Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216369.roa
File:                     AS216369.roa (raw, json)
Hash identifier:          IJJHw1IcZgwrjMwXBjnMV6pxzsvcumnpYHHlazVFYuM=
Subject key identifier:   D4:0B:20:23:E7:9E:3D:E4:14:50:B4:73:64:B2:10:14:4C:95:E6:86
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       30261EA740E6FA7A4D10CB8B05FEFA2BD160060F
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216369.roa
Signing time:             Mon 13 Nov 2023 08:12:43 +0000
ROA not before:           Mon 13 Nov 2023 08:07:43 +0000
ROA not after:            Mon 11 Nov 2024 08:12:43 +0000
asID:                     216369
IP address blocks:        2a05:dfc1:d100::/40 maxlen: 48
                          2a06:9f81:1000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:26:1e:a7:40:e6:fa:7a:4d:10:cb:8b:05:fe:fa:2b:d1:60:06:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov 13 08:07:43 2023 GMT
            Not After : Nov 11 08:12:43 2024 GMT
        Subject: CN=D40B2023E79E3DE41450B47364B210144C95E686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:88:fa:1f:7e:37:04:51:33:53:44:f9:72:
                    b6:45:f0:82:8c:2f:c0:2e:0b:ae:34:4a:f5:fb:19:
                    0d:5a:e9:ad:37:74:2c:62:a3:11:fb:2a:45:31:16:
                    ad:30:92:f5:85:a9:68:1b:69:d1:29:8d:7b:e2:e2:
                    67:8d:12:91:34:7a:e1:3a:9b:de:67:54:ba:6d:cf:
                    96:21:44:16:0f:32:93:3b:77:59:6d:c3:1c:5c:c5:
                    3d:fd:cf:f4:b4:8b:97:37:1a:69:3a:60:bb:fc:f9:
                    0d:89:54:4b:f5:11:10:e0:4e:ca:c7:6d:a8:ad:f9:
                    14:46:d4:da:02:ac:b1:8a:af:ce:7e:78:4f:e4:d7:
                    f1:ef:db:23:71:e6:01:6b:22:95:81:c0:c5:2a:9a:
                    c8:6f:f0:0e:06:0f:17:cf:ab:04:39:c8:2f:d4:3c:
                    b9:ba:8c:9b:cd:65:d2:9e:2a:b2:25:99:a1:90:5c:
                    e5:67:70:1d:ca:0a:f5:a8:30:28:de:45:78:aa:83:
                    07:39:e2:8c:5a:e2:ef:7e:a7:b6:9f:30:1b:b1:d6:
                    46:d7:49:9c:30:1e:64:a0:96:4c:30:a8:12:23:07:
                    d3:88:fc:24:21:50:df:93:d8:be:56:5e:e3:fe:48:
                    4e:d8:86:d8:d7:7c:31:12:05:28:2b:12:08:a3:ed:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0B:20:23:E7:9E:3D:E4:14:50:B4:73:64:B2:10:14:4C:95:E6:86
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS216369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:d100::/40
                  2a06:9f81:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:46:d8:5f:b0:6b:90:33:cf:11:2c:62:04:26:be:cd:2b:7e:
         a0:0e:92:94:32:a7:6a:14:a0:8c:86:e8:2e:d1:fc:52:73:70:
         21:0c:dd:f4:b7:bf:02:6c:de:33:e5:f9:ee:2b:eb:5c:57:42:
         4a:41:aa:a2:5e:3c:54:cf:1a:2f:c3:b9:3f:ba:f3:82:00:30:
         a3:f8:c3:b7:d6:54:13:77:c8:ac:22:60:d7:c8:41:e5:3f:51:
         f1:dd:6f:92:64:7e:f4:27:d7:a3:a7:ec:ec:0c:4b:c2:ab:4f:
         17:ba:91:7f:38:02:fc:b6:76:5c:14:dc:ab:bc:e7:7e:9d:7a:
         12:86:cd:5a:3e:71:ba:61:1c:7f:e9:3e:bd:be:c5:05:f0:8c:
         86:9e:c5:65:71:01:51:0a:d7:73:8b:c6:d9:ae:c4:ca:57:04:
         61:9e:43:c1:e9:19:9b:6a:86:34:b0:3e:83:66:f9:bb:4d:d1:
         94:60:8b:85:de:a7:1c:75:e5:29:d0:c3:42:37:a6:7e:bc:41:
         6f:af:f5:5f:5c:b3:52:9a:ba:d4:d3:f4:cd:b4:85:18:b3:f1:
         10:c9:53:f3:69:9d:7e:d3:c9:ab:24:fa:71:28:c3:44:54:7e:
         d5:d7:b8:72:4c:a6:e2:dd:79:32:bd:d1:59:cf:5e:26:00:a1:
         d3:7f:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 12:06:24 2024 by rpki-client on console-ams.rpki-client.org