Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          jlK2Dc8XNV/D6dUI8ofbPhAhEkifUC25q4pl+a3Hu64=
Subject key identifier:   49:2B:CF:39:8C:10:8D:20:EB:8E:70:C9:6F:BA:11:E8:E7:16:99:79
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       1FF0F8D2AB780C5A791CAEFF09A19B9C5AB66A61
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa
Signing time:             Wed 14 Feb 2024 00:20:08 +0000
ROA not before:           Wed 14 Feb 2024 00:15:08 +0000
ROA not after:            Wed 12 Feb 2025 00:20:08 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl
                          rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 12:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f0:f8:d2:ab:78:0c:5a:79:1c:ae:ff:09:a1:9b:9c:5a:b6:6a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Feb 14 00:15:08 2024 GMT
            Not After : Feb 12 00:20:08 2025 GMT
        Subject: CN=492BCF398C108D20EB8E70C96FBA11E8E7169979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:e5:b7:e4:d5:d9:83:b8:87:65:b8:e8:35:
                    e8:13:90:39:05:72:76:45:b9:8c:d2:67:63:41:fe:
                    e8:67:1c:ae:49:6b:9a:3d:b6:64:72:b3:41:af:55:
                    3b:cc:07:9c:f8:26:a1:e1:f6:2a:88:00:81:f6:c5:
                    49:22:fa:eb:6f:34:de:56:e3:ba:bf:b9:01:d3:52:
                    da:d6:36:2d:13:0b:4a:39:1c:8f:1a:3a:a7:71:f0:
                    83:66:99:0e:0d:8d:08:a6:b2:ce:5f:39:80:c4:72:
                    07:1a:fe:73:f3:d7:2b:15:79:1c:4e:d1:5a:9c:45:
                    3e:56:2c:7d:e5:59:68:6a:48:8e:06:1f:2c:8e:ae:
                    81:46:a2:34:1a:86:4d:33:d2:91:eb:7a:55:bc:1a:
                    31:27:c0:b8:f4:54:7e:b9:eb:02:ad:01:ce:af:67:
                    1d:d8:96:d0:b2:c7:33:50:08:7b:06:ed:98:2b:93:
                    5d:7f:d2:2b:ee:b0:fb:ec:03:7b:12:26:3a:4b:a0:
                    03:81:c6:bd:c1:2b:8c:63:19:ea:3c:e0:ea:91:15:
                    72:48:76:78:4b:84:51:ab:b9:4b:60:b4:a5:b7:a0:
                    3e:01:00:ce:14:58:e8:24:6c:6d:a1:68:ab:3a:04:
                    41:ac:06:08:e9:02:2d:80:7a:31:f6:45:29:6a:bc:
                    dd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2B:CF:39:8C:10:8D:20:EB:8E:70:C9:6F:BA:11:E8:E7:16:99:79
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f7::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:c2:dd:c2:9e:8e:27:d3:de:ad:2b:a3:77:68:60:77:b4:4e:
         00:f9:f6:3e:94:03:2e:46:07:07:1a:e1:fb:19:ac:69:2a:60:
         fb:3f:98:fe:dc:40:9a:fc:f4:dd:7f:27:65:2a:de:db:50:b6:
         dd:42:ec:1c:20:41:e8:7e:89:7f:91:e8:ea:a2:ba:fc:65:0f:
         db:90:61:07:b9:47:4e:ba:02:4b:32:a3:9c:e7:04:dd:a5:d2:
         2b:2f:d8:b6:a3:2b:7f:f3:ba:b3:0a:24:ae:5a:21:5d:70:b6:
         5e:2c:b8:75:8c:2d:cc:41:6f:6a:c7:7b:42:a1:48:48:1e:e7:
         b4:8c:02:94:c9:f6:f1:0b:62:d0:ab:73:a5:11:55:6e:e5:1c:
         fd:49:b4:6c:13:43:66:c2:a4:74:47:c4:18:7f:bc:25:7f:4d:
         89:f4:16:cd:3c:47:04:94:a0:e9:91:a1:e2:4c:12:88:8d:3f:
         13:27:fb:0f:55:80:de:8a:02:ad:d8:86:4e:57:7e:1e:1e:11:
         bb:21:ab:87:51:e8:af:fc:13:53:6f:97:bc:e7:8a:cc:3c:e3:
         71:4a:ed:e4:51:9c:a8:42:d2:32:5e:b6:b2:83:06:a6:07:e1:
         11:b1:10:08:dc:46:2f:1c:52:e3:56:33:09:ee:15:80:b2:e2:
         e2:09:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:56:03 2024 by rpki-client on console-ams.rpki-client.org