Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197510.roa
File:                     AS197510.roa (raw, json)
Hash identifier:          MoQA58u60/dUxziEaxcwy5EYUbebxZSBgPGIpsDdU0k=
Subject key identifier:   5A:7F:2F:8D:40:BB:64:F0:63:AB:29:6D:C7:C9:D9:EA:86:74:26:77
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       3C0A11EA8CF4C8B5E563D6717CC4222A60CA0F51
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197510.roa
Signing time:             Fri 28 Jul 2023 06:50:53 +0000
ROA not before:           Fri 28 Jul 2023 06:45:53 +0000
ROA not after:            Fri 26 Jul 2024 06:50:53 +0000
asID:                     197510
IP address blocks:        2a05:dfc1:7600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0a:11:ea:8c:f4:c8:b5:e5:63:d6:71:7c:c4:22:2a:60:ca:0f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jul 28 06:45:53 2023 GMT
            Not After : Jul 26 06:50:53 2024 GMT
        Subject: CN=5A7F2F8D40BB64F063AB296DC7C9D9EA86742677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:11:29:b6:29:a7:b9:cf:13:b1:3f:fc:e5:
                    ba:d8:01:ec:77:42:62:90:9b:ff:f5:e2:15:7c:d3:
                    a0:3e:03:bf:f0:8c:ad:36:2d:60:d8:bb:38:39:3c:
                    d5:43:cd:55:d8:81:59:f8:8e:40:b4:53:a4:c7:e5:
                    1e:d8:bd:f2:de:1a:4e:1e:36:fc:b9:02:d3:db:7d:
                    ec:a9:b3:0f:ab:17:63:72:35:1a:32:62:54:15:43:
                    66:e2:7d:0f:dc:88:04:70:fd:41:c1:7f:b2:74:de:
                    28:43:c1:2d:e6:08:90:c1:c2:ba:c3:9b:d5:ca:b5:
                    73:41:9b:ad:e4:64:db:0b:ec:b8:44:35:58:14:4d:
                    76:9c:19:e4:c8:38:cd:57:1d:5e:c8:57:4d:fd:f2:
                    56:4b:75:6c:41:00:bf:f1:96:27:e7:2e:70:9c:0b:
                    c5:74:03:49:5d:df:39:48:90:f7:80:7b:27:62:d4:
                    9f:ce:91:be:2a:99:ee:51:8b:86:e4:ce:84:cf:65:
                    a7:01:65:a5:a0:11:ac:d9:46:d3:d9:9d:98:f2:f5:
                    cd:57:6c:0b:f9:08:bf:7b:51:01:1e:64:10:dc:71:
                    f8:38:0a:72:f2:ac:be:96:97:71:f5:54:6c:af:51:
                    74:ba:28:35:38:9d:04:9b:c2:6e:df:06:9a:d1:ec:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7F:2F:8D:40:BB:64:F0:63:AB:29:6D:C7:C9:D9:EA:86:74:26:77
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS197510.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:7600::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:d7:93:f1:72:e6:7f:52:a4:2c:f9:93:46:60:e9:16:bf:
         0f:56:46:ad:eb:6e:ca:61:12:06:4a:dd:e0:d8:62:aa:3a:bb:
         7b:87:6e:6a:81:1b:f9:c6:c2:ef:f8:24:4e:07:9b:5a:5c:2f:
         93:c2:46:e3:ce:74:1d:19:0b:c2:49:b8:92:0b:4a:74:3b:44:
         a5:d7:7d:f7:64:e8:a4:2d:c0:1b:ca:23:c9:d5:6a:c0:60:7b:
         5e:bc:07:5d:20:1c:d5:d9:e8:4d:06:47:81:a7:40:56:48:58:
         7a:5e:4f:ed:cc:43:88:6d:0d:86:4d:ef:46:df:64:c3:45:5c:
         cd:1c:72:3e:53:20:cb:c5:f9:2a:c9:80:07:20:2a:da:78:c8:
         e9:15:e7:b8:10:73:e5:be:00:aa:ae:3f:de:b1:8a:47:ea:1a:
         2f:5a:cf:d3:8f:a7:a5:44:99:28:ec:62:cc:9c:0b:11:d0:94:
         38:8f:54:d4:af:45:18:57:89:1e:4a:89:c6:f3:56:fd:c5:e1:
         7a:c5:8b:87:30:2b:fe:66:bd:e3:4e:82:7f:07:23:c0:06:90:
         9a:d6:89:84:29:fc:25:fb:a9:5a:f4:e3:5d:f2:35:ce:74:cb:
         60:f9:33:85:7b:b8:84:73:83:7b:6a:cc:f3:92:7d:44:c4:bb:
         a0:7f:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 13:03:37 2024 by rpki-client on console-ams.rpki-client.org