Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199832.roa
File:                     AS199832.roa (raw, json)
Hash identifier:          GmTcfZ5TZajqCDCNT4/h7kxBQ0czpDiglvXGCxhWlQI=
Subject key identifier:   D4:FA:CC:A9:CF:75:19:55:B0:C9:25:1D:21:15:BA:1A:32:60:94:A6
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       56C22EE72859562634717E9131E6582D1C3CB020
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199832.roa
Signing time:             Sun 06 Oct 2024 04:45:20 +0000
ROA not before:           Sun 06 Oct 2024 04:40:20 +0000
ROA not after:            Sun 05 Oct 2025 04:45:20 +0000
asID:                     199832
IP address blocks:        2a0a:6040:2200::/39 maxlen: 48
                          2a0a:6040:2200::/40 maxlen: 48
                          2a0a:6040:2300::/40 maxlen: 48
                          2a0a:6040:6600::/40 maxlen: 48
                          2a0a:6040:8800::/40 maxlen: 48
                          2a0a:6040:a400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c2:2e:e7:28:59:56:26:34:71:7e:91:31:e6:58:2d:1c:3c:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:20 2024 GMT
            Not After : Oct  5 04:45:20 2025 GMT
        Subject: CN=D4FACCA9CF751955B0C9251D2115BA1A326094A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c0:f3:fc:c0:c4:5e:94:47:39:30:e3:25:c1:
                    f5:20:55:57:4b:be:d2:15:56:66:14:43:9c:d9:99:
                    6b:ef:00:a5:d7:35:a9:bc:18:11:68:4b:0f:0d:8a:
                    4d:4f:00:b7:15:29:6f:a6:1a:22:8a:8c:4a:a0:b9:
                    bb:6b:c8:14:66:42:e4:9e:de:af:f2:35:a1:78:5c:
                    31:df:08:f2:b2:84:fe:5d:5d:3e:ac:10:ce:2e:25:
                    df:6a:23:2b:b7:bd:92:84:e5:19:84:8b:55:ad:da:
                    23:0f:97:4a:0b:63:64:99:c8:52:52:7c:17:99:49:
                    1a:72:ac:49:c5:99:73:99:f4:18:ac:b8:dd:d1:92:
                    dc:f5:b7:36:75:b8:ea:0a:e5:4a:7f:e8:7b:69:5e:
                    b7:a3:f1:bf:b2:97:d9:1d:e2:f8:a7:ca:9a:39:ed:
                    ec:9e:80:cf:1a:c4:36:f9:ce:3a:0c:ef:9e:b4:93:
                    75:07:f8:21:7f:cc:89:73:71:6c:d3:70:6f:dc:1c:
                    0d:39:90:76:ec:0a:fd:ab:5c:b0:85:dc:a0:48:88:
                    09:29:da:bd:e2:c7:f7:81:b5:97:51:d7:fd:64:22:
                    e4:c5:08:b4:b6:65:24:ae:8d:06:03:5a:4a:d4:6b:
                    a0:12:5c:15:cc:54:06:2e:d0:7e:cc:72:93:a4:59:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FA:CC:A9:CF:75:19:55:B0:C9:25:1D:21:15:BA:1A:32:60:94:A6
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:2200::/39
                  2a0a:6040:6600::/40
                  2a0a:6040:8800::/40
                  2a0a:6040:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:59:ea:f0:67:7b:2b:de:70:3f:06:41:93:64:03:5e:89:
         49:76:af:6e:44:9b:41:df:45:94:73:50:3d:1c:88:57:76:c6:
         5e:2f:40:25:88:28:18:fb:9d:f2:a3:1f:f5:d5:a3:9c:7b:09:
         94:20:08:cd:23:3a:73:8b:91:38:30:01:10:e5:0c:85:a1:9a:
         56:c6:60:1a:a5:50:eb:12:ea:6c:7c:e7:5a:1d:7f:e1:97:d5:
         d3:b9:64:84:32:5f:04:5b:d1:8f:45:c1:3b:7b:c0:4c:e5:62:
         f5:a8:43:40:d8:6f:a1:ef:21:4a:63:74:e7:53:c4:c4:4f:f8:
         16:f7:43:4c:0d:73:15:6b:08:11:66:7f:c5:60:f3:a8:9b:83:
         e8:9a:fa:fa:93:9b:6f:89:71:29:86:8f:07:93:d3:7c:dd:eb:
         03:00:c7:b1:43:e2:2e:57:79:c1:c9:af:3f:22:69:ec:ea:9d:
         63:cb:2c:68:a8:5f:19:81:24:2d:09:6f:d4:08:44:99:92:a8:
         ba:0f:c1:2b:78:74:b6:fc:b8:52:47:b3:f1:62:e5:ea:7e:4e:
         6c:09:18:be:cf:d2:26:5c:9f:72:ea:bd:a5:1f:14:1a:b7:21:
         ab:89:f9:1c:e2:85:ac:a8:e0:54:52:82:3a:86:3c:31:94:c0:
         89:bd:38:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:45 2024 by rpki-client on console-fra.rpki-client.org