Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200866.roa
File:                     AS200866.roa (raw, json)
Hash identifier:          cQ7/1WxYqpoZbKx9kbDK3phC6NDMaNnI6Fv5yCL25ZU=
Subject key identifier:   C8:9B:2D:99:DC:36:DC:E7:42:2D:C0:6A:D3:0F:90:98:F3:79:91:4F
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       67F23E840A043B92D8FFF5411EF19AA1345FD294
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200866.roa
Signing time:             Sun 06 Oct 2024 04:44:58 +0000
ROA not before:           Sun 06 Oct 2024 04:39:58 +0000
ROA not after:            Sun 05 Oct 2025 04:44:58 +0000
asID:                     200866
IP address blocks:        2a0a:6040:3200::/40 maxlen: 48
                          2a0a:6040:3c00::/40 maxlen: 48
                          2a0a:6040:6b00::/40 maxlen: 48
                          2a0a:6040:d200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f2:3e:84:0a:04:3b:92:d8:ff:f5:41:1e:f1:9a:a1:34:5f:d2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:39:58 2024 GMT
            Not After : Oct  5 04:44:58 2025 GMT
        Subject: CN=C89B2D99DC36DCE7422DC06AD30F9098F379914F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:b1:3b:3c:4e:8e:02:f0:cd:21:0e:93:3b:
                    fd:61:e1:86:ae:83:f4:0b:9c:a5:95:0b:20:1b:6d:
                    7a:14:96:9e:04:17:37:b0:f4:8f:75:ea:49:04:05:
                    56:e3:84:20:22:32:36:73:fd:c4:e0:7a:a3:7e:08:
                    88:a8:7c:cd:cb:91:2c:0d:84:e7:36:33:73:32:3d:
                    15:66:d8:fb:19:49:d7:6d:95:9f:e9:ff:a8:ed:36:
                    5a:e4:a3:15:42:ef:4b:59:95:e9:65:94:36:a4:b9:
                    ad:d5:df:09:e5:78:ec:db:c9:95:27:20:1e:68:ae:
                    ee:d2:e1:67:ab:1e:87:c1:ea:13:c8:74:7f:a0:36:
                    1c:21:0a:b7:32:56:66:ce:87:5a:4b:ce:21:6c:4a:
                    8d:e2:3e:47:0f:ac:bb:1d:df:05:1c:50:d0:cc:2f:
                    92:29:25:22:29:a8:d1:e8:97:15:09:25:40:f0:f4:
                    aa:9a:51:4d:e1:a0:1a:9d:11:a0:c1:0c:4b:95:49:
                    6c:18:27:4f:43:72:25:36:31:5a:b5:d3:5b:0a:0b:
                    e9:ca:e8:7a:d7:af:1c:2f:52:87:53:fe:c4:d9:09:
                    64:ad:76:6b:ba:b2:27:f1:c6:18:e2:76:ef:1c:fe:
                    96:f7:a0:1a:5d:dd:b2:27:fc:a6:28:71:99:0b:86:
                    2e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9B:2D:99:DC:36:DC:E7:42:2D:C0:6A:D3:0F:90:98:F3:79:91:4F
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS200866.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3200::/40
                  2a0a:6040:3c00::/40
                  2a0a:6040:6b00::/40
                  2a0a:6040:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:20:2d:cb:41:95:5a:de:22:f5:75:bd:ce:27:ce:5b:02:54:
         95:1e:6d:0c:c1:fa:ba:42:05:c2:99:13:7b:24:35:dc:be:b8:
         f8:2c:3c:8b:c7:57:f8:b1:9f:19:f6:ad:2e:3a:6f:44:ff:8d:
         99:e5:b5:d6:29:5e:47:70:4d:c5:4a:94:f3:93:5f:72:87:ed:
         6c:57:39:cd:8b:ac:70:99:8c:92:f3:a7:da:2b:a8:41:1f:f9:
         7a:0c:1e:68:b8:4b:0b:d9:e7:a1:aa:b9:ed:c6:75:fd:45:b4:
         5f:b5:c2:d2:b8:35:eb:63:02:4c:8c:c0:18:6d:05:ec:9f:cc:
         81:f0:c6:41:2c:11:7b:93:8e:33:e2:7d:c2:94:68:df:aa:11:
         72:2c:71:8f:20:7c:37:62:56:64:93:c8:ec:e3:a2:30:6b:82:
         e9:87:ab:fe:a5:91:0d:19:74:09:2b:4e:db:f1:1b:69:c7:02:
         99:9b:95:ed:0e:fc:93:e9:97:ea:41:50:3a:bc:10:57:27:cf:
         94:e1:ba:0b:13:5d:a5:ad:c6:57:bd:8f:eb:73:6a:d4:c9:2d:
         18:72:3b:0b:60:2b:0f:82:66:75:77:e0:16:59:a6:41:16:f2:
         9f:53:b1:9c:04:d5:8b:93:d6:ff:ef:f5:92:43:14:dd:5e:8a:
         88:98:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org