Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373230303a3a2f34382d3438203d3e20323134393135.roa
File:                     326131343a3763303a373230303a3a2f34382d3438203d3e20323134393135.roa (raw, json)
Hash identifier:          9YFan+zgJALfn5JUnTwaU0gNhNNR5BvMLZKkRmZoqoM=
Subject key identifier:   87:04:8B:54:B3:1D:69:B8:DB:80:C1:40:AD:B6:34:3E:D3:C1:0D:7B
Certificate issuer:       /CN=6F08383FF15292BFB6A427602811D5E225F0853C
Certificate serial:       7E5FE4F5DD080FFD83708F331F86990D1BD16589
Authority key identifier: 6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
Authority info access:    rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373230303a3a2f34382d3438203d3e20323134393135.roa
Signing time:             Wed 26 Jun 2024 12:47:25 +0000
ROA not before:           Wed 26 Jun 2024 12:42:25 +0000
ROA not after:            Wed 25 Jun 2025 12:47:25 +0000
asID:                     214915
IP address blocks:        2a14:7c0:7200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl
                          rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
                          rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5f:e4:f5:dd:08:0f:fd:83:70:8f:33:1f:86:99:0d:1b:d1:65:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F08383FF15292BFB6A427602811D5E225F0853C
        Validity
            Not Before: Jun 26 12:42:25 2024 GMT
            Not After : Jun 25 12:47:25 2025 GMT
        Subject: CN=87048B54B31D69B8DB80C140ADB6343ED3C10D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:10:bc:00:27:bf:ad:f2:73:d3:46:cf:40:
                    dc:c2:f6:1d:5a:c7:04:bd:ac:d2:f7:0a:2d:90:9e:
                    12:c0:9b:4e:de:05:ea:a3:db:6b:e4:4e:3e:cd:94:
                    74:5f:68:e8:01:39:a0:8a:5c:0a:2d:5b:c4:56:ba:
                    6d:35:00:f6:a2:e8:b2:b9:79:f1:ec:a1:52:53:15:
                    71:da:14:3e:b6:bc:10:36:20:66:68:31:ce:4f:1d:
                    02:c1:34:50:76:c1:6c:c4:a6:85:22:24:4f:a6:c9:
                    18:04:32:9a:ac:cd:ee:5a:6d:73:48:18:85:3e:c9:
                    20:9d:b2:aa:1f:b7:d6:29:13:39:d5:26:9d:08:b0:
                    6a:a8:01:60:c4:4e:64:07:7a:6f:5f:6e:94:f4:53:
                    43:15:35:f0:1f:db:43:07:c7:33:ae:6f:3d:25:27:
                    a9:3a:42:04:c6:5b:00:3a:c7:6e:fd:c7:e2:c9:33:
                    54:cd:b0:1b:4e:fb:bb:05:a7:21:ff:21:fa:0f:15:
                    2c:11:e8:38:70:27:cd:20:54:c7:72:17:05:ae:6c:
                    7f:8c:d9:63:2c:81:83:22:c9:50:27:ea:59:cb:aa:
                    43:5a:da:40:01:0e:97:a3:8b:d1:66:58:80:48:bd:
                    ff:0e:33:2f:fa:17:aa:73:e5:76:78:eb:18:fc:5d:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:04:8B:54:B3:1D:69:B8:DB:80:C1:40:AD:B6:34:3E:D3:C1:0D:7B
            X509v3 Authority Key Identifier:
                keyid:6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373230303a3a2f34382d3438203d3e20323134393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7200::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:a6:fe:32:13:2e:0d:a0:29:73:74:6d:51:83:59:0f:19:31:
         1a:15:89:64:15:31:c2:52:64:5b:37:a6:75:78:20:b7:1f:85:
         31:4e:2e:7f:ad:54:66:ab:74:76:7b:3e:73:f2:ce:19:6a:f4:
         c2:60:8c:0c:72:7f:f5:fd:d5:53:8a:70:66:b8:cb:f3:9a:cf:
         d0:46:40:7f:be:a7:b7:36:b2:f0:29:df:c4:8c:bf:28:55:4a:
         50:e1:0f:38:d2:c6:a3:0b:72:c2:ea:58:26:42:52:97:79:06:
         20:73:52:bf:f5:aa:ea:6d:76:86:86:ea:ce:c5:ab:c8:35:d5:
         99:9f:15:df:3e:49:e2:a9:bf:d2:07:9a:bd:5b:80:45:c6:d4:
         fd:69:53:97:c1:5a:3e:fb:bc:5a:7e:00:e3:a6:7c:ac:13:9d:
         5e:c3:33:91:39:a9:5e:37:f0:6b:ca:b2:d4:23:88:4a:b9:53:
         0e:95:f1:df:b6:7e:ff:d6:7a:88:f0:0d:28:47:20:89:83:82:
         20:1c:9d:57:7e:b8:d5:61:d9:9a:60:3d:01:69:8d:17:cc:4b:
         d0:b8:33:d6:6f:85:aa:76:c2:b5:a1:30:dd:6b:b2:5c:5a:db:
         18:07:cc:83:1d:ba:76:fc:87:44:a1:f7:be:20:7e:91:83:86:
         cd:e7:32:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:08 2024 by rpki-client on console-ams.rpki-client.org