Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa
File:                     326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier:          Mh81Bt1D/0NWzP7XokM8MvVPTE3WS32gTiIFUz4Wq7Y=
Subject key identifier:   0F:29:A4:65:E7:A8:9B:99:95:55:52:6C:60:D2:A3:EB:C7:0E:D0:8E
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       20B83BA06795BD63025D36FD3CBA16F98A547E65
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa
Signing time:             Fri 19 Jan 2024 19:27:18 +0000
ROA not before:           Fri 19 Jan 2024 19:22:18 +0000
ROA not after:            Fri 17 Jan 2025 19:27:18 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:cd0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b8:3b:a0:67:95:bd:63:02:5d:36:fd:3c:ba:16:f9:8a:54:7e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jan 19 19:22:18 2024 GMT
            Not After : Jan 17 19:27:18 2025 GMT
        Subject: CN=0F29A465E7A89B999555526C60D2A3EBC70ED08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:31:e8:f2:24:a5:83:2f:16:a1:ee:8f:30:2a:
                    1c:64:9c:1f:e7:b2:f3:56:98:64:87:2f:92:57:85:
                    30:ac:28:b2:37:3a:fe:77:57:30:02:a4:5e:4e:9b:
                    1f:d2:92:76:f3:bd:0c:4b:25:15:19:5e:88:80:04:
                    e4:c9:4e:26:6f:1a:e2:79:c2:cb:f5:24:1c:fa:3a:
                    0c:37:03:c5:02:b9:00:16:60:c0:81:9b:de:b0:d2:
                    1a:ea:db:76:97:9c:d9:a5:f8:15:b2:01:4b:38:5f:
                    c5:33:1e:12:50:36:fb:29:bf:4c:cd:dc:de:1b:7e:
                    15:8b:ca:e9:21:88:ad:67:e1:45:3c:7c:81:36:2b:
                    01:d3:5d:a0:3a:83:25:34:49:ae:5d:14:a2:fc:61:
                    19:b0:3b:71:b3:0c:60:88:b2:6b:26:a8:d5:ae:92:
                    26:9c:80:17:0e:20:bc:66:89:4d:78:9f:f7:14:ca:
                    42:8d:95:98:b9:ce:89:b2:a7:6c:87:9c:9e:91:b5:
                    b7:8b:97:92:13:eb:d7:88:3d:e6:74:4b:da:f8:33:
                    b8:e1:ed:a8:d3:13:c1:7e:d2:88:5d:ae:99:f8:9c:
                    76:c1:e2:e5:fa:66:94:e5:b4:22:5c:28:95:50:95:
                    88:e4:8d:b6:ce:cc:73:57:6c:29:2a:b9:58:fd:61:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:29:A4:65:E7:A8:9B:99:95:55:52:6C:60:D2:A3:EB:C7:0E:D0:8E
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:cd0::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:29:b9:a2:85:59:86:44:1d:e2:a5:05:90:65:e3:7d:51:fd:
         5e:de:de:7d:22:bd:cd:01:9b:5c:67:25:9c:25:c0:cc:d8:8c:
         15:f2:b4:c9:f7:5c:a9:49:32:48:d4:53:93:fa:b5:eb:e0:0c:
         69:c2:bb:6c:a9:f5:39:21:69:b1:82:9d:50:9e:75:1d:6b:66:
         56:de:f0:4b:94:e1:d7:c3:a5:25:ce:18:fc:05:b6:02:f5:48:
         e5:f3:9e:d0:80:23:95:8f:6e:0a:7c:29:28:64:b6:94:75:dc:
         65:b1:13:ae:db:92:bc:45:7c:97:67:55:5c:cd:9e:19:c9:16:
         ff:74:e9:41:b6:83:ee:6b:2e:d3:c8:74:93:db:09:c4:81:7a:
         8f:c6:51:4e:ab:7a:f3:60:37:c7:2d:d2:7f:1c:95:66:63:36:
         40:93:de:58:96:b4:0f:59:99:9a:d2:88:b5:dc:80:9a:51:3c:
         ca:29:69:ae:8d:8f:2b:35:2a:13:fe:ba:90:d7:c5:9e:21:5d:
         d5:6c:46:22:38:f4:3f:23:38:e8:52:e9:45:6d:1c:b4:0f:89:
         5c:ef:d0:58:76:f0:69:98:ee:3f:04:8c:4d:75:d2:9f:7f:f9:
         30:5b:24:62:f1:42:35:86:28:33:15:be:ec:97:db:c1:7b:34:
         60:1e:5b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:24:42 2024 by rpki-client on console-fra.rpki-client.org