Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199925.roa
File:                     AS199925.roa (raw, json)
Hash identifier:          k5D/CV3GjOobLr+P/yjRcaMucxbEik/1fpblm6kJr6k=
Subject key identifier:   63:B9:86:17:40:E8:F8:C5:14:5F:56:B2:D7:B0:7F:2C:E3:C8:FC:5C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       1E4D7604C01E49F165F439AEC62166832D5FDB90
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199925.roa
Signing time:             Sun 06 Oct 2024 04:45:14 +0000
ROA not before:           Sun 06 Oct 2024 04:40:14 +0000
ROA not after:            Sun 05 Oct 2025 04:45:14 +0000
asID:                     199925
IP address blocks:        2a05:dfc1:100::/40 maxlen: 48
                          2a05:dfc1:3700::/40 maxlen: 48
                          2a05:dfc1:3d00::/40 maxlen: 48
                          2a05:dfc1:5100::/40 maxlen: 48
                          2a05:dfc1:5200::/40 maxlen: 48
                          2a05:dfc1:5c00::/40 maxlen: 48
                          2a05:dfc1:9900::/40 maxlen: 48
                          2a0a:6040:8f00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4d:76:04:c0:1e:49:f1:65:f4:39:ae:c6:21:66:83:2d:5f:db:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:14 2024 GMT
            Not After : Oct  5 04:45:14 2025 GMT
        Subject: CN=63B9861740E8F8C5145F56B2D7B07F2CE3C8FC5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:48:81:aa:ac:b2:a6:13:c1:a5:10:b9:1e:
                    ed:4e:01:84:a8:ae:91:68:a5:dc:93:f6:80:4e:63:
                    67:62:59:dc:a9:5d:a7:b6:e3:43:c6:2c:1b:8f:6c:
                    82:d5:aa:dc:bb:fe:3e:9c:a3:b5:f8:e4:05:c7:b7:
                    3a:ce:68:14:31:63:7e:35:b0:71:4c:0b:90:9c:f5:
                    83:32:43:5c:ee:d1:72:53:58:53:b6:64:5c:18:5a:
                    8e:89:a2:a3:c8:5d:f7:b5:a9:17:fc:b3:7f:9d:83:
                    1e:27:e7:89:ec:09:ec:04:72:e5:16:89:05:1d:8b:
                    76:9c:3c:ec:95:ab:44:0e:57:b6:30:c3:07:57:1d:
                    2d:d3:04:02:8b:8d:8f:16:29:80:7d:e3:85:8e:8d:
                    3b:af:e5:b8:38:17:2d:bd:e9:b3:73:a8:a7:ce:a8:
                    dd:ec:ea:63:7f:13:5c:06:1e:da:07:2c:5f:ca:a3:
                    d4:71:b8:f1:f5:de:a3:b5:3b:de:77:ff:71:b5:00:
                    cc:1f:05:14:b6:7e:c2:d0:a9:65:08:54:24:be:70:
                    45:70:67:f4:75:d8:9e:b7:ef:d2:71:bb:97:e4:eb:
                    f3:88:2e:4f:61:c6:7f:ff:ae:d4:2b:c5:b6:df:c2:
                    ea:fc:42:59:2d:fe:1b:3a:01:8a:e3:f0:1b:2a:cf:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B9:86:17:40:E8:F8:C5:14:5F:56:B2:D7:B0:7F:2C:E3:C8:FC:5C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS199925.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:100::/40
                  2a05:dfc1:3700::/40
                  2a05:dfc1:3d00::/40
                  2a05:dfc1:5100::-2a05:dfc1:52ff:ffff:ffff:ffff:ffff:ffff
                  2a05:dfc1:5c00::/40
                  2a05:dfc1:9900::/40
                  2a0a:6040:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:4f:d0:47:65:d2:3d:01:12:c9:24:a6:dc:3f:0f:38:d5:1f:
         06:77:46:70:eb:24:57:b3:be:f8:50:62:c8:c4:a6:ba:42:6d:
         da:d1:1a:eb:08:7a:63:fc:81:26:fa:38:ba:55:4e:fb:4e:c7:
         06:18:21:59:40:85:19:e8:7c:4c:c0:1a:17:de:01:88:e2:36:
         5a:3f:d7:2a:d1:ec:f0:26:7e:1e:e9:bb:60:99:2d:cf:11:5c:
         20:50:6e:44:e7:3a:30:72:53:f8:72:fb:bf:a7:83:f9:f7:93:
         4b:13:81:5e:c2:83:43:56:a8:8e:25:3e:ba:b6:08:9e:97:62:
         ee:2e:cf:b0:93:f0:8d:03:9c:80:f3:1e:71:89:c3:db:64:43:
         66:bf:30:65:cc:98:85:91:61:98:94:a1:46:32:95:72:0f:0e:
         43:29:19:6c:97:3d:e1:94:6f:bb:e6:d3:37:8b:01:64:46:5a:
         b8:32:fb:36:20:75:ea:49:b9:86:1b:1e:7b:76:49:04:4a:b9:
         85:29:7e:74:f2:9f:49:68:79:b0:1c:0c:e2:38:6b:b1:ae:38:
         b1:88:93:b3:31:a5:2f:90:e3:60:91:7e:02:18:63:49:d7:23:
         8a:20:a8:c5:2d:61:63:ff:b0:34:e7:a5:15:e5:70:f4:de:20:
         5d:e7:31:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:13 2024 by rpki-client on console-ams.rpki-client.org