Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          /ID06p+SEx16uW2QL6AZoXKP3wiHW14zIczLs1iuaw8=
Subject key identifier:   A9:C6:66:7E:EC:95:98:15:9B:4F:19:FF:1C:F2:4A:4C:7B:DF:0B:36
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       6120A6A096DB4CA24AFA64BCAAD900C194FE554C
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Fri 24 Nov 2023 23:11:39 +0000
ROA not before:           Fri 24 Nov 2023 23:06:39 +0000
ROA not after:            Fri 22 Nov 2024 23:11:39 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl
                          rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 May 2024 21:06:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:20:a6:a0:96:db:4c:a2:4a:fa:64:bc:aa:d9:00:c1:94:fe:55:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Nov 24 23:06:39 2023 GMT
            Not After : Nov 22 23:11:39 2024 GMT
        Subject: CN=A9C6667EEC9598159B4F19FF1CF24A4C7BDF0B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ca:6a:2e:0b:4e:27:3a:d4:36:c5:87:84:f7:
                    95:25:fe:3d:08:01:62:c4:54:82:65:a3:43:05:12:
                    93:e9:e7:7b:4d:af:eb:1b:2d:da:2c:f1:0e:15:6a:
                    d8:e8:39:87:48:94:9c:f8:7f:b3:7a:d2:f5:df:fb:
                    1e:89:69:d0:2e:4c:7f:90:8a:ab:b3:78:02:ad:d2:
                    52:40:7f:8e:7c:6d:ac:27:32:36:ba:84:4d:61:27:
                    79:52:94:5e:1f:ee:20:99:01:5f:49:ef:c4:24:3e:
                    db:12:56:ed:16:8a:72:07:f7:71:16:b6:38:9d:ea:
                    d2:e4:1b:dd:d4:74:e1:68:a7:b2:54:a0:af:9f:51:
                    d0:32:5e:17:5f:f4:af:aa:fb:84:7b:49:c1:c0:01:
                    b5:ec:b4:20:32:29:76:20:86:b7:ec:50:ba:44:2f:
                    13:0d:a0:aa:43:60:73:e8:71:d9:7e:c6:11:ad:00:
                    e6:ab:00:5e:66:10:83:d0:c2:e2:f5:0c:5d:fb:05:
                    c5:70:00:bd:4a:b7:c8:db:c5:a8:79:f4:1e:c4:b8:
                    5a:50:74:1f:8f:b7:f2:b1:94:63:88:e2:88:d2:e2:
                    62:53:b0:0d:f9:e7:f6:75:9b:79:17:77:5e:0f:68:
                    85:cb:f8:54:1c:65:09:a0:d3:4c:1b:e7:e2:60:5f:
                    1b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C6:66:7E:EC:95:98:15:9B:4F:19:FF:1C:F2:4A:4C:7B:DF:0B:36
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f2::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:ff:d0:e9:4a:0d:5e:4b:dd:2f:bf:8e:ce:d9:ef:1d:d8:1e:
         41:56:37:db:8f:04:49:b8:96:19:a9:ea:c0:cb:a7:dc:28:b5:
         8e:46:2d:b1:49:cb:5a:16:a3:68:c5:02:c5:da:dd:0a:61:0c:
         1f:45:7b:f7:44:52:02:45:a8:82:f4:66:10:b5:3d:33:85:b6:
         7d:b2:3b:02:33:9e:70:0b:9b:fc:ca:20:d0:8f:14:ab:4b:fa:
         9f:d4:f7:1c:05:79:75:71:c6:81:e6:22:71:ac:f3:4a:25:12:
         71:47:ac:9a:a6:29:be:6e:fc:7c:1c:00:68:48:ad:e4:d2:5d:
         bf:df:d8:77:cc:7b:31:3e:64:2b:ef:20:b7:2a:af:63:0b:be:
         75:fa:1c:05:a7:51:4f:ca:73:85:45:d9:4d:33:ae:14:8a:d6:
         53:3b:61:2e:1a:81:9e:ad:ef:51:47:ca:e0:6f:ef:35:e6:13:
         f1:fc:98:ff:a5:dc:06:87:47:5d:2c:58:06:47:54:11:0f:08:
         16:ed:5c:ce:39:26:84:82:7d:d3:41:e9:c3:3b:4d:e1:5d:b0:
         42:47:e4:33:9f:13:b6:c8:20:05:3e:cb:00:6d:9b:90:96:44:
         80:e2:8b:08:0c:3f:69:57:75:cc:66:06:f0:2c:71:38:15:6c:
         6a:27:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 04:52:27 2024 by rpki-client on console-fra.rpki-client.org