Route Origin Authorization

$ rpki-client -vvf cloudie-repo.rpki.app/repo/SVENS-RPKI/1/39342e32342e3130382e302f32342d3234203d3e20323030363736.roa
File:                     39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (raw, json)
Hash identifier:          Y8hLPYqBBqxvSgYfmt8AdFnf6Fo0YH/DrNpNPLE9ykE=
Subject key identifier:   57:9D:16:74:A0:10:6D:1B:AC:C7:D5:94:8C:0C:56:0F:87:BC:4F:42
Certificate issuer:       /CN=0C3177E3D69C2E575BA929C25CA552115583F707
Certificate serial:       46894A8E74E53AB183DDED1E5E928DAC90DA5B40
Authority key identifier: 0C:31:77:E3:D6:9C:2E:57:5B:A9:29:C2:5C:A5:52:11:55:83:F7:07
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0C3177E3D69C2E575BA929C25CA552115583F707.cer
Subject info access:      rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/39342e32342e3130382e302f32342d3234203d3e20323030363736.roa
Signing time:             Tue 13 Feb 2024 21:48:03 +0000
ROA not before:           Tue 13 Feb 2024 21:43:03 +0000
ROA not after:            Tue 11 Feb 2025 21:48:03 +0000
asID:                     200676
IP address blocks:        94.24.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/0C3177E3D69C2E575BA929C25CA552115583F707.crl
                          rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/0C3177E3D69C2E575BA929C25CA552115583F707.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0C3177E3D69C2E575BA929C25CA552115583F707.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:89:4a:8e:74:e5:3a:b1:83:dd:ed:1e:5e:92:8d:ac:90:da:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3177E3D69C2E575BA929C25CA552115583F707
        Validity
            Not Before: Feb 13 21:43:03 2024 GMT
            Not After : Feb 11 21:48:03 2025 GMT
        Subject: CN=579D1674A0106D1BACC7D5948C0C560F87BC4F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:fa:c8:ae:db:4f:a7:4c:26:21:ba:a6:1b:
                    d5:57:cd:f6:6e:39:2f:ee:f3:b5:5a:1f:67:ca:b5:
                    22:6a:52:98:f1:00:7d:eb:12:b2:d1:b2:50:bc:c3:
                    0d:e3:4a:a7:f6:47:b5:a7:7b:b0:4d:fe:b3:06:b4:
                    19:27:08:20:80:77:07:90:82:be:59:bf:ec:57:30:
                    44:e2:ab:4b:31:7e:3a:ed:19:f3:cb:b1:98:cf:e3:
                    49:6e:e9:25:87:47:bf:0d:e4:8e:91:50:76:e3:01:
                    0b:92:4c:7b:45:85:17:06:85:0a:25:62:54:b3:d6:
                    ef:d5:85:7a:1d:9f:a4:c1:d9:22:2e:9b:ac:4a:5a:
                    c6:56:a4:3c:bc:12:16:1a:e6:b4:b3:76:4d:cd:c7:
                    ab:f3:36:dc:44:ba:b5:24:e6:61:5c:56:04:ad:00:
                    72:19:fc:ee:0e:e8:df:4a:8d:af:b2:0c:76:00:18:
                    c7:e7:b1:d9:9b:96:20:1b:81:3d:bc:a3:1e:ab:57:
                    62:19:e1:b0:81:d1:b9:04:06:27:30:10:06:ba:29:
                    41:c7:97:f2:90:38:b2:0f:88:fb:31:44:07:81:4d:
                    a9:92:75:cd:1f:bd:0b:8c:e7:fa:cf:4c:4a:c7:b1:
                    f0:ea:7e:58:c9:25:f5:a5:27:18:70:43:41:32:5d:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9D:16:74:A0:10:6D:1B:AC:C7:D5:94:8C:0C:56:0F:87:BC:4F:42
            X509v3 Authority Key Identifier:
                keyid:0C:31:77:E3:D6:9C:2E:57:5B:A9:29:C2:5C:A5:52:11:55:83:F7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/0C3177E3D69C2E575BA929C25CA552115583F707.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0C3177E3D69C2E575BA929C25CA552115583F707.cer

            Subject Information Access:
                Signed Object - URI:rsync://cloudie-repo.rpki.app/repo/SVENS-RPKI/1/39342e32342e3130382e302f32342d3234203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.24.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:eb:61:5e:15:dd:50:d8:7c:04:0b:5f:0a:b3:a7:22:36:45:
         b1:ab:f2:4b:e7:66:e2:af:46:aa:62:4c:c3:34:47:44:02:b7:
         e1:3e:3e:0c:d0:c1:3b:6f:98:c8:c1:36:6f:f4:ef:2e:23:ac:
         cf:1f:a6:ec:89:11:69:68:6a:64:07:b7:73:d0:e3:f6:47:d2:
         c8:b7:25:ce:d7:8b:98:0c:78:72:d2:c2:dc:5e:37:df:42:b8:
         63:eb:56:31:bc:8e:ac:d4:2e:5c:44:c3:f2:65:a6:a7:90:c8:
         58:22:a3:76:8e:b9:50:40:9f:86:85:1e:95:5d:0b:ba:08:31:
         fb:c2:fb:30:35:5e:2d:93:93:96:f9:bc:19:8a:40:73:1b:8a:
         dc:1f:28:bc:a8:0b:9f:e2:85:93:ec:90:0a:78:f5:d9:55:c6:
         1a:e3:1e:b7:ef:66:90:4c:77:9c:f3:c3:95:e6:33:d8:6b:bd:
         81:89:58:14:09:b5:fe:5a:88:f5:19:9a:3b:35:30:9d:52:d0:
         82:83:1c:54:86:03:c5:c3:c9:2f:50:e8:d1:0d:b8:16:5a:c2:
         ee:0a:a6:1b:27:35:6d:6d:ff:f9:e7:ad:f7:68:1e:4c:d6:25:
         e1:6f:bb:7c:5d:f3:90:0e:3a:14:d8:6b:b4:39:39:c1:66:3d:
         2a:32:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:20:44 2024 by rpki-client on console-fra.rpki-client.org