Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215592.roa
File:                     AS215592.roa (raw, json)
Hash identifier:          nKuXmSMGfr3c/+Ur8kRRmGhpb5u5/R2Jep0Q467FPS0=
Subject key identifier:   09:38:F4:43:B0:BC:F7:1C:E5:72:35:FB:1C:F1:58:54:7A:F2:13:AF
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       24FBEE2278241C8321568AC804F3CB0AAF2C6A5A
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215592.roa
Signing time:             Sun 14 Jul 2024 05:17:39 +0000
ROA not before:           Sun 14 Jul 2024 05:12:39 +0000
ROA not after:            Sun 13 Jul 2025 05:17:39 +0000
asID:                     215592
IP address blocks:        2a06:9f81:3900::/40 maxlen: 48
                          2a06:9f81:5600::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fb:ee:22:78:24:1c:83:21:56:8a:c8:04:f3:cb:0a:af:2c:6a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jul 14 05:12:39 2024 GMT
            Not After : Jul 13 05:17:39 2025 GMT
        Subject: CN=0938F443B0BCF71CE57235FB1CF158547AF213AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:7f:db:44:b6:48:18:01:55:7f:52:0a:2f:
                    e1:d8:82:17:56:2d:2e:8f:15:5d:a5:5a:28:fd:ac:
                    f5:ae:b3:8a:f3:23:2c:1e:ac:b7:32:90:42:29:29:
                    f5:98:3a:00:5a:d1:41:d5:7c:61:c6:1f:98:24:74:
                    c6:bb:6e:52:14:87:6e:43:f5:3b:33:f0:34:8c:73:
                    1b:eb:08:f2:34:01:b0:1b:ce:19:15:c8:2e:c1:c2:
                    29:13:d9:cd:b0:ac:e3:38:86:2d:94:b5:8f:ef:37:
                    fb:4f:c3:83:c0:84:10:93:a1:85:7a:b2:a0:9e:b9:
                    05:f4:da:16:e5:f5:85:25:4c:1f:a0:74:36:62:48:
                    0b:18:91:36:ea:97:d9:48:10:f1:92:6c:45:d3:ff:
                    49:6d:1b:f4:c3:b7:17:1d:9b:7a:7f:c7:3f:a1:df:
                    84:c4:89:39:a4:b7:5f:a9:f2:69:ed:1c:d5:0b:c6:
                    2f:c4:2d:05:07:f4:8a:01:78:6b:67:65:82:b8:65:
                    39:1e:1a:35:7f:81:aa:fb:97:a1:64:3b:a0:11:24:
                    4a:30:be:22:16:db:4f:8d:a1:92:75:ae:22:3e:cd:
                    cf:b3:0b:37:03:8d:67:5b:e2:86:0c:96:27:22:f3:
                    1e:f9:19:a5:8f:25:b1:65:32:1c:a6:cb:b6:b1:d6:
                    7e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:38:F4:43:B0:BC:F7:1C:E5:72:35:FB:1C:F1:58:54:7A:F2:13:AF
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS215592.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3900::/40
                  2a06:9f81:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:6c:f0:a7:8e:c4:6f:c8:fd:6e:b5:fb:89:c9:aa:f5:7d:a7:
         d9:38:02:40:bf:4b:76:cc:74:eb:07:db:ef:ba:a9:85:92:63:
         5e:94:8e:fa:e9:57:7a:80:44:a7:85:97:63:14:33:81:94:53:
         03:2b:db:3b:f1:ae:cf:3d:5d:51:f5:d5:27:b8:e3:b1:fa:a3:
         75:72:f7:ad:b0:bb:d2:d9:de:38:5a:33:1e:31:21:52:ce:e7:
         f1:1b:63:8f:14:57:60:5a:37:f7:0b:a7:b0:b8:3a:6c:62:65:
         50:3a:38:28:59:d0:61:ce:b4:45:d0:ab:42:e0:fe:71:69:f2:
         97:01:5d:e6:03:8b:4f:62:ef:ad:f3:5c:eb:3a:22:a9:47:07:
         40:a1:ad:a1:83:19:31:8d:07:d0:7d:39:0a:95:0c:40:b0:01:
         0f:92:c6:a4:e6:7d:ea:cf:c6:a2:c9:4c:91:6e:e3:79:fa:98:
         9b:ae:7d:85:ba:61:ec:42:be:1c:6b:11:65:bf:1a:b6:d0:4b:
         52:e9:dd:67:c4:bb:b5:cd:99:9a:53:37:3e:72:9d:46:e6:3d:
         92:58:0f:78:3f:c2:e9:78:18:27:da:ba:df:cb:5f:0f:26:1b:
         db:02:21:1c:01:35:43:45:b1:96:36:f0:b9:99:13:37:cb:b7:
         cf:ff:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org