Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f33362d3336203d3e20323134393135.roa
File:                     326131343a3763303a373030303a3a2f33362d3336203d3e20323134393135.roa (raw, json)
Hash identifier:          7dBpT2uaoShGT4vA3Yb3Gn/0aV2uOs+mC8znW5OVxnQ=
Subject key identifier:   68:55:1D:AE:37:FD:D0:13:50:BB:EB:E2:43:C5:A3:FB:76:06:C7:A7
Certificate issuer:       /CN=6F08383FF15292BFB6A427602811D5E225F0853C
Certificate serial:       376DE28A034EB513E26166616B67DD610A2EC760
Authority key identifier: 6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
Authority info access:    rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f33362d3336203d3e20323134393135.roa
Signing time:             Wed 26 Jun 2024 12:48:42 +0000
ROA not before:           Wed 26 Jun 2024 12:43:42 +0000
ROA not after:            Wed 25 Jun 2025 12:48:42 +0000
asID:                     214915
IP address blocks:        2a14:7c0:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl
                          rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
                          rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:6d:e2:8a:03:4e:b5:13:e2:61:66:61:6b:67:dd:61:0a:2e:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F08383FF15292BFB6A427602811D5E225F0853C
        Validity
            Not Before: Jun 26 12:43:42 2024 GMT
            Not After : Jun 25 12:48:42 2025 GMT
        Subject: CN=68551DAE37FDD01350BBEBE243C5A3FB7606C7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:58:27:4f:f7:f2:19:ed:84:91:65:bd:10:
                    fd:63:71:4d:b3:0e:ee:23:4c:b2:6f:a3:d3:ee:ed:
                    98:af:25:66:45:b2:8b:82:03:83:22:cf:c1:e2:c4:
                    14:6a:5e:39:ad:d2:b0:0a:a8:fa:83:b3:0f:6c:71:
                    a1:92:0e:0b:3e:3b:d3:c4:92:87:08:28:97:78:3c:
                    85:c3:23:bc:68:a9:a7:e3:42:36:74:5b:64:81:93:
                    eb:fc:e6:b9:0d:84:44:9a:93:57:2f:8c:62:43:8a:
                    57:ba:d9:97:b5:7e:7a:16:94:64:e2:20:14:b6:3a:
                    c5:72:34:3d:4e:47:22:ce:49:b2:57:18:48:df:e2:
                    64:7c:d9:ca:26:5d:e5:67:bc:7f:25:b0:3b:ad:3e:
                    14:3e:c7:c9:22:63:0d:2d:a5:80:7c:4c:73:cd:6a:
                    ef:c4:cd:5f:12:63:28:98:4a:f0:3f:27:d3:4d:32:
                    04:6b:5e:e5:29:14:7b:f6:c0:17:6d:9f:41:bb:c3:
                    e7:e9:3c:fc:e7:56:88:32:1b:1d:9a:f2:9a:ea:31:
                    fc:ac:7a:95:40:01:50:93:30:b6:bc:d2:32:c7:05:
                    5f:92:bd:af:65:f7:a1:36:2c:2f:ac:ae:16:f2:67:
                    fa:4c:63:ab:8b:87:86:16:8e:80:59:f6:93:c8:41:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:55:1D:AE:37:FD:D0:13:50:BB:EB:E2:43:C5:A3:FB:76:06:C7:A7
            X509v3 Authority Key Identifier:
                keyid:6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f33362d3336203d3e20323134393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:6e:ae:63:95:ae:9f:27:8e:76:b2:05:e6:4d:37:de:a7:
         71:39:db:15:5f:48:94:f1:46:69:4e:36:5f:10:51:75:1f:7e:
         67:4c:ed:90:28:a3:f9:41:8e:92:ed:be:34:c6:9b:c5:3e:d2:
         c1:30:ce:0b:42:e4:7b:53:0d:6e:d5:af:45:6f:92:26:29:01:
         56:98:e2:43:09:56:b4:a1:2d:9c:60:97:88:07:35:2a:67:8e:
         4e:da:ff:4e:83:dc:10:5c:27:42:22:71:bb:c6:99:fc:1c:8e:
         9b:a1:2b:58:3c:fa:97:f1:4e:60:5d:25:47:5f:e9:7e:4c:e8:
         39:5e:62:cc:ba:c1:ac:94:61:65:b0:88:4b:e6:ff:4b:4f:54:
         23:c0:61:ab:82:25:bd:2a:b0:c7:d3:7e:86:61:54:d3:35:6a:
         93:ee:96:a0:59:72:30:5b:7b:09:da:4a:79:c0:5c:c2:ff:04:
         b3:35:79:9c:1e:67:2d:67:05:56:9e:e9:63:b9:0a:69:c3:41:
         6c:78:7b:2d:c1:34:bf:65:88:28:ae:58:db:0b:0e:bd:45:79:
         d7:89:ee:6f:b1:c6:bb:1b:cf:c5:13:aa:ec:7b:92:45:61:e4:
         d4:fe:e2:b3:d1:94:db:b9:b0:66:8f:b7:cd:8e:4f:76:96:f8:
         7a:52:d0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:57 2024 by rpki-client on console-ams.rpki-client.org