Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa
File:                     326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (raw, json)
Hash identifier:          rgKv78KNBaeBobwea7KnBLuciKXlgVnivSyvettjEmc=
Subject key identifier:   79:98:2A:23:45:32:AA:94:F7:61:59:03:A2:60:56:18:EB:04:DA:D6
Certificate issuer:       /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
Certificate serial:       69651FE3B163A7585CCCE25334A4EBF40E2028AC
Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa
Signing time:             Sun 25 Aug 2024 18:41:30 +0000
ROA not before:           Sun 25 Aug 2024 18:36:30 +0000
ROA not after:            Sun 24 Aug 2025 18:41:30 +0000
asID:                     202201
IP address blocks:        2a0a:6040:5400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:65:1f:e3:b1:63:a7:58:5c:cc:e2:53:34:a4:eb:f4:0e:20:28:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3
        Validity
            Not Before: Aug 25 18:36:30 2024 GMT
            Not After : Aug 24 18:41:30 2025 GMT
        Subject: CN=79982A234532AA94F7615903A2605618EB04DAD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:62:f0:c1:59:d1:f8:1f:0c:e8:ad:18:96:c5:
                    b6:df:62:a3:37:0e:d9:1c:7c:5b:c2:2f:7f:58:cd:
                    75:18:ab:80:63:3f:0e:04:a9:2b:e6:89:6c:53:05:
                    b0:1c:f9:ca:df:f3:64:af:f2:58:1b:4d:c7:39:82:
                    0e:65:05:85:c7:ca:1e:75:b1:58:0c:2f:c5:42:0d:
                    60:a7:5b:33:39:1e:a8:52:7f:ab:f9:c4:78:01:ef:
                    bc:de:6a:f8:16:ca:26:bc:63:ff:d2:51:f8:02:cc:
                    fe:62:34:d6:c6:21:e6:38:36:d8:d4:29:58:99:59:
                    31:e5:8c:13:1b:fc:79:bd:16:4b:53:9a:c6:07:dd:
                    44:56:29:ca:11:0f:2f:cd:48:25:90:aa:d0:c2:a2:
                    39:19:ea:f6:cc:a0:de:16:1b:20:cb:a4:db:08:7f:
                    20:28:5d:0e:89:6d:18:82:86:a4:38:23:3a:62:43:
                    30:00:b7:a7:b8:21:a0:70:e4:77:ae:4f:55:ab:fd:
                    50:24:69:e3:13:2d:f8:4a:e9:6a:86:f0:6b:a4:95:
                    f5:fd:96:1d:97:98:6c:f2:eb:fb:ed:99:67:60:ca:
                    0a:41:8e:a1:bd:a5:0b:35:5a:02:61:1b:ba:80:3d:
                    ec:96:67:b0:6f:aa:15:c7:50:44:c8:09:8e:e2:ff:
                    72:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:98:2A:23:45:32:AA:94:F7:61:59:03:A2:60:56:18:EB:04:DA:D6
            X509v3 Authority Key Identifier:
                keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:5400::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:9e:b3:ac:11:2e:d6:90:33:c7:e5:b6:4e:c4:5a:a9:3d:6d:
         12:61:76:b4:ef:a4:f3:4e:58:6d:0c:2c:db:b0:c0:b0:31:99:
         cd:39:b2:12:8b:5e:92:eb:b2:52:e5:8f:ba:9d:5b:6e:d3:af:
         3f:33:12:98:21:e8:c3:6b:fc:fb:ec:c9:a0:6d:66:26:52:26:
         c5:43:1f:48:8b:a1:1d:55:f0:97:2b:e7:66:2e:11:6f:bf:07:
         a7:ef:6e:c0:64:c3:29:02:46:36:c9:47:27:c7:91:2c:bc:e4:
         e4:3f:7c:4d:30:cf:29:0c:9f:27:61:3b:8b:0c:3e:66:7a:22:
         a1:6f:37:69:10:c2:d7:59:a4:09:a9:ed:fa:a0:24:b0:67:18:
         08:19:9b:a1:2b:9f:2d:02:41:4f:23:19:ca:e8:7a:e6:7d:72:
         5d:9c:b9:80:57:82:5e:2c:36:28:20:72:4b:78:7b:95:6b:e4:
         50:44:b6:97:cf:26:2e:e0:0b:a8:96:7b:d2:a3:72:b8:5e:16:
         0c:18:f7:b1:39:18:c9:73:8a:c7:9d:dd:f4:53:be:bc:cc:6c:
         63:ff:49:94:ad:cf:5c:b2:66:82:95:b5:94:a4:b7:28:57:33:
         22:c8:a5:94:8c:5d:e5:ec:7c:c1:6a:64:3e:d4:83:d9:2f:2c:
         52:01:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org