Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202427.roa
File:                     AS202427.roa (raw, json)
Hash identifier:          3E8Oa1yrX0hX4qm6ehv5BWe7XW4N2sOS6HcF2NmF2Yw=
Subject key identifier:   BD:98:4D:30:8B:02:18:E8:AE:1E:3A:0E:29:C4:56:F7:77:08:D4:62
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       6C0BE48FBA3749709FA65D7611E27267B07ED561
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202427.roa
Signing time:             Sun 05 Nov 2023 04:07:01 +0000
ROA not before:           Sun 05 Nov 2023 04:02:01 +0000
ROA not after:            Sun 03 Nov 2024 04:07:01 +0000
asID:                     202427
IP address blocks:        2a05:dfc1:600::/40 maxlen: 48
                          2a05:dfc1:5300::/40 maxlen: 48
                          2a0a:6040:2700::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0b:e4:8f:ba:37:49:70:9f:a6:5d:76:11:e2:72:67:b0:7e:d5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:01 2023 GMT
            Not After : Nov  3 04:07:01 2024 GMT
        Subject: CN=BD984D308B0218E8AE1E3A0E29C456F77708D462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:22:6e:8c:c9:2a:d4:da:4b:d7:8d:97:26:
                    d4:04:74:24:64:53:1b:82:dc:e2:7f:65:9f:3a:08:
                    2e:28:4f:60:cd:f5:fc:66:1a:66:bb:de:a6:fe:31:
                    50:6e:22:9f:d9:4e:aa:41:bd:5d:95:ef:e8:33:01:
                    1d:d3:7c:57:5d:2b:e5:b8:c5:3d:83:94:f3:3e:ad:
                    7f:9c:e8:16:17:8c:32:cc:ac:16:2a:2b:83:12:73:
                    64:44:08:38:3f:35:a4:6a:79:56:31:1d:5e:61:e1:
                    80:d9:30:6c:c6:a9:81:cc:6f:ba:f7:ef:b7:7c:3c:
                    9f:00:4f:25:11:6e:a0:6b:14:f6:bf:07:46:02:51:
                    77:7c:c7:c2:77:27:26:e7:d1:3e:e9:72:8e:d9:df:
                    9a:53:e3:7b:f1:fe:df:cb:21:47:80:ce:b0:53:b6:
                    c6:53:1b:ac:b2:61:0f:5b:bf:3d:64:98:ee:0a:d7:
                    d9:93:a9:da:72:2f:89:54:bc:06:40:d2:5a:48:2e:
                    72:3e:f8:6f:39:fe:a0:7b:f6:d1:f0:8a:e9:43:4f:
                    9f:2a:eb:67:40:ce:26:5c:ca:1a:fe:ef:83:55:c6:
                    8d:9f:a1:da:65:7b:92:79:2f:1f:90:b1:fb:8b:f0:
                    e9:b3:6a:68:a0:19:07:5b:f5:42:64:69:4d:e5:1e:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:4D:30:8B:02:18:E8:AE:1E:3A:0E:29:C4:56:F7:77:08:D4:62
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:600::/40
                  2a05:dfc1:5300::/40
                  2a0a:6040:2700::/40

    Signature Algorithm: sha256WithRSAEncryption
         6b:05:54:ad:a9:97:a4:c4:90:8d:0d:70:0a:9b:31:eb:5f:51:
         af:4a:da:44:48:c2:c8:b1:c8:4f:64:6c:1c:91:df:10:95:42:
         24:49:30:cb:24:1c:65:2c:79:7a:39:5a:8f:52:2f:57:fe:b9:
         21:28:62:91:c2:e2:49:bc:2d:79:26:f7:28:7e:df:4c:fb:7c:
         68:fa:27:d6:c6:df:89:d6:5d:13:9f:ac:2c:10:25:2d:47:2c:
         ae:4e:bc:75:05:21:98:91:e2:6a:44:06:c0:03:5d:59:e7:f3:
         5b:c3:62:b9:08:08:4e:df:24:22:ba:c7:3c:df:cc:25:c2:d4:
         c3:99:10:4c:9f:41:cb:f3:a6:89:41:70:a8:e6:2b:e8:16:65:
         75:ce:1d:bb:ce:bf:83:6c:6d:0f:c4:22:c2:a6:06:3f:c0:2a:
         b1:f1:b9:4b:f9:24:3c:6a:77:18:48:6d:1b:b3:3b:b3:91:e9:
         55:3c:18:54:b8:ed:98:f1:1d:86:e4:3f:0b:5b:9f:15:68:c9:
         77:b0:33:88:df:a6:99:8e:6c:d9:0d:62:76:18:86:95:cb:26:
         4b:99:19:b9:30:c4:ad:c0:2a:d8:5c:ff:0f:4c:8a:aa:65:62:
         df:04:76:b1:22:e7:ba:9c:ac:88:22:f5:68:ba:80:33:84:3b:
         c4:da:e6:e8
-----BEGIN CERTIFICATE-----
MIIE+jCCA+KgAwIBAgIUbAvkj7o3SXCfpl12EeJyZ7B+1WEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yMzExMDUwNDAyMDFaFw0yNDExMDMwNDA3MDFaMDMxMTAvBgNV
BAMTKEJEOTg0RDMwOEIwMjE4RThBRTFFM0EwRTI5QzQ1NkY3NzcwOEQ0NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/OCJujMkq1NpL142XJtQEdCRk
UxuC3OJ/ZZ86CC4oT2DN9fxmGma73qb+MVBuIp/ZTqpBvV2V7+gzAR3TfFddK+W4
xT2DlPM+rX+c6BYXjDLMrBYqK4MSc2RECDg/NaRqeVYxHV5h4YDZMGzGqYHMb7r3
77d8PJ8ATyURbqBrFPa/B0YCUXd8x8J3Jybn0T7pco7Z35pT43vx/t/LIUeAzrBT
tsZTG6yyYQ9bvz1kmO4K19mTqdpyL4lUvAZA0lpILnI++G85/qB79tHwiulDT58q
62dAziZcyhr+74NVxo2fodple5J5Lx+QsfuL8OmzamigGQdb9UJkaU3lHlFNAgMB
AAGjggIEMIICADAdBgNVHQ4EFgQUvZhNMIsCGOiuHjoOKcRW93cI1GIwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjAyNDI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAAjAYAwYAKgXfwQYDBgAqBd/BUwMGACoKYEAnMA0GCSqG
SIb3DQEBCwUAA4IBAQBrBVStqZekxJCNDXAKmzHrX1GvStpESMLIschPZGwckd8Q
lUIkSTDLJBxlLHl6OVqPUi9X/rkhKGKRwuJJvC15Jvcoft9M+3xo+ifWxt+J1l0T
n6wsECUtRyyuTrx1BSGYkeJqRAbAA11Z5/Nbw2K5CAhO3yQiusc838wlwtTDmRBM
n0HL86aJQXCo5ivoFmV1zh27zr+DbG0PxCLCpgY/wCqx8blL+SQ8ancYSG0bszuz
kelVPBhUuO2Y8R2G5D8LW58VaMl3sDOI36aZjmzZDWJ2GIaVyyZLmRm5MMStwCrY
XP8PTIqqZWLfBHaxIue6nKyIIvVouoAzhDvE2ubo
-----END CERTIFICATE-----
Generated at Tue May 21 04:45:06 2024 by rpki-client on console-fra.rpki-client.org