Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212332.roa
File:                     AS212332.roa (raw, json)
Hash identifier:          8oy0LNuYzypzJb3vTRVnjtSjOpL3l+E7zSE0VJnKRGY=
Subject key identifier:   16:44:02:78:0B:CB:21:56:6F:C5:B6:C1:63:CD:17:F4:83:AA:53:C8
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       343AC1E678E8E1B3B0D9962BD113F02B65CF00E1
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212332.roa
Signing time:             Tue 21 Nov 2023 11:33:45 +0000
ROA not before:           Tue 21 Nov 2023 11:28:45 +0000
ROA not after:            Tue 19 Nov 2024 11:33:45 +0000
asID:                     212332
IP address blocks:        2a05:dfc1:8a00::/40 maxlen: 48
                          2a06:9f81:1500::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3a:c1:e6:78:e8:e1:b3:b0:d9:96:2b:d1:13:f0:2b:65:cf:00:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov 21 11:28:45 2023 GMT
            Not After : Nov 19 11:33:45 2024 GMT
        Subject: CN=164402780BCB21566FC5B6C163CD17F483AA53C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8d:38:96:9c:48:fb:c8:99:54:8e:a5:b0:3e:
                    a1:25:c3:8e:c2:5e:4c:37:24:65:81:e7:3f:3b:05:
                    ec:ce:bd:f3:5b:8b:9d:5a:44:64:67:f2:ee:7f:44:
                    92:a1:73:92:9d:41:a2:75:ad:b8:da:d6:09:9b:9e:
                    e8:50:3f:f7:fe:f1:96:2a:c4:6b:41:d8:1b:1e:4c:
                    9d:18:45:77:fe:4a:95:cd:4d:2f:2d:c9:85:29:d5:
                    66:cc:e3:76:bb:35:a5:4f:53:a8:e6:f5:3b:b3:9c:
                    fd:6d:54:1c:ca:c0:1b:ab:15:9f:d0:ca:3a:e9:f7:
                    c3:b1:58:6e:fc:dd:25:9c:4a:b3:53:56:00:f3:2b:
                    d6:64:45:a6:d5:3f:1c:ee:7e:f0:d9:20:aa:ee:92:
                    2f:a2:3d:78:d3:93:e0:80:ac:59:a8:d4:4b:b3:bd:
                    a7:85:f2:66:d8:4c:03:8e:57:09:c9:a5:67:e3:17:
                    68:6a:a4:28:43:5b:a0:fa:37:06:17:c4:a1:0e:43:
                    79:c5:6a:e6:40:ae:d1:9d:38:64:1c:e8:4d:78:e8:
                    91:23:ac:1f:cc:56:11:5c:8f:46:7e:af:e7:e4:ae:
                    78:64:a0:61:9f:49:de:af:23:e5:f7:e3:5c:36:1a:
                    d3:20:6f:0b:93:c1:24:1a:ca:4c:16:97:ad:e6:95:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:44:02:78:0B:CB:21:56:6F:C5:B6:C1:63:CD:17:F4:83:AA:53:C8
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS212332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8a00::/40
                  2a06:9f81:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:05:ee:6e:f1:19:e9:99:c7:e4:18:b6:3e:9f:e9:fc:98:79:
         b8:e2:13:0f:23:83:34:a2:6b:52:4d:e8:e6:d9:d3:37:ba:83:
         39:8e:bc:a9:1d:5b:8f:15:06:15:b6:0d:05:45:6c:bb:80:5a:
         92:98:a9:88:f3:5b:20:90:e5:16:d3:24:23:ef:e3:e1:5c:94:
         d2:b1:e3:b5:a0:40:9f:87:75:f6:81:30:7f:2e:a7:29:8d:e7:
         83:ce:76:a2:85:c8:7f:8e:8e:a0:75:4f:c4:e4:08:4c:53:b6:
         7a:4c:7f:13:67:80:5e:2b:5c:1a:f0:e5:67:ee:c5:4d:b0:24:
         5a:6a:32:b7:0d:e4:d4:12:2e:ff:94:1d:50:3d:94:69:a5:c7:
         ab:4e:8d:0f:0e:1f:45:75:fa:94:bd:af:60:28:55:22:f6:4b:
         eb:da:77:f1:9d:66:a4:d5:f9:dd:63:8d:43:e6:16:82:06:25:
         53:37:cd:38:7b:0d:2a:10:70:7c:64:ad:7c:e3:73:a8:fc:59:
         a4:a7:f3:69:a2:74:41:20:05:06:55:b1:43:26:44:1d:e6:ff:
         06:59:05:df:76:7c:c8:6e:29:be:d0:e6:19:e1:f6:4d:bd:42:
         06:c0:b5:e9:77:bd:d0:01:e3:8a:0e:19:21:1d:e0:2b:c5:0b:
         e3:17:3e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org