Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202427.roa
File:                     AS202427.roa (raw, json)
Hash identifier:          3rpAqUjv2ttdjO94vsnmPwPM3eIXUAEaJeS8zyZPXFg=
Subject key identifier:   0A:47:B5:B0:E3:C6:F7:30:53:49:0F:01:C3:C8:57:CE:BA:53:28:C0
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       26E2CD3E0BCE11F91579131BA98BA2F28A495091
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202427.roa
Signing time:             Sun 06 Oct 2024 04:45:18 +0000
ROA not before:           Sun 06 Oct 2024 04:40:18 +0000
ROA not after:            Sun 05 Oct 2025 04:45:18 +0000
asID:                     202427
IP address blocks:        2a05:dfc1:600::/40 maxlen: 48
                          2a05:dfc1:5300::/40 maxlen: 48
                          2a0a:6040:2700::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e2:cd:3e:0b:ce:11:f9:15:79:13:1b:a9:8b:a2:f2:8a:49:50:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  6 04:40:18 2024 GMT
            Not After : Oct  5 04:45:18 2025 GMT
        Subject: CN=0A47B5B0E3C6F73053490F01C3C857CEBA5328C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:de:0f:a4:40:d1:2d:eb:ec:ef:95:07:25:
                    7d:ae:ab:c5:33:69:2d:f7:e1:77:3b:f3:50:a4:c7:
                    20:c3:be:cd:70:63:32:f1:cd:65:ed:cf:e6:92:b9:
                    17:7a:d1:d2:cc:9e:41:1c:56:53:09:72:92:93:96:
                    9d:05:ad:4a:88:f6:4c:27:4d:1d:d7:52:6e:cf:c6:
                    c9:61:9b:0c:34:32:c9:fc:c7:32:a3:19:5e:6d:9a:
                    a4:1d:9a:61:8f:02:39:2e:97:48:19:ac:3d:6f:ef:
                    f1:ef:73:3a:cd:1e:62:69:17:84:e1:f6:39:3a:d6:
                    dd:dc:19:2b:1d:19:98:b0:2a:be:d4:a4:46:b2:92:
                    b6:fd:fa:6b:cf:c2:4b:c3:5a:81:41:0d:98:03:a3:
                    bc:04:77:ae:5d:d3:2c:7b:0d:7a:1e:13:37:63:ec:
                    87:31:09:be:53:c5:22:d9:46:4c:1d:58:38:ee:54:
                    f0:9c:88:0d:27:7f:2b:1e:03:27:4d:58:7d:e7:13:
                    77:19:bc:e7:19:17:c6:e8:af:51:47:8a:f0:f2:c0:
                    16:3a:4d:da:15:02:df:a8:86:bc:8b:c1:02:c1:e7:
                    5e:3e:46:39:ab:63:3e:a8:d1:5e:78:c9:48:d5:a2:
                    c3:ee:7b:8b:52:8e:74:43:92:6f:44:35:2f:d3:b9:
                    2f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:47:B5:B0:E3:C6:F7:30:53:49:0F:01:C3:C8:57:CE:BA:53:28:C0
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS202427.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:600::/40
                  2a05:dfc1:5300::/40
                  2a0a:6040:2700::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:d4:10:9d:e7:7e:4a:e6:a4:d7:31:e5:68:11:0f:ac:27:5a:
         f0:0d:e7:c1:b3:ad:d2:b6:2c:55:f0:45:db:93:4b:6f:57:f6:
         80:13:da:a9:f6:1e:20:9d:6f:c8:0a:5d:41:10:64:27:61:fd:
         c1:29:ca:44:6b:51:93:c0:19:d8:88:41:61:c6:37:08:9b:13:
         6b:45:26:64:3a:e0:6b:a5:e6:f6:d3:75:a9:98:ac:0a:8b:e5:
         38:1b:4a:02:fb:7c:14:8d:36:3c:3c:b4:54:cf:12:2d:a0:0a:
         83:16:e0:b1:12:cd:2f:34:00:68:b1:f5:0a:fc:17:01:f2:78:
         b8:9e:74:a8:4b:98:84:d4:51:05:a3:53:81:ba:30:11:65:aa:
         b7:36:73:c9:86:18:4d:19:71:1e:09:7d:12:c9:2d:7e:19:d8:
         30:73:0d:fb:26:19:3c:b5:23:54:e6:a3:9c:2b:b4:fe:d9:5f:
         ee:7d:49:4a:0d:e8:52:7a:c5:b9:53:3a:b2:cb:72:40:df:4e:
         66:10:f7:a3:b2:49:e7:fa:e3:e2:1d:09:d7:0f:7c:38:b9:d1:
         88:8d:fa:d0:be:c1:f0:98:ec:dc:b4:cd:61:a6:dd:0c:04:c0:
         0e:4d:68:26:cc:c5:b6:62:e5:d2:c2:60:92:22:b6:37:b3:b6:
         78:26:4f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org