Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/1/326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa
File:                     326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa (raw, json)
Hash identifier:          nZPnGuVkjMOHC/4OYg4B4T+f/NTrb92AUFhT6B7VIcU=
Subject key identifier:   2B:C2:F7:75:4A:4B:01:ED:85:0C:E9:BE:6E:E1:D9:3D:8D:98:BF:FD
Certificate issuer:       /CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
Certificate serial:       19726478836BB4B5F4A1D9262C4C5A636BDFDE3D
Authority key identifier: 10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa
Signing time:             Tue 19 Dec 2023 13:02:23 +0000
ROA not before:           Tue 19 Dec 2023 12:57:23 +0000
ROA not after:            Tue 17 Dec 2024 13:02:23 +0000
asID:                     59920
IP address blocks:        2a0a:6040:b000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.crl
                          rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 07:12:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:72:64:78:83:6b:b4:b5:f4:a1:d9:26:2c:4c:5a:63:6b:df:de:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
        Validity
            Not Before: Dec 19 12:57:23 2023 GMT
            Not After : Dec 17 13:02:23 2024 GMT
        Subject: CN=2BC2F7754A4B01ED850CE9BE6EE1D93D8D98BFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:5c:64:8c:d9:fb:25:d9:ff:ae:f0:5e:6e:
                    3e:e7:a4:ba:ba:8c:2c:cb:62:b8:a1:25:1e:b8:f6:
                    b5:a5:12:44:97:b9:22:67:56:05:aa:14:88:48:76:
                    47:39:eb:3b:2e:19:53:7b:a4:33:d6:b6:59:9d:e9:
                    ae:0b:9b:f3:07:29:38:78:88:4d:46:16:1a:96:fd:
                    1f:19:f8:58:3f:d6:cb:b6:24:65:f2:aa:06:2a:b7:
                    eb:8c:88:3c:c9:ef:12:a4:a7:5b:db:bd:c2:dd:c5:
                    33:9f:42:1f:a1:dc:36:bc:71:99:89:73:3f:a2:d4:
                    03:c4:96:ef:3e:60:a7:f8:fc:0f:9c:fb:2b:48:b8:
                    ca:e6:c8:13:98:6d:95:31:d5:39:7b:77:6b:53:05:
                    87:c0:b0:ef:7b:15:7f:94:09:a4:69:b0:27:15:96:
                    a4:52:e5:d4:ed:a3:c1:80:10:6d:83:0b:41:31:6e:
                    ae:6e:39:63:05:c9:72:67:42:a8:6a:b2:c5:9e:f8:
                    66:a4:5c:8a:c2:26:e5:1e:84:88:ac:58:ac:40:ac:
                    0f:e3:02:69:ad:71:08:47:74:1f:06:b6:c0:10:b8:
                    98:11:a7:df:b6:e7:2f:34:f7:12:3f:5d:ef:9f:54:
                    8e:b5:99:44:a2:8b:b3:6a:26:83:3c:92:47:92:6f:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C2:F7:75:4A:4B:01:ED:85:0C:E9:BE:6E:E1:D9:3D:8D:98:BF:FD
            X509v3 Authority Key Identifier:
                keyid:10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623030303a3a2f34302d3430203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:23:e0:7d:ee:cf:b8:11:e6:cc:93:d6:b9:4a:cc:07:86:1a:
         0a:14:43:35:fd:b7:c2:34:ac:e0:50:57:cf:0a:4a:dd:60:a0:
         31:86:8b:fb:7a:76:ea:7c:56:19:e4:12:d9:fd:4a:c8:17:8f:
         3d:d4:41:18:6a:03:69:93:f1:e3:bd:3f:7c:b1:1f:2c:6c:86:
         b2:df:9c:16:48:1c:84:3f:0f:5e:95:81:0a:e1:8d:95:3c:aa:
         f9:6e:ce:a7:c4:85:31:e6:ff:2b:0e:74:3d:b1:c7:ed:b3:a3:
         75:8d:d7:0a:d1:10:69:ac:bf:0f:8c:a9:16:58:47:d5:1c:82:
         a0:67:52:46:78:e0:ba:dc:99:d2:10:01:db:d1:4c:60:a0:1d:
         4f:c1:a6:a2:c6:9c:da:ac:75:41:ad:f1:51:b1:e6:e5:e9:13:
         ef:87:5c:05:62:6f:2e:11:d8:ff:ea:58:33:d7:b8:26:e0:87:
         37:33:7c:57:49:f8:25:6f:d4:ea:84:76:95:d3:68:1c:e6:70:
         1d:6b:de:ca:2c:f3:f6:06:af:dc:cc:e4:08:3c:e1:88:b9:38:
         a9:ef:da:26:00:b3:8f:93:df:81:16:bf:ac:02:62:e4:2f:9d:
         9c:22:bf:b2:2f:ac:b4:d9:da:b6:3b:6d:f4:0b:3f:d1:97:6b:
         a8:7f:cb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:11:56 2024 by rpki-client on console-fra.rpki-client.org