Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
File:                     326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          k8C7ymfYC4WVD3I1IE8NAyiUqGzqXCMe73kY7IftkWw=
Subject key identifier:   CF:0F:E0:12:1E:39:E6:FF:C5:58:DC:D0:85:52:19:8B:0F:F0:C9:08
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       523C074C2D26F7B3A95AD6F2A3BA3A66C1B88B5C
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa
Signing time:             Sun 05 Nov 2023 04:27:04 +0000
ROA not before:           Sun 05 Nov 2023 04:22:04 +0000
ROA not after:            Sun 03 Nov 2024 04:27:04 +0000
asID:                     31898
IP address blocks:        2a0a:6040:a103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 12:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:3c:07:4c:2d:26:f7:b3:a9:5a:d6:f2:a3:ba:3a:66:c1:b8:8b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Nov  5 04:22:04 2023 GMT
            Not After : Nov  3 04:27:04 2024 GMT
        Subject: CN=CF0FE0121E39E6FFC558DCD08552198B0FF0C908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:be:3c:b6:b9:83:70:55:7d:b1:bb:fd:21:
                    14:63:aa:67:50:6d:42:63:da:60:5f:ca:42:b8:c2:
                    5a:11:2f:c8:75:06:8c:dc:f7:d8:3e:36:aa:09:88:
                    eb:29:b6:14:87:b8:c1:96:5a:7b:90:72:19:a9:04:
                    ca:45:b0:15:47:c6:fa:7f:8a:43:62:48:3c:d0:95:
                    58:c7:b9:83:1a:a7:7f:26:a3:22:38:78:5c:27:33:
                    f2:c1:82:dd:5b:0e:84:70:f6:bb:cb:18:bb:eb:dd:
                    85:d4:d3:e9:ba:c4:cf:48:22:d0:4a:b4:19:bd:45:
                    7e:bd:76:e9:7e:c2:d9:fd:f9:cb:1d:c2:9c:b2:2a:
                    81:be:61:eb:7b:31:c3:27:14:d9:5d:dc:98:0f:19:
                    bc:71:7f:47:da:a3:a7:f0:07:71:0f:34:b2:32:5f:
                    a7:05:16:1a:6c:b1:46:e8:28:5e:ea:24:6f:2b:fc:
                    4d:69:23:3d:40:c8:08:2e:43:26:ab:21:b4:e3:35:
                    dd:fd:7c:4d:f0:1d:38:42:57:88:d2:d2:1f:9f:e1:
                    01:99:3b:bb:6c:cc:5c:0a:7a:31:86:53:53:dc:53:
                    47:5a:60:62:b1:76:dd:a3:6f:72:ad:cb:4a:20:74:
                    97:ae:a8:3a:75:8b:95:2c:1c:3b:12:70:bd:e6:14:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0F:E0:12:1E:39:E6:FF:C5:58:DC:D0:85:52:19:8B:0F:F0:C9:08
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a103::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:7e:89:80:81:02:9f:f3:1b:4f:8a:88:07:d8:ec:2b:d8:d0:
         f1:be:1c:95:2c:c5:fb:d8:fe:87:7f:4b:e8:ed:98:64:a3:67:
         48:cb:99:ff:22:94:4d:44:dd:12:7b:7b:1b:0e:37:cf:33:45:
