Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS54681.roa
File:                     AS54681.roa (raw, json)
Hash identifier:          VX+cEDNWVFLm54PI5hyAxlgIeE+jA/zPKNM0K8r+c+4=
Subject key identifier:   46:E2:49:B8:DD:62:C0:C3:FE:30:FF:0E:C3:DC:2D:17:3E:71:5D:C3
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       2149B9F7052B0DB693D140B1C7CD60B3D3E18294
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS54681.roa
Signing time:             Fri 23 Feb 2024 06:58:04 +0000
ROA not before:           Fri 23 Feb 2024 06:53:04 +0000
ROA not after:            Fri 21 Feb 2025 06:58:04 +0000
asID:                     54681
IP address blocks:        2a05:dfc1:200::/40 maxlen: 48
                          2a05:dfc1:2000::/40 maxlen: 48
                          2a05:dfc1:2100::/40 maxlen: 48
                          2a05:dfc1:2200::/40 maxlen: 48
                          2a05:dfc1:2300::/40 maxlen: 40
                          2a05:dfc1:2400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:49:b9:f7:05:2b:0d:b6:93:d1:40:b1:c7:cd:60:b3:d3:e1:82:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Feb 23 06:53:04 2024 GMT
            Not After : Feb 21 06:58:04 2025 GMT
        Subject: CN=46E249B8DD62C0C3FE30FF0EC3DC2D173E715DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:af:2c:47:ae:05:d7:ce:4b:73:89:13:00:
                    d3:06:8b:e1:7d:6d:1f:06:43:75:b3:54:84:b7:81:
                    00:82:1e:8a:76:a3:b0:ce:71:92:fc:60:f1:50:6c:
                    dc:70:51:85:94:b1:30:11:7b:dd:67:04:aa:ab:f1:
                    a8:58:05:8e:3c:ea:c1:d8:07:2a:70:c8:6b:c9:9e:
                    67:36:bc:1a:2a:62:b8:48:48:45:d7:1f:98:2b:83:
                    54:5f:43:d4:3e:63:ed:17:43:12:be:b7:33:5e:ce:
                    76:db:bf:98:a7:76:70:09:fa:a1:24:43:23:98:89:
                    b8:bc:30:6c:52:68:eb:7f:46:cb:ad:02:25:b9:29:
                    f3:91:a0:56:52:e8:e6:17:0c:c7:3e:8d:39:2e:f6:
                    89:e5:b9:7d:08:fe:50:06:6d:34:cd:cc:bf:12:1c:
                    1e:45:f0:d0:65:d2:2c:e4:f2:97:76:39:8b:ef:fa:
                    57:73:6b:5c:ea:fd:f1:b8:64:02:1e:2f:4f:6a:d9:
                    3f:d3:b8:92:75:a2:8e:5b:bb:b1:73:8c:8b:01:bb:
                    52:24:01:7a:3b:85:61:86:e1:e1:ee:4d:38:a8:56:
                    a7:9e:9c:60:94:df:84:7c:f7:f2:ea:72:b2:54:4d:
                    68:54:62:d1:90:87:33:bc:34:d2:0d:85:6e:c5:00:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E2:49:B8:DD:62:C0:C3:FE:30:FF:0E:C3:DC:2D:17:3E:71:5D:C3
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS54681.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:200::/40
                  2a05:dfc1:2000::-2a05:dfc1:24ff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         88:ee:f1:b9:1c:2a:5a:a0:64:84:e6:82:cd:d7:95:4a:b7:d8:
         f1:d4:c2:ee:7b:79:ab:7f:2f:0e:7f:2d:56:e1:54:2a:e8:c8:
         3f:b2:47:6d:32:bc:0d:3b:74:5a:f9:ec:94:c1:89:a2:c7:42:
         32:86:bb:c4:4b:49:9e:3a:56:0c:5e:f1:85:bc:c4:ac:c9:68:
         57:d0:23:de:6c:eb:21:b1:be:15:73:ff:55:5f:a7:d6:4c:28:
         1e:d4:c3:6d:00:e8:a5:ba:01:35:fc:9e:79:86:55:45:82:5c:
         2a:dc:13:81:ff:66:78:8c:43:1d:9b:1d:18:69:43:14:40:73:
         c6:e8:df:1d:66:0e:b0:d6:ce:7f:b5:60:1a:f4:98:d4:51:f2:
         46:43:b3:6c:ab:22:98:ca:a7:1b:3f:a9:e1:20:03:41:a7:0d:
         54:cd:09:37:00:63:1c:ea:27:78:ba:4a:1f:bf:bb:64:3d:c7:
         b5:1e:1e:b2:48:a8:c3:fd:7b:eb:b6:c8:bc:e4:6c:c9:8a:75:
         39:c6:9d:51:87:7f:5e:7a:35:b8:e2:77:ef:c8:9e:05:e5:6f:
         da:d5:bc:55:7c:3e:19:07:45:f4:94:af:47:86:05:5f:97:fc:
         c9:5f:ee:04:50:1e:be:39:8f:1f:0d:07:89:cc:a1:c7:76:63:
         47:1c:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org