Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa
File:                     326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (raw, json)
Hash identifier:          Jm1VVV81mAzlve9Sh1FKMW8glIMXkZwiacXv7jZzlz8=
Subject key identifier:   39:7B:85:00:A2:FC:59:39:89:1C:94:35:A1:2B:1F:4B:75:E1:E2:BF
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       1572344306A1AEB7C3684EE0E02A0B899591FCD9
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa
Signing time:             Sun 05 Nov 2023 04:27:05 +0000
ROA not before:           Sun 05 Nov 2023 04:22:05 +0000
ROA not after:            Sun 03 Nov 2024 04:27:05 +0000
asID:                     203843
IP address blocks:        2a0a:6040:a106::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:72:34:43:06:a1:ae:b7:c3:68:4e:e0:e0:2a:0b:89:95:91:fc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Nov  5 04:22:05 2023 GMT
            Not After : Nov  3 04:27:05 2024 GMT
        Subject: CN=397B8500A2FC5939891C9435A12B1F4B75E1E2BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:e3:67:33:05:d1:96:d8:5c:ab:73:dc:af:
                    9a:fe:e8:c7:8f:f6:ad:31:49:fc:90:d5:04:64:be:
                    01:44:c8:ec:62:4f:09:a9:bb:7d:8b:df:cb:ee:01:
                    db:d3:22:91:74:65:3c:fb:cc:96:7d:05:1b:bb:91:
                    70:78:33:d4:c2:e7:27:f2:87:e5:be:f9:f1:ed:fc:
                    cb:0d:ea:43:94:6a:7d:19:4b:70:ab:a9:63:89:66:
                    38:97:26:10:bc:20:37:a5:e8:a5:91:cf:14:73:b5:
                    cc:fb:17:bc:1f:18:f5:12:25:82:05:bd:d3:5c:5d:
                    d5:cb:ee:5f:ba:9b:2f:8d:fa:3a:cb:ef:9b:54:88:
                    c9:e9:84:83:08:4c:37:c3:f4:b7:bd:12:f4:2d:28:
                    eb:84:b6:66:58:a1:d9:d2:96:2f:2e:92:eb:dd:8e:
                    d5:78:4c:66:e4:03:92:a4:f0:a4:4e:9d:11:a9:e8:
                    47:f4:6b:d5:80:2e:5b:ef:15:07:84:c4:8b:28:e0:
                    ca:48:bb:a8:d6:cc:a0:4b:1f:df:d5:c9:7f:7c:d8:
                    5f:a5:df:aa:1b:40:1b:d3:b8:f4:34:40:0d:14:b3:
                    d1:2d:2f:39:ce:d4:f2:1e:57:0a:14:d5:34:ba:78:
                    53:41:d3:2e:4b:f2:26:b0:48:07:45:16:e7:99:ae:
                    2c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7B:85:00:A2:FC:59:39:89:1C:94:35:A1:2B:1F:4B:75:E1:E2:BF
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a106::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:b6:c6:ba:b6:4b:ec:6d:ad:42:7e:68:4f:e5:b2:da:03:
         9b:db:65:fe:41:2a:2c:10:21:bc:c8:24:f6:98:ae:1f:40:a3:
         f6:33:bb:79:2c:9f:e0:b1:fe:0d:25:10:ab:60:83:ec:47:95:
         b5:56:17:50:06:52:84:ab:30:32:50:dc:f7:8e:9c:bb:70:aa:
         57:47:fe:5d:6d:bf:4f:eb:e5:16:2a:39:4e:88:44:6a:21:d3:
         c8:3c:4d:f6:98:9b:55:37:6c:f3:48:2e:d5:78:94:1a:5d:e1:
         7e:d9:4e:26:ee:46:a0:65:56:41:96:13:a7:bf:de:6d:b6:7e:
         6a:8a:5b:28:f4:10:c4:b4:ea:bc:ae:22:99:26:dd:e0:f0:3d:
         0e:e3:6b:c3:78:b4:df:ed:13:26:1e:7b:8f:0a:c6:48:0a:a9:
         b9:a5:57:e8:98:89:3f:0a:58:a6:3f:ba:d3:8d:5c:82:07:03:
         7c:f5:43:27:fc:b4:f5:4f:96:69:64:b1:84:79:ef:ab:6b:5b:
         53:1f:fe:7e:71:86:6c:32:77:28:4c:13:94:08:68:55:18:e4:
         d8:f4:ed:f1:da:67:bf:7c:58:3a:0a:e4:94:e3:c4:1e:47:ee:
         11:c1:4d:04:66:83:38:8e:09:08:f7:aa:f8:c9:94:b4:53:52:
         5e:fb:eb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:39:19 2024 by rpki-client on console-ams.rpki-client.org