Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          sS3zAbULmTh3NH8H/5QnSMa/hdmis7YX3aNwTozzMug=
Subject key identifier:   A9:6F:9B:29:BB:87:58:3F:16:DB:B5:47:D6:FF:3C:FA:A3:B3:7D:0F
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       24CBD6B34E08AEB532A50F676C8E02C585A4ADAB
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa
Signing time:             Fri 09 Feb 2024 14:20:05 +0000
ROA not before:           Fri 09 Feb 2024 14:15:05 +0000
ROA not after:            Fri 07 Feb 2025 14:20:05 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl
                          rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 12:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cb:d6:b3:4e:08:ae:b5:32:a5:0f:67:6c:8e:02:c5:85:a4:ad:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Feb  9 14:15:05 2024 GMT
            Not After : Feb  7 14:20:05 2025 GMT
        Subject: CN=A96F9B29BB87583F16DBB547D6FF3CFAA3B37D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:01:8f:94:de:b5:20:1a:23:f1:0f:3f:61:
                    16:83:85:b1:0a:05:41:03:f1:50:9f:3d:0b:87:90:
                    15:08:3d:f3:6b:cd:42:ae:c6:87:3a:e6:a1:8d:4a:
                    f3:28:08:84:d3:5c:c1:84:98:24:72:27:66:87:a3:
                    31:31:42:90:01:49:47:d5:52:c9:f7:f6:2c:94:66:
                    64:f7:34:4a:c0:da:39:21:97:f4:7b:c1:04:66:f4:
                    68:e2:80:a3:33:1a:8c:47:a5:3c:ff:04:c4:78:96:
                    50:e5:c1:76:f3:42:98:97:8e:99:3c:59:c3:8b:3f:
                    e2:44:f9:20:1f:b0:97:1d:e5:c3:db:73:9b:44:9d:
                    04:bb:0f:ad:10:c6:7c:ed:43:e2:11:1a:40:24:b6:
                    4b:6c:8b:15:a0:e4:d5:12:d6:b3:c9:02:24:f1:14:
                    de:90:45:58:69:1c:45:b7:55:00:93:70:d8:42:a5:
                    b9:b1:32:31:00:b9:f6:ad:ce:36:fd:89:2d:9f:62:
                    75:a6:84:69:63:d3:1b:96:a1:fd:97:50:22:f2:72:
                    56:c7:7d:bf:9a:eb:22:87:9d:fb:2e:61:ec:64:0c:
                    ca:fb:b2:dc:3c:b2:df:c4:7f:d4:bc:b7:8f:9e:3a:
                    2d:45:56:33:4f:4f:4b:34:99:2b:b6:0b:35:f0:23:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6F:9B:29:BB:87:58:3F:16:DB:B5:47:D6:FF:3C:FA:A3:B3:7D:0F
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:7d:b6:98:fd:1e:0a:c5:e1:ab:1a:7d:7b:85:61:9c:98:43:
         24:18:90:2f:2e:0e:75:ac:69:d6:a0:9a:52:75:1d:2e:5b:23:
         06:2b:e4:98:85:b8:20:77:e0:93:14:9f:0d:55:87:60:3e:a7:
         51:43:bc:48:08:da:6f:43:c0:c9:cc:cc:6c:e4:a2:0a:59:ae:
         f9:53:b1:23:60:d2:f3:73:a2:cc:2b:98:58:ef:48:34:1c:8f:
         51:ea:c8:6f:a0:b6:3e:f6:38:0b:4f:59:4a:ca:7f:ee:b1:a0:
         50:fb:a0:37:3f:cd:2b:43:3d:73:4b:87:10:ea:ca:fa:0a:cd:
         6f:77:f4:65:f0:18:f7:02:db:8e:8c:8b:4d:f3:f4:26:f5:53:
         00:8a:87:fe:4e:58:f3:b7:9f:72:a8:6a:72:41:98:34:97:65:
         14:d7:db:82:7b:9b:4c:0d:3d:c0:b5:4a:ea:f2:6c:f0:f3:81:
         19:15:5a:81:b1:c0:ea:75:f8:6f:d8:18:f5:c7:f9:6a:9a:73:
         bd:a4:89:8f:92:e3:ea:42:be:5d:96:5d:e8:d6:07:6c:7d:ef:
         82:10:a3:eb:70:dc:6d:dd:3c:9e:2f:b0:54:23:99:5e:0c:2c:
         55:18:1a:fa:fb:83:91:10:5f:35:0c:6c:3c:09:ef:e4:51:60:
         29:3d:24:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:56:03 2024 by rpki-client on console-ams.rpki-client.org