Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa
File:                     326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          QUmEw+6uv0/FcfPa4iJWMaD04qZVNsBc5oCMTGjMhJI=
Subject key identifier:   74:A8:D6:DF:30:FB:33:1E:4B:BE:04:DC:42:FF:E5:C9:DF:78:CC:30
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       3D99DF62216C6BC8321BACA8B61FF05F42175977
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Sat 25 Nov 2023 02:11:41 +0000
ROA not before:           Sat 25 Nov 2023 02:06:41 +0000
ROA not after:            Sat 23 Nov 2024 02:11:41 +0000
asID:                     200676
IP address blocks:        2a0a:6040:b1f3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl
                          rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 12:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:99:df:62:21:6c:6b:c8:32:1b:ac:a8:b6:1f:f0:5f:42:17:59:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Nov 25 02:06:41 2023 GMT
            Not After : Nov 23 02:11:41 2024 GMT
        Subject: CN=74A8D6DF30FB331E4BBE04DC42FFE5C9DF78CC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:cd:09:d3:c4:e3:6e:04:05:7e:5a:59:5c:
                    a8:7f:8b:f8:80:52:68:08:ae:b2:24:cf:41:bc:c2:
                    c0:60:54:bc:a0:f7:90:e6:07:77:08:c4:f4:1c:78:
                    5f:bd:4e:90:30:76:a3:71:53:6f:02:e4:a7:48:b6:
                    4f:e8:6a:9f:aa:83:6a:7f:0e:83:90:4f:59:e2:45:
                    2e:01:d5:77:ab:d6:ac:3e:d3:dd:35:6d:1e:67:39:
                    02:c9:a8:72:44:9c:ff:07:74:b7:94:27:66:bf:ea:
                    87:2b:f2:7b:60:2d:62:68:3a:70:38:31:ee:0a:3f:
                    8e:11:3e:85:29:be:1e:2b:e6:8a:0e:4d:83:31:09:
                    82:6b:7c:38:be:67:96:e3:79:ab:53:a7:df:c4:d5:
                    82:ba:c8:00:48:af:8f:35:77:f6:42:26:46:99:2a:
                    82:4e:a3:eb:d6:ec:6a:74:86:7b:50:ef:d7:19:33:
                    ad:c3:ef:15:d7:dc:dc:e2:47:93:32:87:61:ba:43:
                    5c:95:83:f1:67:a2:af:b6:f8:e3:c7:61:f6:ba:3b:
                    d8:98:5b:98:8e:4c:dd:7f:d7:4b:53:e1:b2:55:ad:
                    8f:2c:2c:65:6f:1f:46:d3:51:e9:d5:d7:97:39:0b:
                    7d:a7:5a:04:2d:04:3d:ff:4b:85:f8:1a:9c:39:9e:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A8:D6:DF:30:FB:33:1E:4B:BE:04:DC:42:FF:E5:C9:DF:78:CC:30
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:b5:14:97:b7:78:a3:73:20:90:45:e4:cd:0a:5c:23:0d:ae:
         3f:d0:c1:7a:e0:a5:24:49:15:6d:b5:62:2e:c1:9d:4a:ce:e4:
         6c:a8:8d:50:73:29:fd:44:87:26:b2:8f:b1:5e:f4:79:4f:8a:
         89:0c:6c:3a:e3:db:4a:cc:44:8e:d0:a9:bf:b1:7a:4b:92:be:
         cc:b1:11:cc:04:85:6f:66:74:5b:28:c5:d7:00:5f:6e:bd:ed:
         a4:13:9e:6b:5e:de:be:fd:cc:18:c0:0e:ec:ec:cc:a0:fd:20:
         b4:a8:8f:5e:39:ac:56:7f:f8:bb:55:68:36:58:44:5f:c5:10:
         df:bd:f0:85:ba:53:53:82:10:a5:b0:5f:fc:01:19:42:fb:cf:
         91:07:9f:22:8d:c3:30:65:c7:1a:d3:64:5c:14:ca:b3:27:c9:
         5b:8e:ae:60:20:30:e2:df:a4:cd:5c:5e:06:c9:ff:35:38:ba:
         14:72:e2:13:e4:cb:57:da:4d:64:73:fa:b5:09:cb:4b:15:4a:
         a1:d9:13:c8:6b:1f:fe:a9:c1:b7:85:f0:04:44:9f:68:c1:86:
         10:85:fb:f1:e9:92:59:d3:8f:8b:95:d4:e5:10:cd:85:41:70:
         14:9d:6f:79:f1:24:16:cb:f2:de:4d:92:43:47:15:cc:85:3c:
         3b:96:cf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:56:03 2024 by rpki-client on console-ams.rpki-client.org