Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          CTODbkYlpnVaHyONgQ5egtKNh9v6t29vIyot4VVbKKM=
Subject key identifier:   B5:0A:4E:E4:95:3A:8B:69:F1:47:EC:B4:C5:7B:05:1E:67:1D:DC:D3
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       74E53C56FE6089899CBC851AFEC530D3B5EE9677
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Sun 06 Oct 2024 04:55:36 +0000
ROA not before:           Sun 06 Oct 2024 04:50:36 +0000
ROA not after:            Sun 05 Oct 2025 04:55:36 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a106::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e5:3c:56:fe:60:89:89:9c:bc:85:1a:fe:c5:30:d3:b5:ee:96:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Oct  6 04:50:36 2024 GMT
            Not After : Oct  5 04:55:36 2025 GMT
        Subject: CN=B50A4EE4953A8B69F147ECB4C57B051E671DDCD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:48:52:c1:4a:cb:03:0c:fb:aa:d2:28:a2:c2:
                    69:48:a1:b7:a6:43:66:e9:ff:e3:2e:57:a2:28:87:
                    cc:0b:93:22:6b:a2:31:8f:c4:3b:08:74:27:4c:89:
                    d1:dd:c1:1f:75:aa:eb:c2:bf:ac:4b:b3:22:54:84:
                    2a:16:6a:85:c5:ee:ff:d5:91:96:5d:3f:ad:d8:fe:
                    90:00:c9:d0:b5:2b:9f:56:3b:af:7a:56:9e:09:93:
                    aa:0f:05:73:73:c2:c0:33:c9:8a:89:34:76:a1:be:
                    74:8e:5b:f4:d2:c5:e9:7a:9f:41:91:ea:ec:8a:26:
                    f7:9a:b1:fe:b3:d3:07:77:6e:b2:7d:a8:37:90:50:
                    af:e8:64:f5:28:63:ed:e2:c1:34:b6:8d:f8:34:73:
                    2c:37:c7:2a:fe:23:e9:4d:da:4a:1c:5d:82:d3:13:
                    52:7e:55:e6:fc:fd:de:dd:d6:98:df:8e:a5:ea:f6:
                    8e:8b:0d:71:15:11:65:99:90:51:a2:c6:bd:0f:64:
                    d7:0d:15:f5:65:b7:1b:e4:62:98:2f:fd:9a:5c:ea:
                    51:73:e0:c1:b7:44:f7:bc:a5:bd:77:89:fa:00:04:
                    04:f8:95:34:91:01:f1:24:a1:23:e0:75:01:37:1a:
                    c8:15:fe:59:ca:b7:9b:70:36:36:63:49:bc:8a:2d:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0A:4E:E4:95:3A:8B:69:F1:47:EC:B4:C5:7B:05:1E:67:1D:DC:D3
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a106::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:63:2d:3e:bb:13:0e:c1:a3:3f:5b:21:81:a6:cc:ac:97:af:
         4d:40:cb:da:06:19:96:2b:dc:81:e8:30:97:f0:5b:cf:24:48:
         ea:c5:41:da:ef:0b:44:8c:fe:1e:e7:d9:83:70:75:83:66:b9:
         6c:b5:af:01:e9:86:e3:7e:a6:dd:6e:04:41:17:5f:06:af:e1:
         b1:86:47:d8:be:c4:eb:3c:67:9b:5f:26:60:77:0d:45:ab:d3:
         30:44:f1:9e:0e:ae:ea:63:b9:13:d4:f4:dc:a5:f3:c0:7f:6e:
         d0:c2:ee:d1:a9:78:58:0f:ae:47:cb:a5:81:54:5e:aa:ca:50:
         be:f4:f0:c8:45:91:01:30:ca:fa:aa:4d:3c:68:03:bc:65:73:
         89:ac:3a:9f:16:bc:02:09:ef:a5:94:dc:f9:94:be:b8:c7:f7:
         7c:5c:08:55:25:f2:5b:73:86:ec:68:43:d2:22:87:35:56:dd:
         b3:6f:06:3c:b1:55:34:e1:75:94:ef:40:e4:20:9b:fd:93:53:
         05:54:e5:6b:a8:68:d7:94:0c:19:69:88:d4:9b:a1:9c:07:74:
         69:05:6f:4f:e3:a7:28:94:f8:e5:a1:2e:f4:eb:6e:90:f8:30:
         7e:16:ad:0b:08:1c:86:1f:a3:54:37:cd:fc:ce:a5:0b:6e:1c:
         c6:d2:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:49:39 2024 by rpki-client on console-fra.rpki-client.org