:98:
                    a7:92:9c:44:6f:75:bf:6f:b0:a0:9e:ce:4a:62:6d:
                    b3:1e:cd:c5:c9:42:62:39:ad:3b:e1:9f:fa:eb:61:
                    4a:ab:c9:81:bf:08:07:82:f9:9b:70:ae:7f:13:4d:
                    e0:6e:fd:b7:69:ab:f9:69:9a:1e:cf:be:de:c0:5e:
                    b3:27:71:da:c6:4b:b5:85:c4:52:1a:d5:78:7d:bb:
                    70:4e:0d:8e:5f:34:63:95:6f:b7:55:4f:78:12:fc:
                    d6:a7:f2:9d:08:0d:cd:43:4d:51:10:bd:91:05:af:
                    67:ed:dc:e5:ab:4d:9f:b8:03:2a:ce:0d:c2:c4:88:
                    62:df:21:66:61:19:71:61:4b:2f:83:04:f5:4c:5f:
                    9b:22:f4:d3:77:28:42:d9:a0:0f:ed:86:6f:e7:88:
                    08:ad:51:76:a6:fc:a1:18:7c:e7:93:93:68:8e:2e:
                    69:c6:e5:45:6d:0d:f1:ab:71:3a:ce:61:02:e1:a8:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:90:13:52:FA:16:B0:23:CA:ED:02:35:28:0F:BF:BB:81:0A:C4:89
            X509v3 Authority Key Identifier:
                keyid:6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373130303a3a2f34382d3438203d3e20323134393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7100::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:c1:0f:d7:3f:2f:4e:17:e5:d9:3a:3a:5b:01:fb:5a:24:8c:
         96:ce:4f:b3:4f:9b:dc:1f:f8:5f:91:59:b0:e0:e0:0a:cb:40:
         df:2d:bf:d5:7f:91:e5:1a:d8:3e:7d:55:c5:99:38:b3:69:44:
         49:4b:f3:60:f3:8a:7a:6f:f4:f1:dd:04:16:8a:33:30:7e:cb:
         77:21:01:d7:9a:2f:4a:06:40:65:ba:71:4f:60:fb:ce:9f:2a:
         d2:77:5e:f3:cc:3a:1a:e9:a1:28:40:73:dc:43:62:0d:04:17:
         0a:1a:de:47:f1:85:64:0b:96:57:0d:21:b7:25:19:e3:f7:b9:
         d7:a6:b3:ce:27:6e:a4:52:62:3c:70:51:72:e3:bc:0b:37:8e:
         e5:33:69:d1:be:d1:ab:d3:53:0f:9c:15:b9:7b:66:36:69:dd:
         34:a3:ee:ee:dc:3c:5e:a2:74:62:7d:0d:2c:37:67:90:8e:4f:
         03:c8:2b:43:99:98:f0:a3:25:eb:e7:19:c0:5c:fa:9e:f0:b9:
         ed:70:ad:eb:2c:a6:9d:2b:91:09:1b:6d:80:db:6c:e4:31:a5:
         ec:fd:38:bd:fa:72:ef:0f:4a:ec:42:67:0e:bb:5e:51:ab:5e:
         d9:0b:a4:44:b3:82:db:fc:b3:11:0a:01:83:86:c0:ba:43:bd:
         cb:7b:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:08 2024 by rpki-client on console-ams.rpki-client.org