Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216266.roa
File:                     AS216266.roa (raw, json)
Hash identifier:          MrLZoKisc5YJq85kgyoKxGcwQznxMjEEYeSVm5fpKy0=
Subject key identifier:   C1:51:40:0B:13:99:A2:59:CD:00:77:6B:B3:CF:EE:05:52:9D:F5:33
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       0EA911B2A8B100A0285EFFADD60F01C428041D8F
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216266.roa
Signing time:             Fri 20 Sep 2024 23:44:45 +0000
ROA not before:           Fri 20 Sep 2024 23:39:45 +0000
ROA not after:            Fri 19 Sep 2025 23:44:45 +0000
asID:                     216266
IP address blocks:        2a05:dfc1:b800::/40 maxlen: 48
                          2a05:dfc1:b900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a9:11:b2:a8:b1:00:a0:28:5e:ff:ad:d6:0f:01:c4:28:04:1d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Sep 20 23:39:45 2024 GMT
            Not After : Sep 19 23:44:45 2025 GMT
        Subject: CN=C151400B1399A259CD00776BB3CFEE05529DF533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ca:e3:f1:a2:9a:9a:f8:e8:16:64:e3:10:af:
                    e5:2b:bf:8a:a9:90:c7:df:21:cc:90:c5:5e:e5:89:
                    bb:e4:13:aa:15:50:0d:7b:e7:e3:11:4c:ce:69:ed:
                    b3:aa:55:5f:fb:ef:6b:93:dc:db:3a:5e:b3:75:07:
                    84:ec:00:ba:df:8c:4d:75:ae:90:88:03:48:6a:b8:
                    fd:12:5e:2d:92:21:96:63:f3:c0:a2:c7:a1:34:eb:
                    31:3a:b7:ab:38:a4:df:60:c8:9a:af:cc:b2:1f:16:
                    32:81:e9:85:68:50:3a:c8:3f:ac:dd:15:0f:46:6c:
                    27:af:bc:14:7e:7a:48:3d:c3:db:ff:04:f0:f7:95:
                    e9:a8:57:a0:0d:5c:fd:50:dc:46:0c:36:bc:0c:71:
                    23:bb:6f:49:31:4d:f7:a4:29:c2:28:74:1e:29:0c:
                    52:e3:e3:1a:b1:41:9d:29:bb:1a:db:12:8c:fa:e4:
                    9b:39:00:df:dd:39:7c:39:95:ff:47:0d:23:9f:30:
                    ae:97:de:53:0d:b4:fa:a1:fb:bc:d6:c6:f9:73:20:
                    55:a6:ea:f4:f7:84:b5:51:3f:6d:88:d4:c2:34:f6:
                    99:d8:5f:b8:65:da:7c:23:be:03:b0:09:96:1f:eb:
                    a0:42:bf:3c:fd:ba:a7:d6:f8:dd:65:6c:d9:38:86:
                    ff:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:51:40:0B:13:99:A2:59:CD:00:77:6B:B3:CF:EE:05:52:9D:F5:33
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216266.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:b800::/39

    Signature Algorithm: sha256WithRSAEncryption
         00:d0:ab:3a:70:bf:cf:1e:db:27:dc:e1:c2:18:fa:59:98:6a:
         ef:82:e6:1c:4f:35:17:a9:d9:9b:bc:ad:e3:f9:a2:da:83:5d:
         c9:f2:91:12:15:d4:3b:91:67:6b:74:bd:af:38:df:5f:48:1a:
         10:22:44:95:c7:8a:65:a2:67:ef:56:fe:c2:b5:4f:d8:13:fd:
         a5:ec:1c:df:39:43:59:6f:84:a7:78:2a:8a:fa:11:7f:2b:ab:
         e4:c2:2f:fa:92:1d:df:f7:a2:be:76:12:8c:92:5c:ff:74:bb:
         e0:d4:d6:b4:ef:a0:b3:a9:b9:96:83:a1:c8:0f:88:64:35:fb:
         b0:66:a9:bb:0d:45:07:e2:41:7d:9d:63:99:ea:c8:bf:64:dd:
         a0:d0:93:f0:d1:78:74:43:a9:e8:c7:59:36:18:b1:59:d9:7f:
         4e:69:3d:08:96:ad:b9:f6:d8:0e:64:27:18:54:28:b8:24:29:
         d6:42:1f:f4:20:66:08:24:5c:e7:c5:19:8f:00:38:27:70:a6:
         a6:27:a6:21:59:19:59:b3:52:85:e9:30:c6:ad:cd:a3:c5:2c:
         fd:c6:76:36:6b:0d:23:8b:3a:f4:35:84:92:6c:fd:ef:f0:60:
         29:c6:78:67:24:b8:7d:22:27:b1:2b:85:b3:3d:c5:f8:48:2f:
         3b:b1:4a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org