Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa
File:                     326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa (raw, json)
Hash identifier:          uD5ZgqpuCZ5qB25rA13nm9s+UxIBBAVITnotsZHvD/0=
Subject key identifier:   25:E0:0E:1A:4F:4C:6C:2C:42:8C:9A:E2:6D:E5:F4:88:F4:73:FE:E0
Certificate issuer:       /CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Certificate serial:       1BBCC24F336BB0EC566201082AD787087CE86D8D
Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Subject info access:      rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa
Signing time:             Tue 28 May 2024 16:11:25 +0000
ROA not before:           Tue 28 May 2024 16:06:25 +0000
ROA not after:            Tue 27 May 2025 16:11:25 +0000
asID:                     215865
IP address blocks:        2a14:7c2:1004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bc:c2:4f:33:6b:b0:ec:56:62:01:08:2a:d7:87:08:7c:e8:6d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
        Validity
            Not Before: May 28 16:06:25 2024 GMT
            Not After : May 27 16:11:25 2025 GMT
        Subject: CN=25E00E1A4F4C6C2C428C9AE26DE5F488F473FEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:cd:30:58:b0:1b:45:fe:ac:ae:1d:ad:a3:
                    40:4e:f4:1f:55:d6:24:fa:f9:d8:8e:5e:22:b4:ad:
                    18:81:6e:08:a2:ae:ad:47:14:87:b9:60:bc:c3:18:
                    a7:92:db:be:5c:52:e9:de:05:22:dc:14:d5:a7:ed:
                    30:2d:3e:a3:c1:f9:64:e7:f5:6d:29:0d:2e:99:83:
                    6c:d8:9e:9e:4c:ee:e5:5a:90:1f:1a:12:86:27:1f:
                    4a:4a:45:95:ad:a1:6c:f0:51:5c:9d:8e:02:05:fb:
                    6f:3c:29:ae:7e:79:6b:c2:44:a9:d7:1a:b5:64:9b:
                    2e:bf:37:15:1d:49:53:d8:9b:86:48:f4:f8:4b:e2:
                    96:d0:3c:8d:67:72:cf:d7:d8:13:55:f1:74:ae:dd:
                    a7:a8:d8:e8:09:d8:b9:f0:da:3b:67:92:2b:cd:24:
                    11:47:c4:23:05:09:8a:b6:64:20:e7:5a:31:42:08:
                    44:fa:ba:9f:01:86:cb:cd:a9:fa:71:9c:a9:33:f6:
                    ad:bb:b2:9a:5b:9d:78:2d:90:a7:7a:35:63:d1:11:
                    58:69:cc:90:e9:e2:86:69:03:9b:3b:cc:af:08:4a:
                    c7:3f:b4:33:81:c4:67:aa:3e:45:bf:60:54:e0:36:
                    e1:1b:f4:4b:ab:f8:5d:02:43:17:aa:a2:a7:58:d9:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E0:0E:1A:4F:4C:6C:2C:42:8C:9A:E2:6D:E5:F4:88:F4:73:FE:E0
            X509v3 Authority Key Identifier:
                keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a313030343a3a2f34382d3438203d3e20323135383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c2:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:af:a8:b7:2a:6b:ad:31:2d:41:6b:1f:66:b5:ba:54:5d:61:
         48:de:2a:1a:76:39:a1:1e:52:15:45:04:da:d7:c7:f6:f4:28:
         ab:61:eb:72:6b:6a:8b:e6:75:ea:44:9a:00:23:41:a1:c2:1e:
         aa:a9:06:f1:b7:d1:c3:aa:15:0b:84:ca:0c:52:08:e7:b2:8a:
         a9:ff:a2:31:7c:12:96:2b:48:76:6e:d8:d6:5a:65:46:74:59:
         db:8f:a4:9d:80:45:25:2c:1a:e9:92:aa:29:1a:fe:71:59:9e:
         3a:4d:88:ec:5d:c1:75:32:cb:e3:99:ef:3a:d8:0c:34:a0:33:
         28:98:37:69:d4:78:19:d2:c0:dd:49:87:b1:4e:06:26:67:34:
         0e:42:d3:65:f2:b4:b5:16:4e:60:0a:b9:58:6b:41:f9:33:3e:
         5f:e3:2a:f9:f3:29:b5:3f:05:bf:0c:2c:1f:41:44:ed:42:3b:
         a0:4d:2d:82:97:1c:8d:81:16:09:c7:01:a1:fc:ae:a2:ac:13:
         98:10:68:ba:26:87:71:e6:b1:82:a4:f8:37:2e:22:5a:70:d6:
         78:9f:e5:82:4d:02:83:b9:3e:10:d0:6d:63:e8:bb:45:8c:ee:
         9a:ba:82:1a:db:05:41:11:2f:61:c4:6e:73:57:b4:54:41:0f:
         c2:f2:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org