Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44810.roa
File:                     AS44810.roa (raw, json)
Hash identifier:          txLagil6daLPln8VCzCCOvavFVElXjzQNlfRDlOdU9U=
Subject key identifier:   CE:0E:F7:51:E7:0E:D2:24:06:A7:E9:64:C6:EB:15:EC:63:1A:A8:F7
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       3106B820C6797DB9D0E8D216E084E81C60948D03
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44810.roa
Signing time:             Mon 07 Oct 2024 22:45:22 +0000
ROA not before:           Mon 07 Oct 2024 22:40:22 +0000
ROA not after:            Mon 06 Oct 2025 22:45:22 +0000
asID:                     44810
IP address blocks:        2a05:dfc1:c700::/40 maxlen: 48
                          2a05:dfc1:c800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:06:b8:20:c6:79:7d:b9:d0:e8:d2:16:e0:84:e8:1c:60:94:8d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Oct  7 22:40:22 2024 GMT
            Not After : Oct  6 22:45:22 2025 GMT
        Subject: CN=CE0EF751E70ED22406A7E964C6EB15EC631AA8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:f4:37:ec:8b:25:f1:c9:4c:1d:ff:2a:1c:
                    52:ee:f8:38:44:16:81:1f:90:c4:8c:1e:b3:b9:7d:
                    45:df:b8:dc:26:8c:ae:4f:1d:42:85:31:4f:b4:31:
                    11:32:dc:e2:ca:02:9f:d7:48:ae:07:44:33:a5:df:
                    88:29:7b:2f:50:b2:36:d1:65:78:d6:dc:46:22:af:
                    8c:ee:c0:04:93:e0:e5:2c:1e:95:57:01:dd:af:0f:
                    f1:cb:c4:03:5e:6f:ac:49:10:e3:4c:a6:42:7f:a9:
                    fe:8d:3b:40:67:59:ef:b2:17:66:61:21:2e:f2:5a:
                    d2:a2:46:c4:b6:a0:f1:20:c6:fa:a8:12:d5:aa:1c:
                    b5:f7:66:2b:ca:30:c6:d0:71:3b:1d:f6:8d:ee:86:
                    f7:85:31:90:73:cc:de:fd:e3:17:b2:81:a5:3a:9c:
                    7f:3e:b4:95:84:4a:38:f7:dc:77:a6:86:23:c9:6c:
                    18:f5:25:db:95:e0:31:92:21:8f:50:bb:20:26:c1:
                    07:29:dc:12:95:7c:45:8f:46:9d:57:fc:fa:4c:44:
                    25:bd:0a:43:b3:0d:5e:99:94:66:9c:42:9f:04:e8:
                    40:5e:b9:a7:80:52:eb:da:c5:ea:3c:4d:49:fe:8a:
                    6b:bb:40:a2:e0:76:1b:18:2c:31:c0:f5:e1:c5:1e:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0E:F7:51:E7:0E:D2:24:06:A7:E9:64:C6:EB:15:EC:63:1A:A8:F7
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c700::-2a05:dfc1:c8ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         33:2d:4d:bb:9c:7a:88:5f:a3:82:8a:cd:67:55:54:0c:a5:7a:
         29:0b:f7:93:fb:7b:bb:e1:81:97:f6:de:c6:b4:74:4b:94:04:
         4e:a3:d1:7f:7c:11:b1:fa:6c:f8:ce:75:bb:8c:02:c1:a0:ff:
         b5:14:ee:47:bd:2c:22:ef:46:1b:f3:bd:14:12:3a:dc:84:39:
         3c:f4:8a:76:8a:fe:58:95:50:38:93:fb:41:7c:99:f8:14:29:
         03:43:f1:fa:57:32:ff:58:20:7e:4e:7e:cc:80:ac:e9:ab:9b:
         b4:2b:8c:f3:0b:ac:ee:80:04:6e:1b:36:9d:6c:b9:15:b7:e9:
         cf:f2:b1:c8:41:ae:39:5e:5c:ba:24:2c:0c:5e:11:0d:99:5f:
         ba:b0:29:cf:84:8e:d7:4e:24:5d:c5:42:6d:1a:43:23:1b:08:
         05:17:ee:df:d5:42:26:7a:e4:06:91:36:0f:2e:11:3f:c9:ad:
         71:c9:9b:a9:ac:fd:2a:7f:ff:45:59:b3:9a:97:25:a3:79:e6:
         1e:f4:94:44:c3:29:33:77:5f:33:fc:b8:c6:12:03:f8:09:6a:
         55:70:5c:15:43:c9:e5:65:db:c3:b3:e1:14:24:65:3e:a4:0d:
         a4:ba:4c:5e:8b:ef:37:6c:1c:ac:d2:75:6c:85:59:12:a0:53:
         b4:20:9c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org