Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030653a3a2f34382d3438203d3e203437323633.roa
File:                     326131343a3763303a313030653a3a2f34382d3438203d3e203437323633.roa (raw, json)
Hash identifier:          t8j0Aol23oNKPg9QBI2o+vXLE+G2QrMk/z6OOY8Y4VQ=
Subject key identifier:   71:E2:49:FF:24:00:8F:EC:E9:C8:62:27:1D:43:91:94:A6:70:08:1E
Certificate issuer:       /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial:       76AD0658C35194329D23C0C27F384AEB2B842948
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030653a3a2f34382d3438203d3e203437323633.roa
Signing time:             Mon 18 Nov 2024 23:53:07 +0000
ROA not before:           Mon 18 Nov 2024 23:48:07 +0000
ROA not after:            Mon 17 Nov 2025 23:53:07 +0000
asID:                     47263
IP address blocks:        2a14:7c0:100e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
                          rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ad:06:58:c3:51:94:32:9d:23:c0:c2:7f:38:4a:eb:2b:84:29:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
        Validity
            Not Before: Nov 18 23:48:07 2024 GMT
            Not After : Nov 17 23:53:07 2025 GMT
        Subject: CN=71E249FF24008FECE9C862271D439194A670081E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4b:03:da:4f:3b:b9:72:e8:5f:ae:81:ca:93:
                    b6:0e:42:14:ed:24:60:d4:75:d5:20:a4:f4:32:e9:
                    9f:77:0e:b6:a5:b7:6d:58:f2:6b:bb:56:45:1a:71:
                    b9:67:08:e4:14:a5:6e:fb:87:93:97:eb:98:7f:3b:
                    46:e5:2f:16:8a:88:b2:fd:61:dd:b5:f6:87:4c:62:
                    91:2b:46:56:67:88:f8:9d:5c:44:c0:43:53:e5:f5:
                    c3:e8:4e:b7:1c:cc:b9:21:a5:b5:50:e0:b3:c6:d8:
                    78:ea:72:da:31:da:9e:9a:9f:8d:18:f3:66:d8:dc:
                    93:b2:b8:87:52:b4:0c:44:24:df:d7:b3:76:68:7f:
                    4c:56:14:60:43:7b:2d:62:1e:42:01:96:f2:19:af:
                    d8:30:af:e6:81:8f:31:fe:b3:40:84:5f:e7:40:84:
                    cb:ba:7d:a9:55:17:3f:c2:fd:51:cf:7a:7a:00:e6:
                    b8:e4:d4:96:eb:4a:19:fc:14:05:51:ef:e5:a1:13:
                    57:be:16:39:1e:63:06:d0:1d:85:ca:9d:e2:9e:9b:
                    09:0a:c2:83:01:d2:ea:8c:dc:2d:7a:1c:41:a8:43:
                    e7:fd:26:d9:c0:0d:df:c6:7d:52:51:70:43:2c:6b:
                    7a:74:4d:cb:fc:4e:29:68:66:ea:23:95:3d:1d:a2:
                    72:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E2:49:FF:24:00:8F:EC:E9:C8:62:27:1D:43:91:94:A6:70:08:1E
            X509v3 Authority Key Identifier:
                keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313030653a3a2f34382d3438203d3e203437323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:100e::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:fd:0a:1b:90:aa:b6:bd:c9:78:f8:33:c0:13:6a:d3:78:32:
         3f:cf:98:b1:6a:99:f1:ea:a2:79:19:f0:5d:9e:c3:76:2a:32:
         b0:58:d8:89:a8:ed:a1:a4:2f:ad:52:29:28:1d:09:e3:e0:28:
         e7:d6:d1:a6:9a:cd:bb:1c:16:87:08:09:1d:62:93:dd:e0:a5:
         32:ae:d7:16:19:63:5f:b5:40:4a:fb:df:59:d9:ad:59:9f:60:
         64:f6:a2:31:5c:51:4d:08:fa:f2:b1:3d:6b:6b:6a:b2:fb:49:
         00:26:df:54:23:28:28:c5:81:79:4c:38:4c:10:ad:5d:92:1d:
         f7:b7:60:b7:04:95:53:46:e3:af:f5:49:f0:ce:3d:b6:55:c7:
         ec:fb:73:b2:1e:1a:a9:e5:9d:a1:4e:9b:27:ab:3b:f5:22:f7:
         0b:c0:60:f3:01:03:01:7a:dd:dd:48:4b:63:d5:ff:fb:89:ac:
         14:68:dd:84:22:0c:b1:d5:75:58:05:9c:6b:63:01:a2:83:14:
         b5:75:e4:96:ae:72:25:84:27:b4:ad:5b:93:30:4f:54:8f:0b:
         67:f7:38:bd:5b:66:80:2d:2a:31:bf:4e:ac:69:ef:ce:c2:85:
         0b:bd:a7:a9:2f:3f:6d:ea:27:87:25:cd:93:b6:82:50:0a:6a:
         ca:01:6a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:01 2024 by rpki-client on console-ams.rpki-client.org