Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          bv6bBJUpO3IdkGBCovP+6SmMx8WexPmQ9TSN5K1zKpo=
Subject key identifier:   26:6C:76:05:DA:50:48:A0:96:53:85:07:AA:5B:85:A6:80:D4:1F:B5
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       08A57AA03BC3BBF50D9C473836AA883F9D45514A
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa
Signing time:             Mon 12 Feb 2024 19:20:07 +0000
ROA not before:           Mon 12 Feb 2024 19:15:07 +0000
ROA not after:            Mon 10 Feb 2025 19:20:07 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl
                          rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 12:55:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a5:7a:a0:3b:c3:bb:f5:0d:9c:47:38:36:aa:88:3f:9d:45:51:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Feb 12 19:15:07 2024 GMT
            Not After : Feb 10 19:20:07 2025 GMT
        Subject: CN=266C7605DA5048A096538507AA5B85A680D41FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0e:5e:e5:9c:cd:09:34:ea:ca:64:6e:70:9b:
                    f5:c6:30:1b:7b:ad:8f:55:80:01:be:6e:7c:0e:88:
                    b4:6f:a8:0e:00:8b:27:23:0c:28:6f:d0:8e:f2:67:
                    14:05:4a:3a:2d:d6:72:06:95:a6:29:9e:3a:4a:5b:
                    97:24:4c:85:55:6a:65:16:12:0e:db:42:73:2b:be:
                    42:0a:79:01:54:51:94:68:f4:63:28:3f:66:56:c5:
                    16:5c:e9:91:fc:dd:5b:90:d1:07:04:fd:1a:2b:76:
                    c3:f5:04:c4:15:5f:80:e8:43:84:f2:c1:5b:ee:a9:
                    48:a1:8a:ce:8e:c5:10:d6:7f:8f:47:c9:c0:f2:3c:
                    13:39:03:d0:f1:14:74:41:8a:2b:a2:23:7f:55:4e:
                    f1:af:82:56:1d:08:34:f8:1d:03:6a:8e:5d:e1:d1:
                    ab:35:d3:7a:7f:b1:eb:04:2d:5c:6e:e8:b9:8d:5c:
                    4d:26:63:0f:ec:79:32:bf:36:36:18:ba:87:08:69:
                    29:60:30:69:d4:dc:f0:dd:5b:66:2c:66:48:56:39:
                    69:69:96:cc:c3:29:57:ea:b7:37:d5:28:1d:64:f2:
                    48:cb:cb:78:d0:6c:69:59:98:e7:b9:f5:ce:22:b8:
                    04:ad:b5:c6:5c:35:dc:76:9a:e7:43:bf:24:e3:7f:
                    d3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6C:76:05:DA:50:48:A0:96:53:85:07:AA:5B:85:A6:80:D4:1F:B5
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:91:35:bb:23:2c:d4:db:41:e9:03:ca:ec:8e:d5:c4:c0:f4:
         30:14:6d:82:19:38:f1:30:1b:ac:7f:c9:5f:78:a8:fa:2e:8d:
         df:0d:a9:da:e7:4a:d1:75:37:ee:47:00:8f:45:d5:5f:3a:8e:
         ba:6b:08:ce:67:14:78:ab:97:f0:35:8a:94:ad:ac:b9:a2:a5:
         2a:20:a1:c6:8d:a1:23:7e:95:68:48:91:5b:ef:49:67:62:73:
         f5:fc:65:cf:58:13:eb:c1:45:5a:6d:a9:60:3d:83:28:5a:b2:
         b0:5d:1b:d6:54:be:c2:c5:3e:63:08:da:3e:2f:51:86:6c:47:
         1b:da:6c:07:2a:34:99:46:fd:a9:60:8f:8f:49:2d:df:9c:01:
         67:b7:13:98:cd:3a:53:4a:fe:b1:8e:62:19:4b:6d:52:c2:b2:
         3d:15:b2:5b:7e:f0:b5:07:39:81:c2:75:65:cf:9f:64:be:4f:
         99:b3:44:0c:f9:be:7a:0c:cc:8f:41:f4:8f:8d:78:3f:af:26:
         ad:9e:21:5e:05:63:84:f5:d0:28:73:fe:d2:3f:6c:a5:87:77:
         fc:45:34:93:74:e1:e7:96:11:58:e2:c2:38:dc:11:a7:cc:ca:
         75:9c:49:1e:e2:40:90:24:e3:de:70:ec:c3:b2:b5:02:9b:b9:
         98:f3:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:56:03 2024 by rpki-client on console-ams.rpki-client.org