Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216369.roa
File:                     AS216369.roa (raw, json)
Hash identifier:          hdY17tsKPxVcD+2hT4qav/HFe114trSam/FoEIkx+ik=
Subject key identifier:   84:80:64:25:D6:11:DE:7F:3F:E1:FC:75:18:CB:11:D6:77:C3:6D:FD
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       104EFC34967C40BBBDAE61C60D974FA20B92C6DB
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216369.roa
Signing time:             Mon 14 Oct 2024 08:45:22 +0000
ROA not before:           Mon 14 Oct 2024 08:40:22 +0000
ROA not after:            Mon 13 Oct 2025 08:45:22 +0000
asID:                     216369
IP address blocks:        2a05:dfc1:d100::/40 maxlen: 48
                          2a06:9f81:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4e:fc:34:96:7c:40:bb:bd:ae:61:c6:0d:97:4f:a2:0b:92:c6:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct 14 08:40:22 2024 GMT
            Not After : Oct 13 08:45:22 2025 GMT
        Subject: CN=84806425D611DE7F3FE1FC7518CB11D677C36DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6e:b6:e9:ee:70:4c:eb:9b:e2:c8:87:4f:45:
                    4e:aa:d6:d3:dd:14:6c:99:b4:e0:42:5a:c7:12:eb:
                    4b:75:a6:20:ac:03:ad:11:d4:e0:da:54:d2:b8:d8:
                    81:f7:4d:32:38:d8:c0:fa:ce:49:1b:fb:41:64:96:
                    2f:92:e8:40:a1:f2:02:e3:b5:35:a0:09:a9:85:55:
                    96:c7:7e:60:f1:4b:a9:eb:46:ee:13:b3:c7:3c:e9:
                    14:e8:e4:f1:05:59:a3:4a:51:40:3a:96:97:58:e2:
                    dd:ec:c7:fe:e2:1a:84:ff:99:5c:e0:7f:90:d5:98:
                    69:41:6f:00:45:28:9b:19:13:27:ec:7a:8e:5a:f4:
                    0f:0e:f2:56:14:76:43:8c:ac:50:5d:53:a3:16:19:
                    57:39:fc:bb:d9:16:ab:bc:23:89:49:f9:59:7c:f4:
                    d8:b6:84:05:6e:ae:c5:d4:a1:12:ba:7b:7a:e7:23:
                    a3:9f:0d:57:82:51:93:88:5d:4b:9f:63:2f:0d:c1:
                    2c:ee:1f:d1:89:0c:90:10:43:49:5b:3c:09:a7:a4:
                    2c:bd:3f:eb:be:c2:2f:19:85:52:54:df:6f:fe:0b:
                    84:1c:9c:77:a9:e4:b5:92:8f:c5:59:c5:4c:d6:4b:
                    11:1f:e9:e6:ab:69:6a:af:1b:02:86:78:70:cc:9f:
                    2d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:80:64:25:D6:11:DE:7F:3F:E1:FC:75:18:CB:11:D6:77:C3:6D:FD
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:d100::/40
                  2a06:9f81:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:8d:46:95:a7:be:21:ef:9e:0b:01:fe:f3:eb:89:37:0d:a5:
         d2:fb:62:19:cd:84:75:25:02:6e:55:0a:a7:b9:43:f8:ab:ee:
         ae:0f:f6:37:9b:12:db:03:92:76:08:09:d1:19:a8:d5:70:01:
         46:d4:2a:c9:ac:a9:f7:df:02:5d:6c:b5:c8:7a:34:75:27:14:
         f5:5c:76:c2:67:06:af:3e:4a:37:3e:14:a4:75:e7:81:7b:f9:
         e3:78:5a:44:56:75:f6:49:95:e0:6d:d9:c6:78:96:b5:51:fc:
         22:c6:ff:44:92:a8:da:bc:fe:3e:44:be:6c:8b:bf:e1:d5:37:
         96:97:cd:9c:8e:7e:d4:d6:21:b5:2f:0c:b1:5e:5d:84:29:99:
         60:a3:bc:40:b7:af:b5:62:f4:3e:63:41:37:e6:8b:0d:5d:e0:
         be:0e:78:bb:36:cb:d5:5e:7c:ed:e8:5e:b4:7c:94:ba:ec:ee:
         63:f8:94:5e:e9:37:1c:11:fb:07:75:87:e1:24:5c:df:2d:b5:
         34:fd:dd:09:5e:6b:db:bd:e7:b3:8c:dd:9a:6d:13:dc:45:39:
         4f:9a:ad:d6:8a:3f:c6:71:11:9a:9b:07:33:b2:f2:a0:1e:bd:
         d5:95:98:1a:e0:d7:3f:29:9b:8c:66:d6:96:d8:17:b3:d2:be:
         35:ec:fe:2f
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUEE78NJZ8QLu9rmHGDZdPoguSxtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDEwMTQwODQwMjJaFw0yNTEwMTMwODQ1MjJaMDMxMTAvBgNV
BAMTKDg0ODA2NDI1RDYxMURFN0YzRkUxRkM3NTE4Q0IxMUQ2NzdDMzZERkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCabrbp7nBM65viyIdPRU6q1tPd
FGyZtOBCWscS60t1piCsA60R1ODaVNK42IH3TTI42MD6zkkb+0Fkli+S6ECh8gLj
tTWgCamFVZbHfmDxS6nrRu4Ts8c86RTo5PEFWaNKUUA6lpdY4t3sx/7iGoT/mVzg
f5DVmGlBbwBFKJsZEyfseo5a9A8O8lYUdkOMrFBdU6MWGVc5/LvZFqu8I4lJ+Vl8
9Ni2hAVursXUoRK6e3rnI6OfDVeCUZOIXUufYy8NwSzuH9GJDJAQQ0lbPAmnpCy9
P+u+wi8ZhVJU32/+C4QcnHep5LWSj8VZxUzWSxEf6earaWqvGwKGeHDMny2ZAgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUhIBkJdYR3n8/4fx1GMsR1nfDbf0wHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWgYIKwYBBQUHAQsETjBMMEoGCCsGAQUFBzALhj5y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTMjE2MzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCkGCCsGAQUF
BwEHAQH/BBowGDAWBAIAAjAQAwYAKgXfwdEDBgAqBp+BEDANBgkqhkiG9w0BAQsF
AAOCAQEAHY1Glae+Ie+eCwH+8+uJNw2l0vtiGc2EdSUCblUKp7lD+Kvurg/2N5sS
2wOSdggJ0Rmo1XABRtQqyayp998CXWy1yHo0dScU9Vx2wmcGrz5KNz4UpHXngXv5
43haRFZ19kmV4G3ZxniWtVH8Isb/RJKo2rz+PkS+bIu/4dU3lpfNnI5+1NYhtS8M
sV5dhCmZYKO8QLevtWL0PmNBN+aLDV3gvg54uzbL1V587ehetHyUuuzuY/iUXuk3
HBH7B3WH4SRc3y21NP3dCV5r273ns4zdmm0T3EU5T5qt1oo/xnERmpsHM7LyoB69
1ZWYGuDXPymbjGbWltgXs9K+Nez+Lw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org