Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206218.roa
File:                     AS206218.roa (raw, json)
Hash identifier:          2ECT/ScFL6llWZ54kQ3cqrNhmB4B747PCcucsz+EvWA=
Subject key identifier:   FF:EE:CE:90:5E:0D:86:CA:4F:84:4E:B7:C7:B4:4D:5B:B0:40:4C:1B
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       782CA35AADBD4B19A9EC691FC8E04AFE3A606E1A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206218.roa
Signing time:             Sun 05 Nov 2023 04:07:05 +0000
ROA not before:           Sun 05 Nov 2023 04:02:05 +0000
ROA not after:            Sun 03 Nov 2024 04:07:05 +0000
asID:                     206218
IP address blocks:        2a0a:6040:a00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 22:57:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:2c:a3:5a:ad:bd:4b:19:a9:ec:69:1f:c8:e0:4a:fe:3a:60:6e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  5 04:02:05 2023 GMT
            Not After : Nov  3 04:07:05 2024 GMT
        Subject: CN=FFEECE905E0D86CA4F844EB7C7B44D5BB0404C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:15:af:95:fe:bf:30:65:ba:05:1b:d7:47:
                    4d:7e:04:49:c7:26:17:a6:1d:61:67:16:ce:0c:e0:
                    2b:a1:32:8e:1f:65:1c:be:c2:f1:7e:da:85:05:ed:
                    58:9f:d0:a1:ac:33:75:d1:9a:2d:ac:16:32:93:45:
                    c5:d3:cf:e0:e8:dd:f5:94:c2:4a:f8:17:c2:c6:46:
                    d1:93:d2:c9:e9:9c:fa:c8:65:45:d1:0b:e8:bf:ba:
                    fc:2a:65:ad:ea:7a:dc:8b:66:a1:f9:e2:69:e8:5a:
                    7b:c4:5c:9f:ca:f0:c8:fd:5f:09:95:69:07:21:64:
                    dd:81:ad:03:ee:cb:8c:28:e5:5a:37:f6:64:41:ec:
                    43:51:4a:4f:d5:d0:40:cd:1b:81:ed:1c:f1:bb:4f:
                    c6:6d:c7:c0:c7:09:0b:32:d9:35:c3:f3:e4:0a:a8:
                    0d:16:74:a9:41:a2:fe:e1:50:41:cd:09:af:45:93:
                    84:ca:e2:8f:fd:ab:39:98:3e:23:de:1c:98:81:38:
                    ca:94:b9:09:4b:eb:85:d8:26:72:4b:5b:15:a9:6b:
                    7f:51:c9:f3:0b:f3:95:8e:4c:b8:4f:f6:c9:6a:89:
                    b2:cd:b7:73:fb:f9:39:a3:89:76:b7:be:5b:28:25:
                    7c:9b:1e:50:30:db:43:09:c0:1e:b4:d4:3a:bc:f0:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EE:CE:90:5E:0D:86:CA:4F:84:4E:B7:C7:B4:4D:5B:B0:40:4C:1B
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS206218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:44:c5:b6:25:d5:d6:43:02:d5:46:c3:24:87:35:a8:23:71:
         63:ef:77:08:b7:57:27:8f:56:79:6d:28:eb:07:a3:3f:80:e1:
         a3:11:c6:91:bc:b4:02:5c:38:30:74:6f:86:b8:85:8f:03:8f:
         f1:fa:17:e2:4e:09:df:9b:01:89:62:f1:a6:56:7a:15:bf:00:
         56:13:19:e3:70:32:73:f2:a4:1a:9f:48:1a:71:31:36:fe:8b:
         a3:16:1e:76:25:44:37:e8:06:c0:dc:e1:c6:b1:97:f5:50:3b:
         54:d7:84:f6:3d:75:e2:c4:fd:72:8c:ad:ec:29:c4:dc:a1:af:
         0e:86:88:7e:24:51:95:b3:92:2c:d1:73:13:00:43:82:6e:56:
         a3:9f:8e:34:13:7b:2b:1a:61:4c:33:0b:b9:28:e1:20:5e:48:
         c8:98:7a:ff:98:1a:55:8c:b5:d7:27:b2:05:d3:58:91:6f:f3:
         5b:46:93:12:c9:50:54:41:44:47:e3:d9:56:71:fc:ff:26:10:
         d0:c6:ee:13:4f:10:10:47:9e:8e:a5:98:3a:61:23:19:e0:42:
         4b:e2:8d:10:08:0f:68:2f:f1:d9:26:78:b8:ec:41:46:5e:83:
         71:a9:6a:07:e3:4d:d4:72:39:57:7a:e1:13:ac:92:89:2f:21:
         22:2e:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 04:45:06 2024 by rpki-client on console-fra.rpki-client.org