Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44810.roa
File:                     AS44810.roa (raw, json)
Hash identifier:          SxxxLZecpvF+NypMil+62oFXEiT1m7sCmIiFuDo4AUo=
Subject key identifier:   6D:56:5F:19:FE:D0:A3:64:0F:26:5F:2F:73:D5:32:F8:35:C0:C7:08
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       19DC51C3F9464549C04A7E74304555D0B44170BB
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44810.roa
Signing time:             Mon 06 Nov 2023 22:32:24 +0000
ROA not before:           Mon 06 Nov 2023 22:27:24 +0000
ROA not after:            Mon 04 Nov 2024 22:32:24 +0000
asID:                     44810
IP address blocks:        2a05:dfc1:c700::/40 maxlen: 48
                          2a05:dfc1:c800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:dc:51:c3:f9:46:45:49:c0:4a:7e:74:30:45:55:d0:b4:41:70:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Nov  6 22:27:24 2023 GMT
            Not After : Nov  4 22:32:24 2024 GMT
        Subject: CN=6D565F19FED0A3640F265F2F73D532F835C0C708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1a:9d:7c:01:44:1b:09:c0:aa:86:19:10:44:
                    6d:1e:27:17:5c:81:be:2b:54:f3:dc:fc:33:70:91:
                    4e:9a:cc:41:20:9c:bb:fa:15:a5:1a:73:c9:d2:5c:
                    77:09:b1:4e:bc:46:9c:cd:9d:67:c2:ef:c0:8b:cd:
                    1a:69:ee:01:6d:d8:bd:c9:48:ee:d6:aa:99:1a:6f:
                    a4:24:2f:9c:d9:d3:b1:66:11:06:3f:f9:c1:86:79:
                    53:01:1c:bd:4e:da:47:dc:73:ef:0f:8f:07:45:26:
                    7b:37:e3:82:dc:ac:46:b4:c0:03:a6:35:51:f5:a1:
                    df:80:f1:88:91:fd:29:9a:e4:ac:cb:e9:00:de:95:
                    ef:58:d0:ad:c6:5a:28:9a:75:b0:38:7d:36:6f:bc:
                    71:17:98:4d:c4:86:d7:91:0e:b8:06:64:ab:48:1a:
                    55:cb:46:b4:ce:cc:6c:f8:93:de:5d:4a:44:a2:05:
                    d5:53:05:d7:ad:5e:5e:59:8c:b4:24:d0:42:83:f4:
                    f9:e1:5b:75:f9:5d:1a:10:4b:d9:41:14:45:b8:f4:
                    9f:4b:89:7b:b6:c6:0b:47:30:ac:5d:a7:d6:56:32:
                    c0:c9:19:47:f7:b2:91:94:fd:9f:aa:5f:ab:04:0f:
                    63:4b:14:2e:15:c4:cb:61:9e:bb:7f:fc:bb:19:d2:
                    33:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:56:5F:19:FE:D0:A3:64:0F:26:5F:2F:73:D5:32:F8:35:C0:C7:08
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS44810.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c700::-2a05:dfc1:c8ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         25:14:1b:17:2b:d7:2b:d6:54:62:8e:f9:66:b9:10:07:d3:39:
         17:00:72:6d:76:aa:16:36:c7:07:08:c9:04:5f:c7:f5:13:41:
         59:87:e3:c6:b1:f2:d8:de:ad:99:96:31:9a:bb:c5:60:21:61:
         7f:23:a3:71:01:9d:2c:14:fc:1e:cc:56:da:cf:23:17:24:5c:
         b5:c6:f0:0c:85:32:40:90:c2:e8:d3:b9:ea:8d:00:98:50:8a:
         d1:22:62:4b:e7:6c:11:18:70:a2:95:42:d1:e4:4b:8c:10:a6:
         e9:8f:d3:45:c0:64:19:41:03:cc:6b:5d:1f:86:a9:f9:da:a2:
         28:b6:2c:8d:2b:b1:cf:91:b3:34:3a:df:a9:31:05:65:e2:51:
         3b:5a:3a:e5:3d:cb:60:2c:aa:ff:a6:ec:f0:1d:58:fe:64:47:
         cc:c9:90:a7:08:9f:4e:3c:f0:bb:0b:92:40:f7:42:96:f5:71:
         48:a4:e0:e1:5d:22:25:fb:a6:33:43:70:3b:04:5c:37:09:51:
         68:4d:40:f2:00:1a:56:cd:61:be:f7:bb:31:ba:0e:1b:61:e1:
         4e:84:83:e8:4e:36:cc:58:8f:cd:7e:55:9c:50:4e:39:07:6e:
         dd:51:4c:eb:97:d0:c7:22:5c:4b:64:9f:dd:c6:54:78:80:7f:
         b2:e2:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:07:00 2024 by rpki-client on console-fra.rpki-client.org