Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          PFv1w1/dhOLCzfwqwLHBj015XxebsCk8UvpgNeKoqdc=
Subject key identifier:   0E:04:D0:6E:64:ED:09:36:6A:B8:C6:75:3A:88:88:D0:FE:9B:94:C1
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       1E29EDBEAA45A35451767387E78E499866F9B41E
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Sun 06 Oct 2024 04:55:36 +0000
ROA not before:           Sun 06 Oct 2024 04:50:36 +0000
ROA not after:            Sun 05 Oct 2025 04:55:36 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a104::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:29:ed:be:aa:45:a3:54:51:76:73:87:e7:8e:49:98:66:f9:b4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Oct  6 04:50:36 2024 GMT
            Not After : Oct  5 04:55:36 2025 GMT
        Subject: CN=0E04D06E64ED09366AB8C6753A8888D0FE9B94C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d6:b8:fa:94:d9:d0:df:11:22:89:f0:44:4b:
                    e3:59:58:77:44:e9:e1:b3:85:dd:c2:8d:24:2a:c1:
                    6d:99:55:ed:19:25:1a:5f:17:b1:02:cc:ce:0d:0b:
                    65:bb:0d:99:2b:40:0e:b6:f5:96:ee:34:d5:f1:ed:
                    ee:79:a7:98:1c:78:dc:b0:0d:2a:61:d9:92:c0:df:
                    52:f6:b0:1b:81:df:d9:b3:b3:32:a4:31:22:6a:e8:
                    25:a7:3b:e2:92:31:e9:e4:e7:2f:86:aa:9a:1a:7e:
                    d8:a6:0b:49:85:35:11:c3:a7:30:a4:b2:93:2c:64:
                    f5:9b:52:c2:0e:d0:ba:4d:ed:93:28:fa:0b:1b:9e:
                    57:38:a8:7f:11:57:20:81:e3:94:bc:46:1c:56:60:
                    06:94:47:8c:d7:8b:d0:05:f5:c0:f2:45:44:09:2f:
                    e4:4b:6b:8c:3f:84:ab:3e:f4:1f:ca:98:a6:39:9c:
                    2b:66:b3:67:e4:ab:6f:0c:d3:b8:b2:eb:9a:08:e2:
                    79:b3:14:c3:08:98:33:6a:cd:45:05:dc:85:54:7f:
                    6b:c4:ab:7e:1e:52:e3:ee:b9:8d:55:a4:ec:92:ba:
                    80:d3:80:e9:51:e6:bd:fa:27:a4:06:7a:e4:9f:7a:
                    b2:e1:91:65:45:a2:1b:5c:68:19:d1:ef:f1:65:a1:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:04:D0:6E:64:ED:09:36:6A:B8:C6:75:3A:88:88:D0:FE:9B:94:C1
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a104::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:1b:dc:ae:4f:48:7e:2b:2e:13:eb:8d:44:b7:00:c8:45:b5:
         89:e2:e7:13:ff:be:ad:bb:cf:e2:38:17:d9:a9:25:2a:fc:b6:
         48:fc:1d:15:7d:9a:ee:79:9d:1a:1c:e8:60:84:5c:07:6e:0e:
         be:dc:c1:26:96:35:d3:bc:ce:2e:df:77:d0:05:a6:71:9e:65:
         bb:8b:2c:b4:be:a2:4d:0c:b5:73:c1:f3:5c:cb:ca:36:66:59:
         8d:68:b8:a6:09:be:ca:46:b6:2c:ab:31:e7:4b:e7:e3:6a:f8:
         68:fb:af:f1:93:2d:ed:35:f6:4a:07:05:ba:e2:8b:d9:ba:84:
         13:b3:9b:fe:96:99:49:26:69:3d:ce:a1:0b:8d:e6:47:6c:c4:
         ea:71:90:36:d9:61:fa:8e:2f:17:87:dd:a6:53:0f:77:ed:f8:
         1e:8f:1c:86:91:32:86:21:f6:37:eb:fa:79:b8:78:81:d5:50:
         89:b6:a9:4a:61:b6:66:2c:8c:43:f8:11:ff:d3:1c:16:dd:de:
         be:96:a9:78:da:bb:7e:80:f8:0c:b6:9a:ee:fd:9f:91:a9:a1:
         9b:f7:ea:f8:78:e1:a5:90:16:2a:2f:f5:80:ce:46:6c:9c:83:
         e7:ac:33:3e:e5:d2:2f:16:37:07:21:ce:dd:01:f5:a6:2b:3d:
         03:22:3a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:35 2024 by rpki-client on console-ams.rpki-client.org