Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa
File:                     326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (raw, json)
Hash identifier:          PDl3gKtimelC3EVt9tL2a7JIHEhbnF1TeDhE/3HqW7A=
Subject key identifier:   FE:64:F2:D9:47:C4:BD:A1:7A:B3:F9:64:E6:F5:6D:E6:45:4B:D4:B6
Certificate issuer:       /CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
Certificate serial:       22F458DD478E89FD77CD84DF670B12876FDB1EE7
Authority key identifier: 3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa
Signing time:             Sat 02 Mar 2024 22:20:09 +0000
ROA not before:           Sat 02 Mar 2024 22:15:09 +0000
ROA not after:            Sat 01 Mar 2025 22:20:09 +0000
asID:                     0
IP address blocks:        2a0a:6040:ed00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl
                          rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 01:33:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f4:58:dd:47:8e:89:fd:77:cd:84:df:67:0b:12:87:6f:db:1e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D0D05110F2F8F2322DC87EEC86671D6F3BA8684
        Validity
            Not Before: Mar  2 22:15:09 2024 GMT
            Not After : Mar  1 22:20:09 2025 GMT
        Subject: CN=FE64F2D947C4BDA17AB3F964E6F56DE6454BD4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:48:b3:cb:76:1b:3b:8c:a0:a3:c5:f8:a1:
                    9f:b3:c8:7a:23:e0:f7:e2:00:be:76:2a:3a:3b:cc:
                    19:92:c6:9f:4d:d7:35:fa:71:9b:73:01:cf:a2:5c:
                    1d:86:fe:c9:d7:99:3a:ad:a1:06:3e:c0:99:fa:c9:
                    40:b5:6f:4f:ee:67:dc:97:67:b2:23:9a:69:5b:e1:
                    3b:02:d1:be:bd:62:f0:c8:3b:e3:ad:c4:77:6d:f9:
                    ab:b0:7c:56:18:18:96:db:53:61:52:e3:df:e6:40:
                    0a:78:d2:72:84:07:87:a5:12:c9:01:b8:c2:be:26:
                    40:00:c3:db:06:c7:03:ab:55:2e:50:6f:11:cb:29:
                    f9:08:1b:f2:b0:74:cc:45:d0:6d:d6:3c:ff:f7:c2:
                    3e:45:71:2c:16:59:12:24:28:55:19:1f:d9:77:39:
                    3b:5e:0b:99:20:6b:23:a9:5b:f6:60:91:53:f3:06:
                    16:e5:a5:30:68:c1:71:5a:f7:59:27:fa:bb:61:72:
                    b2:44:76:81:40:1e:68:87:0a:96:ce:73:e0:b6:48:
                    96:a0:cd:c8:a1:10:c0:15:54:ca:43:a3:4c:e3:e6:
                    cd:89:5f:eb:a6:92:5e:c8:9c:59:a2:a4:32:b5:0a:
                    6f:9c:fc:05:35:30:d0:46:dd:b5:83:a8:cd:1f:6a:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:64:F2:D9:47:C4:BD:A1:7A:B3:F9:64:E6:F5:6D:E6:45:4B:D4:B6
            X509v3 Authority Key Identifier:
                keyid:3D:0D:05:11:0F:2F:8F:23:22:DC:87:EE:C8:66:71:D6:F3:BA:86:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3D0D05110F2F8F2322DC87EEC86671D6F3BA8684.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/0/326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ed00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:75:a6:5c:16:64:44:50:92:81:8d:43:cd:c0:48:f9:a6:0b:
         f3:2b:73:32:b2:09:07:32:f6:94:67:e0:ca:0f:3f:45:24:31:
         f8:63:7d:41:71:f1:54:a5:44:c1:08:88:40:85:91:cd:75:d3:
         54:a1:47:c8:06:8f:f2:87:38:d0:37:1b:81:cf:4e:09:43:3c:
         bf:91:94:6b:cb:1f:6b:0e:bf:52:b8:3a:19:15:e3:77:a0:b7:
         a1:46:45:69:19:62:ef:2c:c8:26:61:5d:ea:7d:5d:f8:e9:13:
         2c:33:bf:de:30:d3:a7:8e:a0:7f:80:3e:b4:6e:75:4e:c3:a5:
         80:c9:e2:0d:20:cf:38:ff:3d:db:82:de:6c:64:d6:26:4b:86:
         65:35:80:72:fa:97:6c:76:9d:e1:a9:df:6b:c4:24:52:88:d4:
         0f:81:69:72:f9:d4:aa:48:25:78:2c:6b:2a:00:b2:de:d0:d2:
         33:a0:e0:26:ff:29:ff:50:86:7f:9f:09:9b:2e:44:28:c5:84:
         a1:80:24:67:34:f2:aa:9c:3a:71:48:48:e6:3f:4e:a5:72:e0:
         02:d9:ff:a1:23:e3:2a:ed:48:44:24:f0:87:04:77:d1:dd:b4:
         c9:18:2a:b8:d6:e5:0b:e0:0f:a4:16:e1:7d:10:1e:15:3f:d4:
         97:6d:cf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:36 2024 by rpki-client on console-ams.rpki-client.org