Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa
File:                     326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (raw, json)
Hash identifier:          2wwjOv8GrtbbRR9vstu58/KZGnDrdVaG4knETIYc/AY=
Subject key identifier:   12:06:8D:06:C7:63:7B:68:67:79:36:E4:CD:B1:1F:98:5C:F9:45:EA
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       1F5ACE1089A5F19954148989926CBB34D93DCE00
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa
Signing time:             Fri 19 Jan 2024 19:29:40 +0000
ROA not before:           Fri 19 Jan 2024 19:24:40 +0000
ROA not after:            Fri 17 Jan 2025 19:29:40 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 23:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5a:ce:10:89:a5:f1:99:54:14:89:89:92:6c:bb:34:d9:3d:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jan 19 19:24:40 2024 GMT
            Not After : Jan 17 19:29:40 2025 GMT
        Subject: CN=12068D06C7637B68677936E4CDB11F985CF945EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c4:fd:25:ea:be:a0:af:8a:aa:c9:b0:08:d6:
                    53:d6:d6:b2:8a:c6:47:ed:ec:ab:e7:c9:79:cf:30:
                    7f:9f:43:98:ff:54:a1:fb:2b:5a:de:99:3a:30:d8:
                    6d:80:de:b9:38:ee:18:a8:d4:70:52:cf:e7:b8:0b:
                    b1:c7:45:47:7e:fe:a6:c4:88:19:c0:fe:f8:c4:aa:
                    15:7e:6e:0b:ed:31:ff:8a:92:7a:4b:2a:67:7a:c4:
                    01:8e:de:1d:82:44:e4:4a:4a:c2:76:8f:a0:23:df:
                    f9:ef:31:5a:2d:68:16:f2:30:ca:26:0c:18:53:dc:
                    09:19:a8:c9:a6:e8:04:30:50:1b:08:88:4a:a3:b9:
                    c7:25:8a:f4:1f:1f:60:3d:63:19:eb:21:d2:7d:f4:
                    3c:30:43:04:d8:f8:8c:9a:6c:11:92:76:d0:39:73:
                    f4:69:c7:2b:c4:e5:54:46:98:13:37:fe:55:59:2d:
                    8f:81:a9:bc:f8:c5:4a:9c:80:21:42:e0:b2:97:04:
                    db:38:04:be:62:5f:03:0d:72:65:21:cc:b4:6b:d3:
                    b2:dc:a6:b2:93:3e:70:00:49:ca:62:1a:ce:0c:0b:
                    53:0b:ac:70:7b:63:06:ab:2d:a4:03:ea:e3:a5:db:
                    ee:16:bc:a8:34:2f:74:d7:2a:99:58:5f:32:7b:38:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:06:8D:06:C7:63:7B:68:67:79:36:E4:CD:B1:1F:98:5C:F9:45:EA
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8f:54:74:37:55:df:ce:52:4b:90:6a:f0:5d:51:8a:b4:31:63:
         30:95:fc:ed:3f:a5:e0:df:1f:31:57:51:91:56:e2:2b:1b:ce:
         a2:af:dc:40:66:25:91:f0:01:73:0e:5d:bb:86:4e:f4:a3:5b:
         22:b0:d3:f0:d6:d8:c4:de:f1:06:3b:e7:1b:f9:b5:ca:f6:2c:
         2f:58:60:16:02:2b:d8:3f:ad:7d:f4:f2:5d:03:b3:6c:38:ea:
         ec:a8:98:bb:12:f9:c1:9e:47:06:fe:ad:51:bc:62:41:c9:bf:
         fb:98:5b:aa:ba:7c:d7:88:41:1a:4a:f0:a2:a6:14:59:36:25:
         d3:03:bd:72:6e:59:9c:7c:3f:7b:9a:a9:43:e4:76:2d:cf:69:
         d3:bd:31:bd:a7:6a:9f:a5:e8:cb:0f:1c:ec:be:43:13:77:bc:
         ca:4f:bb:c1:eb:39:f5:54:1a:2f:ce:47:1f:8c:ca:fb:84:02:
         3a:b6:34:7a:93:c8:a6:7e:9b:32:07:cc:9d:1c:d6:f8:07:22:
         28:d9:62:ba:53:43:42:a2:41:24:39:5b:af:76:4b:93:10:c6:
         99:e9:47:13:13:ef:3e:b6:77:44:3f:85:a4:50:cd:b1:0d:b7:
         0c:fa:3f:10:03:dc:11:4d:4b:ca:21:6a:9c:8d:02:24:ee:de:
         c3:1d:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:50:42 2024 by rpki-client on console-ams.rpki-client.org