Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f33362d3438203d3e20323134393135.roa
File:                     326131343a3763303a373030303a3a2f33362d3438203d3e20323134393135.roa (raw, json)
Hash identifier:          7Bn4uUS/gRgCtqgnOArFep5EgguQQrjc+sTlUnwGx9s=
Subject key identifier:   8B:00:82:C0:15:92:89:7E:7F:AB:54:FD:17:3A:19:49:4E:24:3A:32
Certificate issuer:       /CN=6F08383FF15292BFB6A427602811D5E225F0853C
Certificate serial:       5AC0740E46DC9480F719882BA036865722D9932B
Authority key identifier: 6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
Authority info access:    rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f33362d3438203d3e20323134393135.roa
Signing time:             Thu 30 May 2024 08:52:17 +0000
ROA not before:           Thu 30 May 2024 08:47:17 +0000
ROA not after:            Thu 29 May 2025 08:52:17 +0000
asID:                     214915
IP address blocks:        2a14:7c0:7000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl
                          rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
                          rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c0:74:0e:46:dc:94:80:f7:19:88:2b:a0:36:86:57:22:d9:93:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F08383FF15292BFB6A427602811D5E225F0853C
        Validity
            Not Before: May 30 08:47:17 2024 GMT
            Not After : May 29 08:52:17 2025 GMT
        Subject: CN=8B0082C01592897E7FAB54FD173A19494E243A32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:eb:fb:46:a5:b4:cc:22:fd:0b:45:51:19:
                    3f:c4:b4:45:8a:bb:59:fa:d3:14:b2:3f:bc:fc:64:
                    04:6a:75:f5:9a:91:1c:b9:fc:e1:a2:80:da:87:92:
                    41:c6:1f:eb:6c:ce:c9:9e:cb:4c:a5:9e:0f:da:31:
                    55:ed:99:6b:15:fe:46:18:de:a3:07:84:39:c4:7f:
                    f8:51:51:3a:d2:99:9f:25:c4:2e:2c:b5:23:ff:3b:
                    0c:60:f6:a9:c6:2f:24:b8:5e:b8:d7:82:8a:dd:b4:
                    f9:f3:88:55:95:ed:6e:92:2b:61:26:28:f6:94:0a:
                    22:21:52:7b:a4:de:6d:a2:11:9e:07:01:0f:b4:1f:
                    e7:4d:56:e7:03:52:91:0d:9a:d4:88:97:76:c5:d2:
                    5d:4c:d2:d5:e1:fb:14:99:31:81:72:62:b5:09:72:
                    19:dc:67:06:cf:23:53:21:62:36:44:9c:91:ef:c5:
                    26:37:db:9f:11:c7:dc:38:ee:7a:24:49:71:28:31:
                    3a:47:3f:f3:12:87:90:d4:e5:4b:d6:42:a1:00:36:
                    24:33:5b:f4:4d:f4:1d:31:fd:d3:63:1e:8c:e1:25:
                    c4:75:43:a2:07:6b:61:8d:3d:f7:40:cb:7f:db:82:
                    ae:e9:f2:68:94:17:9e:bf:86:80:15:1b:69:1a:72:
                    94:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:00:82:C0:15:92:89:7E:7F:AB:54:FD:17:3A:19:49:4E:24:3A:32
            X509v3 Authority Key Identifier:
                keyid:6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f33362d3438203d3e20323134393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         69:7c:12:e9:f4:75:51:eb:70:d9:69:69:75:7f:af:e3:c1:ea:
         a4:ca:40:ec:f6:44:e4:14:01:73:c4:4a:6d:89:c4:a6:7c:50:
         9a:ab:e5:8c:51:97:af:a7:e5:ce:82:9c:ef:c7:29:25:28:00:
         f2:77:20:3e:b1:c4:a2:9a:bf:95:26:8c:7b:05:cc:50:7e:fb:
         df:aa:2b:00:0f:59:9a:7e:1d:41:56:78:42:b1:1e:dc:0c:96:
         7c:3c:25:cd:59:de:87:ce:6a:79:96:35:6f:ae:1c:b2:e9:8d:
         13:63:19:9d:4c:ea:60:27:ec:11:0d:45:63:5b:34:9c:1e:f3:
         d0:86:db:11:1e:96:19:e4:67:6c:73:56:ea:25:8d:f1:01:0c:
         b9:48:b2:1f:29:4a:16:d7:a3:a3:3e:44:15:59:f2:88:37:a6:
         ce:21:b6:a8:6b:1f:9a:d0:00:c7:dc:01:8d:bf:32:65:6c:7c:
         58:a1:3d:e2:30:8d:c9:00:57:98:cc:dd:6b:a4:1b:51:ea:6b:
         65:c0:e5:8a:0e:da:47:32:7e:89:59:24:79:2f:45:d5:5f:b7:
         76:fd:ea:dd:97:6f:c9:c4:96:74:82:e2:cf:89:2f:a1:e2:49:
         82:d6:fe:d7:22:0a:c0:25:99:4d:06:88:f5:32:d3:d4:b0:27:
         89:db:af:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org