Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f34302d3430203d3e20323134393135.roa
File:                     326131343a3763303a373030303a3a2f34302d3430203d3e20323134393135.roa (raw, json)
Hash identifier:          jq5a1K8nAF4m4p4XC0bjZomcbZ9YoAyvMKWibXyuJdY=
Subject key identifier:   D4:CC:56:89:F6:84:7B:EF:4D:5A:C7:D6:53:DC:30:D0:CB:E2:B4:2C
Certificate issuer:       /CN=6F08383FF15292BFB6A427602811D5E225F0853C
Certificate serial:       7C58DADACCCAB14EAF357BB17A7421969F46F5CC
Authority key identifier: 6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C
Authority info access:    rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f34302d3430203d3e20323134393135.roa
Signing time:             Mon 30 Sep 2024 06:49:51 +0000
ROA not before:           Mon 30 Sep 2024 06:44:51 +0000
ROA not after:            Mon 29 Sep 2025 06:49:51 +0000
asID:                     214915
IP address blocks:        2a14:7c0:7000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl
                          rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.mft
                          rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
                          rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:58:da:da:cc:ca:b1:4e:af:35:7b:b1:7a:74:21:96:9f:46:f5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F08383FF15292BFB6A427602811D5E225F0853C
        Validity
            Not Before: Sep 30 06:44:51 2024 GMT
            Not After : Sep 29 06:49:51 2025 GMT
        Subject: CN=D4CC5689F6847BEF4D5AC7D653DC30D0CBE2B42C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7e:2a:7e:dc:df:95:0e:d6:ba:f6:ad:b7:7c:
                    dc:b7:9b:d4:7e:fd:ee:ac:63:b0:d2:1a:46:3c:9a:
                    b7:2d:41:6d:9c:e3:07:f7:1f:c5:2e:64:41:da:04:
                    8a:a8:62:08:a1:4d:20:39:fa:48:6b:8b:36:3f:b5:
                    60:a3:21:c1:35:24:9d:c0:e6:12:83:c7:4e:f1:2a:
                    f0:a7:c9:2b:a1:69:b3:a2:93:e3:94:dc:59:dd:7a:
                    ad:32:43:30:f0:b9:58:54:05:ed:07:ae:45:9d:ed:
                    6d:5b:0b:7f:c5:08:d6:8c:dd:4b:d0:fc:55:ef:11:
                    77:2f:56:be:c7:4a:4b:1e:f5:74:5b:92:79:ae:2e:
                    f0:be:07:e7:c9:a2:8f:99:15:77:87:01:56:1e:c6:
                    8f:be:2f:f6:da:46:9e:39:25:93:b9:df:22:8c:14:
                    93:85:38:05:06:fa:e6:6a:d8:f2:0c:20:c3:49:de:
                    5f:b7:9b:bb:a9:4d:4e:88:43:98:63:e2:38:4d:5c:
                    30:51:bc:a1:68:f6:fc:3b:f9:79:56:5e:f2:39:3b:
                    6b:16:5c:07:f6:5e:19:ad:3d:a3:1f:36:7f:16:dc:
                    12:45:67:9b:39:61:9e:f1:99:83:85:06:bc:ab:94:
                    92:8c:2c:d6:79:fe:21:b7:ad:dc:52:17:14:e2:43:
                    c2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CC:56:89:F6:84:7B:EF:4D:5A:C7:D6:53:DC:30:D0:CB:E2:B4:2C
            X509v3 Authority Key Identifier:
                keyid:6F:08:38:3F:F1:52:92:BF:B6:A4:27:60:28:11:D5:E2:25:F0:85:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/6F08383FF15292BFB6A427602811D5E225F0853C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Pfcloud/0/6F08383FF15292BFB6A427602811D5E225F0853C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-hostarray/0/326131343a3763303a373030303a3a2f34302d3430203d3e20323134393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         bf:6a:43:84:37:63:3c:14:c3:4d:b0:b7:4c:5f:f5:a1:c9:8b:
         2b:76:89:89:e0:ca:7e:d4:58:0a:43:8f:2f:a5:6a:fd:63:12:
         62:9f:0f:0d:bb:ec:0f:ab:c9:d9:83:ff:e1:61:2e:2c:99:43:
         0d:11:54:0f:b0:ae:f8:94:49:70:e2:fc:81:c8:33:c8:d7:69:
         23:6c:78:3f:54:6e:ba:ae:5f:9b:ea:31:14:c8:c3:ea:89:03:
         68:a0:81:70:cd:43:46:e5:6b:73:9d:d8:b7:01:b4:54:c5:38:
         46:3d:d8:28:e7:cb:f4:27:c4:b5:98:d9:82:f5:16:51:e8:e5:
         64:03:7a:d7:5e:99:de:7d:51:b2:e7:19:5f:ed:26:6a:fd:84:
         16:1e:8c:f2:26:71:fc:85:62:e9:b0:e8:7d:d2:20:dd:de:9c:
         62:e6:33:0d:fa:a1:80:7a:a4:17:64:de:7f:e5:98:fd:b1:29:
         a7:5c:67:5b:db:cd:39:c0:b6:29:4d:ae:13:2c:b7:5a:1b:87:
         9b:6a:6e:65:17:a2:26:39:eb:98:b0:7d:b8:a8:3a:97:af:4a:
         40:08:49:68:9b:d8:fd:22:0d:a1:6b:29:fb:82:ba:a5:96:2e:
         9f:e8:6b:77:31:14:7c:bb:72:93:dc:41:f2:33:fc:91:7f:41:
         70:8f:a6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org