Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130373a3a2f34382d3438203d3e2038303735.roa
File:                     326130613a363034303a613130373a3a2f34382d3438203d3e2038303735.roa (raw, json)
Hash identifier:          siFflNuLBcUVT2ew55GY4asQcEPlp1UAXXEo+quCh4Y=
Subject key identifier:   5C:53:3E:C5:26:D8:F9:5B:39:62:0C:12:2F:70:75:D6:32:05:B5:7F
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       5889E55EA4C5D91E80E7CCC32470DCE18728A078
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130373a3a2f34382d3438203d3e2038303735.roa
Signing time:             Thu 25 Jul 2024 13:18:26 +0000
ROA not before:           Thu 25 Jul 2024 13:13:26 +0000
ROA not after:            Thu 24 Jul 2025 13:18:26 +0000
asID:                     8075
IP address blocks:        2a0a:6040:a107::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 04:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:89:e5:5e:a4:c5:d9:1e:80:e7:cc:c3:24:70:dc:e1:87:28:a0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Jul 25 13:13:26 2024 GMT
            Not After : Jul 24 13:18:26 2025 GMT
        Subject: CN=5C533EC526D8F95B39620C122F7075D63205B57F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:11:a2:01:34:06:3c:21:13:6f:3e:72:f3:25:
                    81:1c:84:7b:33:d7:70:d7:51:a5:06:34:96:d2:5b:
                    f8:17:9f:57:ee:13:d2:d1:f6:95:2a:14:df:4d:db:
                    32:b6:a1:be:b2:c8:4e:55:2b:82:6d:ba:52:58:d0:
                    8a:dc:4b:ac:6b:a3:e8:2b:e4:48:9c:33:a2:11:b5:
                    3d:8a:15:66:e3:d6:e8:f8:06:6b:68:1f:7f:9d:f5:
                    16:c0:82:bd:32:5a:65:9a:0c:17:a5:1a:de:47:2b:
                    60:e4:18:62:4a:dc:43:89:5e:8a:8c:12:59:9d:e0:
                    2e:de:8c:04:5b:ad:2d:31:21:e5:8e:81:08:cd:3d:
                    26:52:25:41:5b:d8:1d:4a:29:99:a1:f2:ac:3c:10:
                    f3:11:0b:01:a1:3f:c7:d4:a6:ba:5c:27:67:15:40:
                    1b:a0:fd:ae:6f:fd:53:05:bd:88:a8:c7:74:70:71:
                    3f:34:ff:ce:bc:d9:07:de:17:c2:d1:db:7a:b7:33:
                    5d:dd:9a:6c:10:7d:d4:35:f4:6a:c2:1d:a9:97:c4:
                    a9:b7:c8:e6:3c:d7:94:52:2e:50:db:2d:15:5f:08:
                    7b:22:88:87:13:bf:0e:e9:b6:ac:94:03:ae:00:02:
                    a9:9e:c0:21:42:98:62:00:e8:b3:ff:62:48:2c:27:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:53:3E:C5:26:D8:F9:5B:39:62:0C:12:2F:70:75:D6:32:05:B5:7F
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/326130613a363034303a613130373a3a2f34382d3438203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:a107::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:d4:ba:a5:6b:4d:49:27:86:7f:c3:70:ea:3b:ca:94:4d:8e:
         65:bb:f3:08:b1:8e:d5:94:9d:92:3d:66:1d:52:9e:40:f4:ad:
         ca:ed:25:25:26:b5:60:ec:f9:25:fb:cc:16:a2:99:3d:a1:c9:
         95:05:fe:f9:5e:6d:c5:35:57:1f:b3:d0:f3:62:39:4b:50:5b:
         ee:07:19:89:50:07:b6:22:80:fc:5f:c8:6e:20:cf:b4:00:74:
         00:1b:dc:ee:fc:1f:22:ef:f5:8b:10:15:9d:29:7f:6e:89:4b:
         fb:32:8d:6a:40:61:38:05:44:ea:26:7e:47:13:66:b2:2b:c1:
         62:6a:66:82:15:a6:b5:c0:ff:c9:9f:a4:38:1d:7a:3e:e0:8e:
         64:6c:b7:b2:a5:9e:1e:d1:ca:a9:be:47:5c:c5:ca:ec:0b:8b:
         e2:5b:db:67:68:a4:41:2a:30:54:aa:bf:61:61:30:0a:14:8c:
         0d:0d:68:8f:d2:d3:df:b5:39:cb:2c:5c:5d:59:d6:94:c3:ae:
         cd:d0:5a:1a:a2:b0:c3:b6:ab:62:d9:51:73:47:ba:76:d9:62:
         70:38:a0:a9:68:2e:10:e4:5e:d1:31:37:5e:a2:76:61:8b:68:
         60:31:31:26:90:b8:3e:95:d8:2e:5f:af:7a:82:d3:77:9e:07:
         24:66:fa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:09:17 2024 by rpki-client on console-fra.rpki-client.org