Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          fn9tN4vIR25U7hrcRtHpkH/TDIxElPoY7OxT7Mkb9hI=
Subject key identifier:   7E:05:19:94:3B:06:48:BE:B2:02:FA:56:F3:8E:9F:FE:4B:E2:C5:A5
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       702CE32D69247ED2DC1B6466C8E25C64D88B8E9F
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Sun 05 Nov 2023 04:27:04 +0000
ROA not before:           Sun 05 Nov 2023 04:22:04 +0000
ROA not after:            Sun 03 Nov 2024 04:27:04 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:2c:e3:2d:69:24:7e:d2:dc:1b:64:66:c8:e2:5c:64:d8:8b:8e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Nov  5 04:22:04 2023 GMT
            Not After : Nov  3 04:27:04 2024 GMT
        Subject: CN=7E0519943B0648BEB202FA56F38E9FFE4BE2C5A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:c5:a8:ac:da:f8:9b:5a:7b:aa:05:98:38:
                    d8:85:fd:52:38:f1:59:d6:2c:e2:a6:d1:91:b2:7a:
                    35:ab:f8:2a:70:24:77:6b:d7:cc:27:60:51:e1:a0:
                    5a:1b:71:c2:3d:26:88:76:d1:46:72:7b:30:51:a0:
                    77:7f:7e:f7:69:81:d6:bb:fd:6a:dd:05:bb:54:7a:
                    c1:a2:28:7c:2b:d1:54:fd:de:0f:01:1c:3c:0e:11:
                    8b:8f:24:e5:4b:bd:06:8e:66:9b:98:b8:ca:1e:06:
                    24:87:05:67:bc:8d:51:ca:2d:6c:1f:ef:02:dd:7c:
                    52:8d:41:55:6f:2c:ff:45:21:c6:67:bb:cb:03:8a:
                    53:1c:4a:02:30:0e:f2:49:dd:25:b5:c3:06:51:55:
                    28:4f:ef:3a:fe:3d:9f:06:03:a6:8a:08:5d:0f:50:
                    f3:52:54:3a:fc:fc:5f:aa:aa:bf:1a:90:8f:14:68:
                    3b:7f:4f:44:dc:26:a7:4b:5d:68:88:c4:97:59:b8:
                    89:58:36:6d:d8:b5:ca:3e:fb:3c:4b:66:bb:c3:10:
                    75:d6:49:13:86:43:19:83:9d:3c:f0:a9:e5:f9:0b:
                    09:e8:0e:b5:23:1c:00:89:08:ef:3a:92:4f:23:1c:
                    5d:da:ec:72:f5:fa:49:84:f4:d6:c5:d1:1e:44:f6:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:05:19:94:3B:06:48:BE:B2:02:FA:56:F3:8E:9F:FE:4B:E2:C5:A5
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a102::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:67:21:8c:b0:63:58:7a:ca:da:63:43:60:3a:fe:54:a4:0f:
         c3:d7:5f:ee:9a:41:a7:80:db:a3:fd:56:87:8d:0c:f9:80:d6:
         aa:d9:93:df:cc:a1:cf:45:7c:96:e3:af:a8:c4:53:1c:5b:39:
         36:52:2c:29:43:6c:7f:b8:4f:8c:f0:1d:77:3d:fe:43:dc:84:
         6e:2d:7b:78:12:63:9a:06:2a:19:d2:d8:58:d2:b2:d8:0a:f4:
         ac:e1:b4:59:ff:fe:c0:bd:77:9c:24:c3:83:af:da:96:87:45:
         10:9f:b6:a2:c4:02:10:d8:71:05:6a:d3:02:03:d5:33:91:eb:
         1a:63:30:a9:85:51:51:a3:16:50:7e:5d:1b:52:93:ae:50:f6:
         d5:52:47:4b:8a:52:45:d6:c5:aa:9b:ed:96:90:fe:27:b7:96:
         b8:15:1e:1f:6f:c6:a2:2a:51:e0:93:cc:fa:7f:3f:ff:80:11:
         3c:cc:77:9f:d0:0e:68:6e:40:a1:d9:90:b3:7e:41:36:b3:55:
         c7:8f:06:11:a6:45:05:c4:e6:28:bd:b4:65:58:66:ee:6d:61:
         67:82:36:5b:a9:80:af:15:1d:79:2d:34:9d:99:5b:24:71:2d:
         61:06:10:15:8c:e1:05:15:88:ba:fc:75:e0:bc:8a:31:d6:61:
         9a:e2:b7:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 00:13:14 2024 by rpki-client on console-fra.rpki-client.org