Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214674.roa
File:                     AS214674.roa (raw, json)
Hash identifier:          +QOvMRZaPQSwio//RM9wPJk9DMspIIILmr58RSfPpls=
Subject key identifier:   AB:1C:A7:E8:45:40:F4:B2:1F:73:81:E8:82:15:95:59:E4:BB:15:9C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       75BBA2C39E326FF0247A0198B86D84E8477233EC
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214674.roa
Signing time:             Wed 11 Sep 2024 09:10:54 +0000
ROA not before:           Wed 11 Sep 2024 09:05:54 +0000
ROA not after:            Wed 10 Sep 2025 09:10:54 +0000
asID:                     214674
IP address blocks:        2a06:9f81:5100::/40 maxlen: 48
                          2a06:9f81:5400::/40 maxlen: 48
                          2a06:9f81:6100::/40 maxlen: 48
                          2a06:9f81:6400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bb:a2:c3:9e:32:6f:f0:24:7a:01:98:b8:6d:84:e8:47:72:33:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 11 09:05:54 2024 GMT
            Not After : Sep 10 09:10:54 2025 GMT
        Subject: CN=AB1CA7E84540F4B21F7381E882159559E4BB159C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b5:f2:51:14:0d:19:61:86:f3:b1:fd:12:c2:
                    c6:cb:66:d9:ac:d4:1c:31:c4:fd:18:71:f5:57:be:
                    bc:f9:12:f2:83:0f:37:02:3b:31:d7:8c:cc:82:14:
                    1f:f1:04:7c:e8:ea:a3:91:b0:93:31:dd:af:ac:ad:
                    e1:96:b3:16:7a:31:92:a5:82:61:ca:c5:c9:5a:6b:
                    b6:c7:ae:b3:4d:c5:2d:98:6a:47:47:6b:05:8c:24:
                    8d:f4:00:4b:21:1c:9c:09:49:b1:f8:09:5b:11:8e:
                    ef:de:e2:42:7f:0a:ba:ed:98:ab:d3:e5:02:4d:2b:
                    45:d7:31:f4:74:71:24:ba:a9:20:56:4f:4f:8b:66:
                    10:bb:a1:2f:25:2b:ea:6c:d3:bb:bb:9e:c4:25:aa:
                    53:75:57:3a:80:10:b7:7a:08:87:44:ef:33:72:49:
                    a0:59:cd:7d:6d:3b:65:42:0b:ef:02:0f:4d:6f:c9:
                    8e:45:26:93:40:c8:3f:27:31:66:e2:86:69:56:ce:
                    49:3d:64:33:28:9f:35:ac:42:92:99:9f:56:ba:35:
                    57:2b:4c:97:4b:53:04:2a:37:4e:ec:ec:6f:e1:b0:
                    d8:5c:4d:1f:0f:e6:c8:6a:7a:30:ac:ea:ff:22:29:
                    d0:c3:93:3b:62:e4:b4:b5:cc:c4:b9:cc:6a:4f:cb:
                    34:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1C:A7:E8:45:40:F4:B2:1F:73:81:E8:82:15:95:59:E4:BB:15:9C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS214674.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:5100::/40
                  2a06:9f81:5400::/40
                  2a06:9f81:6100::/40
                  2a06:9f81:6400::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:78:45:cb:07:d2:c3:0f:8f:8a:82:14:80:53:eb:da:50:8d:
         08:71:2c:e3:5f:7b:be:e4:b8:aa:ea:cc:46:f4:a0:84:4d:90:
         f4:e6:7f:61:e1:9a:87:64:d8:6f:07:61:94:1c:b5:61:e8:74:
         e1:19:4f:31:d7:d7:4c:53:67:26:5b:cc:68:02:ca:8a:4f:76:
         75:ff:8f:d5:74:f6:03:a8:69:46:1a:38:6a:3e:8e:81:41:5b:
         d5:e4:29:d9:47:24:88:14:56:53:9a:ea:4e:4c:9d:45:a2:50:
         58:41:72:0d:4b:9c:08:0a:b0:9f:d4:f5:97:22:db:67:c7:73:
         8d:57:d7:85:39:e4:e8:95:68:7f:b0:d8:c0:1c:0a:05:b5:4c:
         71:f0:a0:a8:18:b3:92:04:5e:97:62:f7:d4:4c:19:17:24:59:
         7b:b4:35:c4:65:73:14:7b:dd:fa:91:e9:ba:54:af:6c:bd:83:
         51:c4:7a:40:4b:29:d5:1e:8a:12:0c:ae:74:6b:43:6d:e3:29:
         fa:32:c7:3d:e8:3a:ec:b2:e7:bd:ef:11:ad:77:ce:e3:8b:58:
         c7:48:2c:49:5e:79:33:d5:66:02:65:0e:80:37:9a:c3:4d:99:
         d3:b6:68:26:19:76:b7:96:ec:87:2e:23:7b:98:25:ea:12:a8:
         2e:d5:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org