Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61317.roa
File:                     AS61317.roa (raw, json)
Hash identifier:          jcEeZzY7xF0hOf+3rzWNXPkY+h4NuF1lyn4E22IVYWU=
Subject key identifier:   61:98:CB:CC:DC:D4:A9:0E:53:98:54:5D:27:D1:0E:34:15:AD:81:B4
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       018053EB9D47ECAB6CB69B3ED902E2A8C485AF19
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61317.roa
Signing time:             Sun 03 Mar 2024 09:58:13 +0000
ROA not before:           Sun 03 Mar 2024 09:53:13 +0000
ROA not after:            Sun 02 Mar 2025 09:58:13 +0000
asID:                     61317
IP address blocks:        2a05:dfc1:1500::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:80:53:eb:9d:47:ec:ab:6c:b6:9b:3e:d9:02:e2:a8:c4:85:af:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: Mar  3 09:53:13 2024 GMT
            Not After : Mar  2 09:58:13 2025 GMT
        Subject: CN=6198CBCCDCD4A90E5398545D27D10E3415AD81B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:e8:2c:86:6c:24:dc:c0:9d:3f:ac:7f:5f:
                    c8:2f:69:54:d4:2b:11:3c:1d:8f:05:59:a5:7f:62:
                    d4:00:34:23:90:7d:a5:7c:9a:6d:2e:b3:9e:98:a8:
                    6f:d4:6b:f5:2a:cd:6e:71:79:d8:bc:44:6e:c0:33:
                    9d:7a:76:7b:1e:33:0e:43:7b:6a:dd:03:8c:9b:9f:
                    35:e9:46:2c:44:2e:d5:0a:89:2a:58:61:90:b9:9c:
                    7a:ca:c4:3e:d3:6b:4e:ee:e1:7c:8c:f1:fe:d9:c3:
                    36:df:83:d4:d2:24:97:20:86:3b:27:39:c4:b4:cf:
                    7b:3f:cb:e3:11:37:8f:61:87:33:14:9b:41:41:89:
                    13:50:28:f8:61:6d:38:58:36:c5:6b:d6:95:56:5d:
                    b9:70:c3:7c:6a:8c:1c:91:1b:62:ff:14:a0:fd:91:
                    76:12:32:32:90:31:b7:16:35:c4:d6:30:5b:fa:35:
                    c1:dd:8b:20:d4:a3:24:68:d1:9d:b7:c2:b0:fb:2c:
                    41:83:95:81:e1:36:5d:48:68:70:3d:a3:42:69:ec:
                    59:b8:77:85:80:c8:00:65:cd:5c:d2:a1:2b:f4:d1:
                    88:f5:ae:dd:9b:c6:61:62:5e:a0:d0:9e:d7:8e:85:
                    1c:b7:d1:5a:b8:d8:ce:b6:d0:6d:63:91:32:82:bc:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:98:CB:CC:DC:D4:A9:0E:53:98:54:5D:27:D1:0E:34:15:AD:81:B4
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS61317.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:7d:4a:fb:4c:2c:84:1a:37:89:ce:9b:fc:22:ae:f2:18:69:
         6b:90:94:5b:58:42:3b:c3:c1:69:f9:b6:2f:ca:0c:26:0b:6c:
         66:00:28:0b:c1:84:dc:2c:79:9d:1c:ab:88:fc:3a:a2:7e:e8:
         b2:4a:76:46:3c:fb:59:32:e3:39:69:2c:81:fd:17:50:6e:50:
         d6:a1:a7:02:52:e7:8e:87:b3:64:90:53:d0:20:25:86:3c:78:
         88:e3:0b:07:20:73:16:78:ff:c1:2b:0f:e7:fe:f4:86:ef:15:
         cf:75:db:31:bc:ac:48:2f:25:d0:e8:0e:7a:0c:1f:93:e5:94:
         01:06:b6:cb:b2:1b:f3:46:e8:c9:97:46:64:79:82:b6:ae:2b:
         f5:51:e2:e9:32:32:59:af:3e:ce:c3:81:4a:53:c6:b3:02:85:
         4a:cb:ec:8b:93:93:a1:96:4f:00:f3:eb:e2:56:e6:61:86:e8:
         20:77:95:c2:7c:19:a4:9f:1d:b4:f1:09:2e:e3:d6:21:63:60:
         23:c6:66:3f:6a:3b:df:8b:8c:24:00:46:6a:2d:aa:41:06:f1:
         8e:e8:41:37:81:97:c1:0b:55:e5:61:16:b3:bd:78:60:12:b5:
         8c:24:04:23:16:43:7d:37:ec:3b:d7:fa:62:57:70:b1:28:46:
         e9:be:03:84
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUAYBT651H7Ktstps+2QLiqMSFrxkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOTAeFw0yNDAzMDMwOTUzMTNaFw0yNTAzMDIwOTU4MTNaMDMxMTAvBgNV
BAMTKDYxOThDQkNDRENENEE5MEU1Mzk4NTQ1RDI3RDEwRTM0MTVBRDgxQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7ugshmwk3MCdP6x/X8gvaVTU
KxE8HY8FWaV/YtQANCOQfaV8mm0us56YqG/Ua/UqzW5xedi8RG7AM516dnseMw5D
e2rdA4ybnzXpRixELtUKiSpYYZC5nHrKxD7Ta07u4XyM8f7Zwzbfg9TSJJcghjsn
OcS0z3s/y+MRN49hhzMUm0FBiRNQKPhhbThYNsVr1pVWXblww3xqjByRG2L/FKD9
kXYSMjKQMbcWNcTWMFv6NcHdiyDUoyRo0Z23wrD7LEGDlYHhNl1IaHA9o0Jp7Fm4
d4WAyABlzVzSoSv00Yj1rt2bxmFiXqDQnteOhRy30Vq42M620G1jkTKCvHPTAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQUYZjLzNzUqQ5TmFRdJ9EONBWtgbQwHwYDVR0j
BBgwFoAUDjV92gS4EHYmEk9Sz8JDm3bYWvkwDgYDVR0PAQH/BAQDAgeAMG8GA1Ud
HwRoMGYwZKBioGCGXnJzeW5jOi8vY2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8v
Q0xPVURJRS1SUEtJLzAvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZDMjQzOUI3
NkQ4NUFGOS5jcmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5
bmM6Ly9ycGtpLXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2
M2UwMTg1NzU1YzkxYmUzZjlkLzIvMEUzNTdEREEwNEI4MTA3NjI2MTI0RjUyQ0ZD
MjQzOUI3NkQ4NUFGOS5jZXIwWQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1y
c3luYzovL2Nsb3VkaWUtcmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8w
L0FTNjEzMTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgAqBd/BFTANBgkqhkiG9w0BAQsFAAOCAQEAEX1K
+0wshBo3ic6b/CKu8hhpa5CUW1hCO8PBafm2L8oMJgtsZgAoC8GE3Cx5nRyriPw6
on7oskp2Rjz7WTLjOWksgf0XUG5Q1qGnAlLnjoezZJBT0CAlhjx4iOMLByBzFnj/
wSsP5/70hu8Vz3XbMbysSC8l0OgOegwfk+WUAQa2y7Ib80boyZdGZHmCtq4r9VHi
6TIyWa8+zsOBSlPGswKFSsvsi5OToZZPAPPr4lbmYYboIHeVwnwZpJ8dtPEJLuPW
IWNgI8ZmP2o734uMJABGai2qQQbxjuhBN4GXwQtV5WEWs714YBK1jCQEIxZDfTfs
O9f6YldwsShG6b4DhA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:46 2024 by rpki-client on console-fra.rpki-client.org