Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS26006.roa
File:                     AS26006.roa (raw, json)
Hash identifier:          eGYYnvt39iOAtIcGY63gj5yhWwlxhELHO0LROna3FG8=
Subject key identifier:   C0:1C:60:91:EB:14:F2:E7:A5:F7:15:F5:E4:24:AF:DE:BB:A7:05:5C
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       7E8A28F5B68E19BC884DDAD3C198991C5C42C1F5
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS26006.roa
Signing time:             Thu 25 Jul 2024 23:50:43 +0000
ROA not before:           Thu 25 Jul 2024 23:45:43 +0000
ROA not after:            Thu 24 Jul 2025 23:50:43 +0000
asID:                     26006
IP address blocks:        2a05:dfc1:a00::/40 maxlen: 48
                          2a05:dfc1:6b00::/40 maxlen: 48
                          2a05:dfc1:9700::/40 maxlen: 48
                          2a06:9f81:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8a:28:f5:b6:8e:19:bc:88:4d:da:d3:c1:98:99:1c:5c:42:c1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Jul 25 23:45:43 2024 GMT
            Not After : Jul 24 23:50:43 2025 GMT
        Subject: CN=C01C6091EB14F2E7A5F715F5E424AFDEBBA7055C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:64:e2:6c:0e:26:36:2c:ec:73:68:79:13:
                    f3:98:42:2a:af:b8:c3:e4:6f:a9:8e:9b:2f:a6:bc:
                    13:c5:5d:bd:d6:fa:5d:d1:61:23:68:e4:b9:3a:25:
                    b3:51:01:c8:01:69:94:e9:d7:c6:80:93:c5:0a:b1:
                    a1:84:7b:bf:16:57:2a:77:9d:c0:b5:c4:7b:14:d1:
                    91:87:17:cf:63:93:0b:a0:75:33:1d:7b:35:e3:36:
                    11:86:4a:67:3b:fa:aa:97:dd:8a:e5:52:cd:35:81:
                    b5:44:26:6d:22:ca:5e:8a:4f:8e:3b:b5:b8:a0:0d:
                    17:7e:48:54:a1:f3:f0:21:6d:e9:9b:f7:78:52:e1:
                    87:aa:75:d1:e1:9b:2c:5f:34:1c:3c:d3:3c:f1:5b:
                    ed:39:49:17:70:3b:2a:f7:2e:82:ff:23:14:9d:d0:
                    10:55:93:e1:aa:73:a1:32:03:12:77:6e:44:19:6b:
                    17:78:07:59:88:e8:63:33:80:af:2d:96:76:09:72:
                    ff:40:eb:ce:b9:56:13:6c:b0:d1:45:02:68:56:fd:
                    f9:4f:6a:d3:b3:26:c1:a4:6c:6f:ee:3f:af:2c:bb:
                    12:bd:6f:1b:ca:db:93:ae:64:f6:93:6c:01:2e:5e:
                    b6:45:50:e1:10:ec:d8:d2:55:37:b7:fd:2f:8b:e8:
                    49:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1C:60:91:EB:14:F2:E7:A5:F7:15:F5:E4:24:AF:DE:BB:A7:05:5C
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS26006.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:a00::/40
                  2a05:dfc1:6b00::/40
                  2a05:dfc1:9700::/40
                  2a06:9f81:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:61:e2:f4:d2:06:a0:1d:85:d8:92:23:c5:4a:32:67:29:d3:
         7a:1f:d7:b2:92:5d:b1:b2:2e:5c:e3:51:14:d7:ea:c6:76:ab:
         77:a1:e9:75:85:bb:fe:da:b6:94:bb:9f:89:b5:d8:13:c2:bc:
         33:5d:95:3f:4a:ae:22:3e:b2:71:63:3f:05:2f:59:b3:df:0d:
         89:57:07:e2:ad:e6:57:46:8e:75:ca:25:0f:38:6d:89:fc:d7:
         00:f9:c7:9b:de:84:65:a5:91:b5:45:27:29:cd:11:8b:f7:d5:
         62:44:53:a1:f2:b5:79:c9:b0:0d:4f:19:08:82:b9:e4:2b:15:
         71:56:65:25:75:75:16:0e:c3:8b:66:d1:9a:73:27:2b:97:c0:
         df:23:17:39:c5:72:f5:be:6b:9d:81:5b:87:e1:71:4e:6e:9c:
         af:44:25:7a:45:0f:55:f7:03:a7:bd:91:b2:71:de:1a:52:df:
         42:96:60:67:01:6e:e1:01:a7:3c:4e:b5:84:70:d1:f3:41:23:
         56:e4:bb:e5:f8:39:e7:c8:b6:41:87:21:8e:40:d4:c7:0d:45:
         01:98:17:c4:f9:4a:e9:f3:4c:33:8a:1b:55:61:d1:a5:27:a3:
         f4:9a:37:0b:d0:d7:58:8a:da:6d:ef:ed:7c:ba:f1:24:ba:4f:
         54:9f:cc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org