Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS174.roa
File:                     AS174.roa (raw, json)
Hash identifier:          b7lvPY5GCV2lXCfypbddHcn2UrPrqBA/qHJlh3XDO5s=
Subject key identifier:   95:FB:69:E2:93:81:D5:3A:5D:B8:F4:43:50:C5:D7:1A:80:95:C6:19
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       67E2386711E8E5DD1B0DC6C20FAC2847FC6FB5D8
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS174.roa
Signing time:             Mon 25 Mar 2024 02:03:56 +0000
ROA not before:           Mon 25 Mar 2024 01:58:56 +0000
ROA not after:            Mon 24 Mar 2025 02:03:56 +0000
asID:                     174
IP address blocks:        2a05:dfc1:6100::/40 maxlen: 48
                          2a0a:6040:5f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e2:38:67:11:e8:e5:dd:1b:0d:c6:c2:0f:ac:28:47:fc:6f:b5:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Mar 25 01:58:56 2024 GMT
            Not After : Mar 24 02:03:56 2025 GMT
        Subject: CN=95FB69E29381D53A5DB8F44350C5D71A8095C619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:95:3b:5e:17:78:02:aa:3b:e2:93:ca:9d:18:
                    d7:1d:56:46:44:0f:e8:5a:48:58:c3:27:53:fd:37:
                    f2:21:45:f5:8d:8c:6a:ad:d1:a7:04:18:5c:88:d0:
                    69:c4:ee:92:22:32:99:e6:53:ba:79:90:90:f5:a9:
                    7e:c7:ea:71:96:ef:d6:80:d2:41:2a:6c:a2:ba:4d:
                    4c:b3:c0:a7:01:5f:8a:56:dd:e8:c5:95:c4:08:74:
                    89:ea:28:60:30:96:a5:da:8f:94:4e:14:88:3a:f3:
                    0d:18:3e:a2:4f:e4:a3:50:31:13:01:cf:b4:73:20:
                    3b:92:df:60:5a:b7:9b:d6:8d:b9:fd:37:7f:84:24:
                    de:43:e6:3b:16:4b:8a:82:e7:40:39:e6:ed:b1:ee:
                    60:a7:d3:7f:26:54:a9:8b:d6:3e:9a:56:89:6d:61:
                    a8:6d:67:37:b3:73:85:c9:f0:a7:b4:a7:30:cc:83:
                    fa:39:19:dc:81:ee:1d:02:56:d4:e6:31:f4:0e:84:
                    b7:57:e0:6c:60:ce:90:c6:ea:12:92:08:e5:b9:a4:
                    b5:16:3f:b8:2c:94:9b:2c:2e:27:38:1c:32:d6:84:
                    c8:4f:3d:d0:7e:ee:12:d0:e3:f3:00:40:bd:d7:88:
                    fd:06:d0:d2:70:ea:05:13:68:c4:e0:7a:4a:e3:6a:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FB:69:E2:93:81:D5:3A:5D:B8:F4:43:50:C5:D7:1A:80:95:C6:19
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:6100::/40
                  2a0a:6040:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:7a:18:91:af:70:8d:cb:01:45:73:26:31:03:51:f1:ce:92:
         7c:32:38:c9:c1:65:3b:ae:96:93:c8:04:17:aa:c7:13:0f:25:
         f6:a6:d8:9f:13:74:69:ee:0b:5f:17:43:2b:33:4d:d8:e1:62:
         40:c2:1a:11:00:f1:e6:35:56:7d:d7:26:53:4e:d1:f9:10:c8:
         0d:df:9f:1d:23:61:80:42:4a:b4:a4:7b:40:10:53:85:44:30:
         3f:4b:6f:ab:48:2e:b0:62:b4:e5:05:c9:53:a7:b9:11:f7:49:
         46:6d:32:77:e1:27:32:48:90:a8:62:12:c0:e2:7e:77:bc:90:
         3a:30:1d:47:d8:22:44:fc:5a:2f:48:db:d8:6c:7e:5f:37:95:
         a4:cf:27:69:c5:34:d3:30:12:c3:78:f8:64:5f:8d:b4:be:55:
         dd:9b:41:a7:a9:69:2a:04:c6:df:91:5d:f1:f7:85:25:31:20:
         ca:95:1f:3f:15:86:c4:3b:49:ec:9d:cb:d5:c8:bf:5c:5f:66:
         06:85:af:cc:00:f8:a6:4c:aa:7e:9f:12:65:82:de:76:fd:99:
         4b:69:cf:40:b1:4a:19:d2:6a:bd:66:88:32:78:dc:75:9c:9e:
         80:87:5b:27:66:6a:83:a8:c0:5f:12:1d:e1:80:4c:b0:f0:05:
         3b:6d:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org