Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
File:                     326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          RmwCLPQD0FOxU230GA+d/4JJxiL3BJHnv8rUKeKCiSk=
Subject key identifier:   4D:EC:A8:15:2E:C7:77:CC:92:62:EC:FC:04:0D:20:4C:5D:7C:D3:3E
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       5F41067A0BB80E8DECA2D7CBF741617F93273C14
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
Signing time:             Sun 06 Oct 2024 04:55:36 +0000
ROA not before:           Sun 06 Oct 2024 04:50:36 +0000
ROA not after:            Sun 05 Oct 2025 04:55:36 +0000
asID:                     31898
IP address blocks:        2a0a:6040:a103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:41:06:7a:0b:b8:0e:8d:ec:a2:d7:cb:f7:41:61:7f:93:27:3c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Oct  6 04:50:36 2024 GMT
            Not After : Oct  5 04:55:36 2025 GMT
        Subject: CN=4DECA8152EC777CC9262ECFC040D204C5D7CD33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:4d:5d:4f:aa:20:0f:bf:80:66:a6:3c:fd:
                    0c:99:3b:52:03:7f:56:a0:1c:67:c1:a4:b8:8d:ff:
                    5a:d1:63:14:4c:30:c6:12:1d:dd:6d:13:12:36:46:
                    6f:33:50:f2:1a:5d:ad:44:a0:a7:99:18:c8:01:dd:
                    ab:8d:10:3b:64:20:16:24:f1:2d:fd:a4:8b:27:f9:
                    78:f1:6d:3c:ed:1c:7e:50:ff:a7:ad:9e:97:f4:07:
                    a3:88:f2:7e:4d:64:a7:d2:67:92:c1:0a:88:39:87:
                    11:d3:8a:a7:0e:76:53:44:e1:4f:2d:b4:e8:f3:b8:
                    db:b5:d2:aa:35:52:4a:a5:53:ee:33:d0:91:e6:23:
                    37:99:f8:c3:6b:ca:c5:9d:5f:b9:85:2c:a1:94:0b:
                    05:74:a8:26:3b:2b:d5:72:33:0d:06:42:21:9f:78:
                    22:c2:7d:70:5d:b1:a6:54:2f:af:7b:78:f9:88:6b:
                    2e:da:d0:88:7f:74:3f:33:93:6e:0f:54:6a:c2:8a:
                    f9:64:0c:f6:76:a4:ce:72:22:15:47:c9:b1:2c:48:
                    68:57:cd:cd:30:3e:6d:48:ab:1e:e8:f7:e2:72:6d:
                    ed:2b:87:14:63:b8:1d:c4:14:49:f8:15:b6:6d:3f:
                    2a:e5:e3:63:e2:5c:9e:86:af:0a:a5:15:3d:93:b0:
                    e8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EC:A8:15:2E:C7:77:CC:92:62:EC:FC:04:0D:20:4C:5D:7C:D3:3E
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a103::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:94:66:ff:6b:15:8f:3d:28:65:a7:8b:31:3e:17:30:b8:b5:
         85:65:b3:e5:81:31:e6:de:29:a7:01:94:2f:5a:bc:d7:ea:b0:
         42:b0:45:4a:e0:f7:2c:f0:53:4e:91:87:1b:ba:a8:14:1f:14:
         33:eb:5e:82:48:84:a3:a9:70:d9:c5:31:f1:f8:90:eb:18:f1:
         de:b3:db:42:be:a0:a8:b0:e4:f0:fa:3d:93:20:68:fa:e7:36:
         3f:b1:c3:90:08:79:0c:99:71:18:1f:7a:36:0a:78:2d:02:c1:
         f9:2c:6f:cc:7f:3e:53:9f:11:77:2c:8c:02:49:cf:8c:2e:ef:
         12:44:82:10:92:6f:34:61:07:dc:d2:e9:1c:31:6a:49:f0:bc:
         05:22:ec:fa:43:ef:c0:d0:64:85:d5:13:dd:c5:73:5f:40:9f:
         46:32:9e:72:5d:f3:75:37:be:b2:7d:b0:f6:53:89:32:32:61:
         f5:fc:e8:28:9d:9f:7f:4b:6c:e0:9d:28:a6:2b:aa:e2:a1:8f:
         47:30:5d:d1:2b:59:42:b7:67:ec:75:44:ba:d6:4f:4a:78:44:
         0b:e7:b6:82:55:97:49:fa:c6:e6:da:7c:52:d8:8b:bd:66:ce:
         23:f3:56:59:ea:7b:93:9d:6c:c0:4d:f8:8a:f1:da:4e:5c:63:
         ea:46:19:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:35 2024 by rpki-client on console-ams.rpki-client.org