Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS63150.roa
File:                     AS63150.roa (raw, json)
Hash identifier:          gS3j/+o/0l+zbGsdZ9daMNchDpCBlIBhRcO5BOdRNUU=
Subject key identifier:   19:58:F5:79:0C:E9:3A:5B:FE:DA:B2:B5:ED:45:A0:F8:B6:81:E1:70
Certificate issuer:       /CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
Certificate serial:       67E2DDA223652C2B93CB3D2E8966E594D3A74812
Authority key identifier: 0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS63150.roa
Signing time:             Fri 24 May 2024 11:13:47 +0000
ROA not before:           Fri 24 May 2024 11:08:47 +0000
ROA not after:            Fri 23 May 2025 11:13:47 +0000
asID:                     63150
IP address blocks:        2a06:9f81:4000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e2:dd:a2:23:65:2c:2b:93:cb:3d:2e:89:66:e5:94:d3:a7:48:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E357DDA04B8107626124F52CFC2439B76D85AF9
        Validity
            Not Before: May 24 11:08:47 2024 GMT
            Not After : May 23 11:13:47 2025 GMT
        Subject: CN=1958F5790CE93A5BFEDAB2B5ED45A0F8B681E170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:00:28:c0:e2:f9:25:f1:7c:a4:f3:14:be:
                    b4:58:de:e7:40:eb:eb:12:53:d8:a9:0a:f5:dd:07:
                    85:17:47:bd:79:70:2a:09:f2:72:f0:c4:41:42:b3:
                    09:b6:af:dd:3e:46:5d:60:02:66:3c:37:30:fc:05:
                    31:e3:a6:53:27:e1:42:9d:4b:42:1e:43:be:ea:8c:
                    14:bb:8a:67:67:fa:52:bb:8d:59:0c:43:10:07:5b:
                    5c:a7:5a:87:c5:78:f1:41:a5:73:9d:9d:83:36:90:
                    39:7a:68:ed:2b:49:a0:36:84:c9:94:c0:7b:c0:05:
                    34:51:27:fc:db:41:65:fb:3d:93:0c:3b:a3:27:c3:
                    98:04:1d:f6:12:c2:c3:33:e0:57:b9:76:27:6b:8b:
                    9a:e0:d2:4e:b7:05:3b:f8:63:e6:fb:2f:2d:26:1a:
                    9e:cf:9c:88:bb:97:9a:58:36:70:5d:d3:b8:72:de:
                    71:3f:cd:2b:76:be:a7:39:06:ab:78:2e:e2:4e:6c:
                    22:85:f6:d0:9e:1b:55:75:b7:96:cd:83:fc:fc:41:
                    1b:89:30:a6:3e:8c:e2:5a:a8:c8:9f:48:52:0b:9a:
                    99:84:e8:ce:d7:26:e9:dd:46:a3:f0:0f:9d:9e:1e:
                    bc:16:64:e8:d7:6d:fa:4b:b4:1d:16:19:e5:a9:4b:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:F5:79:0C:E9:3A:5B:FE:DA:B2:B5:ED:45:A0:F8:B6:81:E1:70
            X509v3 Authority Key Identifier:
                keyid:0E:35:7D:DA:04:B8:10:76:26:12:4F:52:CF:C2:43:9B:76:D8:5A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/AS63150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:58:9c:91:d6:45:d9:e2:8a:bf:3d:0f:a3:f0:c3:dd:4a:54:
         98:54:e5:8c:b4:e5:7f:0b:09:05:45:24:f0:2d:51:fd:b0:86:
         89:76:32:57:ee:44:05:58:18:12:f2:2b:6a:d0:4d:e5:a3:04:
         e8:7d:e6:e8:d5:46:1b:dd:56:84:70:44:f4:41:81:fc:f0:84:
         81:77:d1:d8:4b:f0:fe:62:d9:10:b4:cb:9d:aa:4c:ca:a3:e2:
         fc:52:14:3c:ce:ff:03:51:ed:41:ca:53:bb:ce:33:a5:64:83:
         66:75:18:78:26:a5:6a:72:60:d3:4c:cb:46:14:30:8a:9d:3b:
         93:1b:79:3a:5b:a4:50:39:a3:8e:29:db:6c:eb:55:6e:38:59:
         3a:c1:bd:9f:cd:6b:7a:d3:03:fb:e1:c2:71:ef:f4:01:f3:f2:
         74:92:37:5e:48:eb:87:69:30:44:c4:ea:6b:ef:61:66:fa:9e:
         1c:27:01:ff:4c:3b:2d:6f:2b:c7:f0:9d:87:52:63:53:9e:a2:
         f6:ef:48:9c:e2:ec:d4:f7:83:bb:41:54:4c:96:a1:80:ae:e8:
         80:66:15:89:e3:35:88:1d:4b:4e:a9:7c:b7:ca:d7:fc:58:56:
         fa:47:44:c1:64:a2:33:23:1c:a7:b8:dd:7f:c5:f4:40:54:e7:
         1c:9d:45:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:55 2024 by rpki-client on console-ams.rpki-client.org