Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa
File:                     326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (raw, json)
Hash identifier:          RcpSeMF5tmjCceI6lprmaNclkAcIin6urOruFeoBsH0=
Subject key identifier:   98:A3:4F:4C:3E:6B:94:91:2D:A3:A7:2B:D0:1F:20:DB:71:3A:87:B9
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       46A37AAD70CCECE74A5FC7D813EC0545036CBC23
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa
Signing time:             Fri 09 Feb 2024 15:01:34 +0000
ROA not before:           Fri 09 Feb 2024 14:56:34 +0000
ROA not after:            Fri 07 Feb 2025 15:01:34 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:9300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 23:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a3:7a:ad:70:cc:ec:e7:4a:5f:c7:d8:13:ec:05:45:03:6c:bc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Feb  9 14:56:34 2024 GMT
            Not After : Feb  7 15:01:34 2025 GMT
        Subject: CN=98A34F4C3E6B94912DA3A72BD01F20DB713A87B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:27:67:5a:3a:65:1a:14:90:86:70:1f:24:25:
                    10:a8:11:9e:d5:16:3a:66:e7:c4:77:40:68:1f:98:
                    2c:dc:4a:c4:6e:d4:6f:11:6e:f7:4a:6d:70:36:f1:
                    25:bb:fd:4a:d7:c8:bf:7b:a1:03:7c:ef:bc:a3:82:
                    75:34:44:0c:25:35:fb:ed:9c:55:cb:64:a5:be:80:
                    b3:20:09:c8:48:fa:32:90:00:a4:dd:b5:d4:dd:7e:
                    01:96:2b:ee:bf:5e:e8:ce:3f:4a:21:15:ee:e3:4a:
                    42:29:08:ad:6b:58:19:78:b5:3b:78:6c:50:71:d7:
                    bc:d5:f7:8a:3b:49:ad:02:2b:93:80:80:0e:fb:9b:
                    fb:0e:75:bd:e5:cd:b4:0b:58:a8:53:e6:b2:99:c4:
                    0c:5a:28:80:fb:09:9e:7d:d4:09:1a:9c:3c:50:5c:
                    b5:dd:a7:e5:aa:df:ea:5e:77:d8:08:70:48:f0:6e:
                    55:24:05:84:21:a0:16:0e:b2:df:07:96:3f:e5:83:
                    dc:41:e6:01:4b:d6:01:39:f1:b4:e0:f5:ee:b3:ea:
                    8e:01:bd:6c:d2:3b:d3:22:ee:3d:bd:7e:a1:89:d6:
                    10:e7:c1:ee:67:2a:6c:00:5c:d0:3d:d0:14:03:73:
                    dc:8e:a6:33:7b:af:dd:2d:bb:27:e4:e1:6f:cb:91:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A3:4F:4C:3E:6B:94:91:2D:A3:A7:2B:D0:1F:20:DB:71:3A:87:B9
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:9300::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:e5:fa:19:cd:7e:ce:6e:b1:65:3c:46:3f:30:9d:20:a8:
         78:bb:a3:8a:96:b2:81:43:a3:c5:c8:b9:0e:15:8a:d1:1c:73:
         3e:27:1e:52:f9:e3:a2:9d:f2:1d:65:32:0e:1e:1c:8e:a1:93:
         e0:c5:5e:7c:dd:24:37:3a:12:e0:77:af:88:a2:8a:52:c2:ae:
         f2:3c:65:8d:a1:3f:3b:91:fb:68:ca:c3:86:a4:00:d9:61:5d:
         4a:29:39:0c:76:f3:49:6a:fe:f0:b0:bf:29:52:0c:46:9f:61:
         ce:44:8c:af:c1:68:0d:21:28:40:6a:3f:bf:c8:08:40:4a:74:
         49:85:56:af:3b:47:34:69:87:31:20:79:ba:ba:db:38:e3:3a:
         5c:c6:33:59:92:31:67:fc:b4:b7:13:f7:a7:61:0e:31:df:d1:
         17:a5:e8:e9:23:89:2d:d5:52:f8:71:b0:20:ed:a4:3b:fa:d1:
         a3:75:1e:b7:33:42:48:a8:db:55:93:65:48:84:a1:be:5e:46:
         d7:3a:6f:c9:25:34:a6:a9:b0:db:eb:25:05:03:b1:65:dd:c4:
         d6:61:2c:10:ec:56:77:1d:f5:98:bf:b6:66:5a:2c:69:52:99:
         0e:fa:5c:e1:76:2f:51:bf:02:b5:45:f4:01:e3:cd:31:b7:56:
         9f:33:93:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:28 2024 by rpki-client on console-fra.rpki-client.org