Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/BerryByte/1/326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa
File:                     326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa (raw, json)
Hash identifier:          4UIv9qklG7cWq8rFN7kohkNnCpGbku/M4Ca3k/GsvcQ=
Subject key identifier:   EA:02:4C:2D:E1:48:B4:45:DF:30:A0:ED:44:61:DB:F9:07:1F:53:93
Certificate issuer:       /CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
Certificate serial:       2008C812B000B3A984313676D22D497C24AD63F3
Authority key identifier: 10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
Subject info access:      rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa
Signing time:             Tue 13 Aug 2024 11:47:02 +0000
ROA not before:           Tue 13 Aug 2024 11:42:02 +0000
ROA not after:            Tue 12 Aug 2025 11:47:02 +0000
asID:                     214370
IP address blocks:        2a0a:6040:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.crl
                          rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:08:c8:12:b0:00:b3:a9:84:31:36:76:d2:2d:49:7c:24:ad:63:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1
        Validity
            Not Before: Aug 13 11:42:02 2024 GMT
            Not After : Aug 12 11:47:02 2025 GMT
        Subject: CN=EA024C2DE148B445DF30A0ED4461DBF9071F5393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:19:2d:93:56:91:bf:5a:9b:97:89:d2:0f:ca:
                    8d:73:db:cd:9e:ea:eb:52:a8:f3:c8:c0:0a:bc:d4:
                    4e:7b:73:22:67:60:a2:4b:82:9f:18:25:2f:de:db:
                    d2:7d:45:48:03:7f:a7:1a:a5:96:88:6f:e9:98:ee:
                    0b:8b:36:c9:1a:f9:e5:e0:e2:8e:e9:38:a6:aa:6b:
                    fa:dc:42:c7:57:2e:e8:04:bd:8a:a5:3d:eb:13:85:
                    87:ab:2d:35:ae:57:2c:10:b8:40:9f:c4:f6:94:6d:
                    dc:08:27:db:76:c4:10:11:32:5f:ac:15:37:9a:e6:
                    4b:3f:9b:9b:28:2f:71:f4:8b:ac:08:0f:77:33:bf:
                    ee:e2:89:fd:f6:44:be:9d:8f:ad:63:01:2e:ce:3d:
                    da:d2:b9:b6:c9:02:01:9f:21:27:d8:71:5d:e7:be:
                    c0:02:aa:6e:28:2f:62:fc:7b:e1:43:41:8c:55:71:
                    e1:b2:dc:d4:70:4a:b7:cb:95:ba:17:44:7b:91:b4:
                    5f:82:b3:cb:99:42:56:62:11:52:e4:0e:21:45:a8:
                    cb:59:66:6e:70:d7:7b:b3:12:89:3f:01:92:17:68:
                    ba:88:ca:38:e7:3e:3a:37:42:19:08:b7:da:26:cb:
                    85:68:c9:5f:8e:08:cb:c8:c5:8b:fc:dd:d3:04:21:
                    56:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:02:4C:2D:E1:48:B4:45:DF:30:A0:ED:44:61:DB:F9:07:1F:53:93
            X509v3 Authority Key Identifier:
                keyid:10:85:8A:E8:15:A7:DD:CA:83:BE:CC:17:C1:F7:AC:0E:B7:C1:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/BerryByte/1/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/10858AE815A7DDCA83BECC17C1F7AC0EB7C1CEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/BerryByte/1/326130613a363034303a623030623a3a2f34382d3438203d3e20323134333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:7d:17:a4:94:85:9f:3b:51:67:5d:2d:88:15:ed:31:23:11:
         99:54:b5:c3:9f:ae:12:e5:97:d3:20:68:91:12:df:bb:4e:5e:
         a3:52:1f:27:30:a5:1c:dc:16:06:22:18:a1:7e:6c:31:b3:d5:
         f7:6b:02:28:95:08:bd:37:cd:23:d4:8d:d7:9e:11:8b:b8:65:
         10:6b:89:77:cd:f9:99:67:b0:f5:fa:eb:30:6d:b9:dc:68:39:
         49:e7:11:d9:58:ff:d1:44:a7:b2:88:6a:80:39:09:d5:6c:6c:
         15:b0:33:80:6d:b5:28:e3:ec:46:21:49:bb:22:17:30:a7:7d:
         a3:b3:a9:33:35:b7:1d:31:8c:37:c5:cf:4c:f6:95:95:47:69:
         38:46:15:38:dd:1b:2f:fa:ef:e7:e6:49:57:d2:30:da:0a:d0:
         0b:ed:b8:5e:0d:61:cc:2f:eb:52:f2:ee:77:2f:53:a6:38:e3:
         78:a7:dc:5b:00:5c:b6:36:7f:21:dd:07:ec:9f:1a:0e:be:ac:
         ce:b6:bb:ba:bb:d9:c5:76:f5:74:82:0f:b2:f6:f6:e3:16:42:
         e7:80:a1:b3:c8:43:a2:76:c9:c4:ae:07:37:69:08:16:4f:4b:
         42:d6:58:de:06:b5:b1:58:6b:c7:ff:84:17:4d:b4:6f:4a:eb:
         9e:22:57:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:52:37 2024 by rpki-client on console-ams.rpki-client.org