         f1:c3:c8:4a:83:a5:ce:3d:e7:16:dc:09:df:44:19:6d:af:95:
         3e:34:98:1f:c4:88:b0:4d:84:1d:0c:e7:6f:50:53:72:92:44:
         dc:1c:ee:bb:c8:af:b6:d6:92:74:e3:a1:96:bc:82:88:97:d9:
         18:0f:15:2e:6e:59:20:df:8b:5f:39:ef:cd:24:18:61:a0:96:
         dd:cf:1f:54:28:a3:6e:0e:b1:96:63:aa:d2:b3:bf:c7:eb:80:
         0c:c2:49:6d:54:9b:00:5c:0f:ac:e8:63:e2:fd:85:6e:24:cd:
         f8:8c:cd:df:21:27:e3:19:01:99:19:b7:c2:1d:2c:ae:fe:3e:
         2f:37:34:53:a5:28:44:eb:0b:df:7e:f4:1a:3e:d5:f3:e5:83:
         d8:42:9b:4b:03:e3:76:6a:3a:e0:69:cd:56:16:6c:60:49:93:
         ab:ff:f3:43:04:79:36:05:e5:6c:6a:17:47:e6:d3:b9:fb:a3:
         69:20:b1:70:be:af:73:ea:9a:7c:bf:a6:ba:03:9d:55:ed:b4:
         d3:d9:1b:94
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUUjwHTC0m97OpWtbyo7o6ZsG4i1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4
NjQ4OUQ1NTAeFw0yMzExMDUwNDIyMDRaFw0yNDExMDMwNDI3MDRaMDMxMTAvBgNV
BAMTKENGMEZFMDEyMUUzOUU2RkZDNTU4RENEMDg1NTIxOThCMEZGMEM5MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+GL48trmDcFV9sbv9IRRjqmdQ
bUJj2mBfykK4wloRL8h1Bozc99g+NqoJiOspthSHuMGWWnuQchmpBMpFsBVHxvp/
ikNiSDzQlVjHuYMap38moyI4eFwnM/LBgt1bDoRw9rvLGLvr3YXU0+m6xM9IItBK
tBm9RX69dul+wtn9+csdwpyyKoG+Yet7McMnFNld3JgPGbxxf0fao6fwB3EPNLIy
X6cFFhpssUboKF7qJG8r/E1pIz1AyAguQyarIbTjNd39fE3wHThCV4jS0h+f4QGZ
O7tszFwKejGGU1PcU0daYGKxdt2jb3Kty0ogdJeuqDp1i5UsHDsScL3mFLMDAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUzw/gEh455v/FWNzQhVIZiw/wyQgwHwYDVR0j
BBgwFoAUE93PoSjcFB8Hbre2D0Y1koZInVUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTNmNjg1NjEtMGE3NC00Y2NhLWJmOGYtMTJmYWFhZmM4
ZWI4LzIvMTNERENGQTEyOERDMTQxRjA3NkVCN0I2MEY0NjM1OTI4NjQ4OUQ1NS5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzEzRERDRkExMjhEQzE0
MUYwNzZFQjdCNjBGNDYzNTkyODY0ODlENTUuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5LzEzZjY4NTYxLTBhNzQtNGNjYS1iZjhmLTEyZmFhYWZjOGVi
OC8yLzMyNjEzMDYxM2EzNjMwMzQzMDNhNjEzMTMwMzMzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzMzMxMzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgpgQKEDMA0GCSqGSIb3DQEB
CwUAA4IBAQCdfomAgQKf8xtPiogH2Owr2NDxvhyVLMX72P6Hf0vo7Zhko2dIy5n/
IpRNRN0Se3sbDjfPM0Xxw8hKg6XOPecW3AnfRBltr5U+NJgfxIiwTYQdDOdvUFNy
kkTcHO67yK+21pJ046GWvIKIl9kYDxUublkg34tfOe/NJBhhoJbdzx9UKKNuDrGW
Y6rSs7/H64AMwkltVJsAXA+s6GPi/YVuJM34jM3fISfjGQGZGbfCHSyu/j4vNzRT
pShE6wvffvQaPtXz5YPYQptLA+N2ajrgac1WFmxgSZOr//NDBHk2BeVsahdH5tO5
+6NpILFwvq9z6pp8v6a6A51V7bTT2RuU
-----END CERTIFICATE-----
Generated at Thu May 2 04:47:43 2024 by rpki-client on console-fra.rpki-client.org