Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/1/326130613a363034303a623030623a3a2f34382d3438203d3e20323033363335.roa
File:                     326130613a363034303a623030623a3a2f34382d3438203d3e20323033363335.roa (raw, json)
Hash identifier:          HVKJy9JHtBm/jpNhRH9Gg+P8FaZhwfEMKo33+wcbwCA=
Subject key identifier:   DB:EE:F6:F4:DD:07:5D:E3:1A:84:2D:BE:24:2F:98:2C:4C:11:D2:F4
Certificate issuer:       /CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
Certificate serial:       2302519B12E86E625EA68624DD05B7AE16089E92
Authority key identifier: 10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623030623a3a2f34382d3438203d3e20323033363335.roa
Signing time:             Mon 13 Nov 2023 12:19:41 +0000
ROA not before:           Mon 13 Nov 2023 12:14:41 +0000
ROA not after:            Mon 11 Nov 2024 12:19:41 +0000
asID:                     203635
IP address blocks:        2a0a:6040:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.crl
                          rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 06:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:02:51:9b:12:e8:6e:62:5e:a6:86:24:dd:05:b7:ae:16:08:9e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
        Validity
            Not Before: Nov 13 12:14:41 2023 GMT
            Not After : Nov 11 12:19:41 2024 GMT
        Subject: CN=DBEEF6F4DD075DE31A842DBE242F982C4C11D2F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:56:83:4f:cb:b0:f9:8e:fb:94:89:92:64:
                    53:04:aa:59:42:ba:1d:49:08:12:2e:13:5f:44:93:
                    ac:1c:43:66:2d:19:b5:25:1d:26:7c:b0:f2:ea:91:
                    b8:2f:56:01:f8:e2:d7:e4:e6:ad:d2:ca:1a:b9:84:
                    59:e9:9a:03:d8:52:6b:79:d1:73:2e:c2:53:03:26:
                    ef:e6:c3:1a:74:9c:72:45:af:16:a7:99:f4:dc:8b:
                    d1:23:11:34:40:a8:3d:73:7a:aa:eb:19:b9:30:7a:
                    d7:cc:15:79:c2:12:38:55:18:03:da:81:36:4e:88:
                    d9:40:fe:aa:1f:af:e2:d5:a4:8c:6d:d7:38:ce:9e:
                    4d:34:e2:5c:aa:96:01:3b:74:c9:09:99:08:f3:b7:
                    81:e1:be:4e:5c:b1:f4:1a:6c:46:74:52:fa:4b:0a:
                    28:f1:e4:04:1d:ea:81:77:c8:60:3d:4d:c9:99:85:
                    87:09:2f:9b:58:1e:eb:99:b1:66:d8:20:d9:ce:56:
                    3f:e4:bd:fb:d1:71:42:e3:6b:3a:1d:78:fe:13:d3:
                    f4:2f:1d:54:21:11:58:b9:54:f3:e2:6f:09:aa:d1:
                    2d:f3:8c:ca:9c:bd:a5:2d:74:4f:4d:bc:67:d2:78:
                    4d:89:9e:e2:ac:7b:f3:4f:ae:21:03:a2:88:7c:c6:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EE:F6:F4:DD:07:5D:E3:1A:84:2D:BE:24:2F:98:2C:4C:11:D2:F4
            X509v3 Authority Key Identifier:
                keyid:10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623030623a3a2f34382d3438203d3e20323033363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:00:25:e9:39:c5:8f:78:92:2a:7f:2d:b6:d0:b9:f0:25:
         4a:7a:5f:b9:63:83:e0:96:32:76:9e:17:39:2a:a8:6b:2d:45:
         ab:b2:60:a2:95:b1:11:1d:73:dc:a2:6a:da:99:11:77:39:77:
         51:ae:7a:cc:23:30:be:36:39:d7:15:43:e7:79:ff:1a:ff:ba:
         40:98:62:29:2c:a7:d1:c9:cc:5c:6b:ac:79:68:f4:45:1b:f4:
         d1:1a:da:ca:ce:39:17:b6:e6:da:72:d2:d5:1f:49:e4:33:87:
         d0:39:bb:c1:a0:2d:e2:ec:e4:db:3a:49:34:8c:ce:a7:a5:b4:
         f8:3e:0a:07:36:c5:4e:e3:93:6a:bb:52:12:b1:2f:41:49:78:
         c6:94:74:bf:a3:ff:69:24:a9:11:dc:76:40:b9:5b:a3:d7:86:
         40:45:52:1a:04:5c:b7:64:5a:80:fb:37:56:9e:de:e1:c1:ab:
         83:25:3e:e6:bf:be:5f:c3:e6:64:fc:c8:d7:97:4d:f4:fc:2a:
         ca:ec:90:c3:45:24:02:ca:74:96:88:38:cf:7b:ff:e8:a4:2e:
         62:e1:32:e9:3d:ed:56:9f:7f:80:e9:bd:ac:22:4d:4c:14:56:
         52:e2:ea:e7:63:04:e4:67:41:ff:14:52:07:ad:a2:ff:98:45:
         e9:9c:69:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 23:15:08 2024 by rpki-client on console-ams.rpki-client.org