Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          2SiDSDu0rUQwbG1sqBKSoyBhjXiZxIHBfbtji4OeGKs=
Subject key identifier:   FF:4E:76:05:D0:54:F8:C2:67:13:CE:3F:60:77:79:94:98:5C:09:66
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       1F7D201F63F5B1A4848B554AB4756DA82411BA6A
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Sun 19 Nov 2023 04:11:36 +0000
ROA not before:           Sun 19 Nov 2023 04:06:36 +0000
ROA not after:            Sun 17 Nov 2024 04:11:36 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl
                          rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 12:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7d:20:1f:63:f5:b1:a4:84:8b:55:4a:b4:75:6d:a8:24:11:ba:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Nov 19 04:06:36 2023 GMT
            Not After : Nov 17 04:11:36 2024 GMT
        Subject: CN=FF4E7605D054F8C26713CE3F60777994985C0966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:65:bf:b8:b0:c5:8b:66:d2:07:60:38:95:
                    12:6a:40:67:7e:7c:04:44:40:af:49:25:43:a3:c2:
                    85:c3:a8:96:6d:82:e8:ea:61:b6:ad:e1:0a:81:46:
                    e2:c2:bd:62:19:46:9e:02:64:62:3e:0a:f3:7d:cc:
                    b1:46:c7:19:f5:35:20:dd:6b:15:86:69:78:c7:7f:
                    60:99:d1:ff:fc:00:70:05:5b:76:2d:ea:34:97:52:
                    12:c1:ab:8a:51:c5:e7:ee:7c:14:2f:97:4f:dd:c3:
                    37:3a:ed:e8:5c:3c:72:4b:0f:d8:ad:eb:39:72:25:
                    2c:2e:de:ce:cb:5e:c6:e9:0e:c7:24:7c:18:f7:5a:
                    d2:b8:61:48:ea:90:e4:f0:7c:71:f0:63:73:20:29:
                    16:bd:99:81:a6:46:6d:6c:40:5b:3e:a7:47:c1:21:
                    fd:f2:6a:20:97:af:3d:2e:bb:c4:94:8f:c3:02:08:
                    2c:9c:98:53:e6:70:35:9e:dd:69:ad:e9:bc:93:72:
                    49:aa:c5:29:c8:d8:16:0d:0c:1e:82:ee:3c:2d:c9:
                    a1:34:8b:64:2b:7e:d0:17:a7:5f:6b:97:00:92:ca:
                    18:14:6c:4b:7c:e0:a2:83:e8:04:4b:03:36:1f:6b:
                    9d:27:df:d4:b4:86:92:10:1f:89:a0:f1:20:3c:1c:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4E:76:05:D0:54:F8:C2:67:13:CE:3F:60:77:79:94:98:5C:09:66
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:9d:18:65:49:8f:5b:9d:f8:3c:f9:56:69:8e:31:2b:ce:c4:
         9e:ac:5b:2c:30:f1:89:2f:e7:d2:c9:49:30:11:ba:ab:c3:53:
         7b:d3:07:3c:dd:50:db:85:96:4c:34:49:ec:78:c0:2c:30:d6:
         8b:25:59:07:d6:fe:fd:36:5c:23:59:e4:ba:c8:5c:c1:20:6c:
         aa:13:58:79:09:8d:22:0a:49:da:d2:79:77:78:f4:c2:1f:72:
         1d:ed:94:05:dd:f6:e6:2a:fd:cc:94:f3:31:cd:d0:50:b8:58:
         76:e1:c5:78:56:68:85:49:2c:d4:d1:2d:ec:8d:2c:da:e0:c4:
         2f:56:eb:d7:e4:b3:d1:96:30:30:c7:03:d0:61:32:8d:04:12:
         12:39:02:6e:7e:b2:60:70:1b:cb:a0:bc:45:23:66:86:7c:a5:
         d2:11:32:dc:d5:39:17:84:0a:cc:22:98:ed:a3:18:b2:be:38:
         24:06:64:1d:62:4a:8b:24:00:3a:a8:30:b5:38:1f:24:f3:1f:
         11:e0:7e:51:bc:52:d3:b7:2b:e6:a3:3b:59:90:5e:a5:1c:4e:
         15:3b:23:70:e4:3e:9a:1c:3f:d7:a3:73:bf:8d:62:e3:3a:3f:
         59:a7:43:5e:ab:dd:5b:fb:fb:1e:7d:91:3d:db:13:cd:15:e1:
         06:58:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:56:03 2024 by rpki-client on console-ams.rpki-client.org