Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa
File:                     326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier:          /uJAJJK7DM1WByo6S1UIlKz2091Zbv2ss486sPwfiEY=
Subject key identifier:   B7:BB:AC:1C:4F:3E:63:E2:6E:A0:FA:2B:3D:E6:2C:8A:DE:07:92:96
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       6D9B822E4C3BC02E9BEFB0801F7A76CDCFAB63C3
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa
Signing time:             Mon 22 Jan 2024 20:57:53 +0000
ROA not before:           Mon 22 Jan 2024 20:52:53 +0000
ROA not after:            Mon 20 Jan 2025 20:57:53 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:c00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 23:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9b:82:2e:4c:3b:c0:2e:9b:ef:b0:80:1f:7a:76:cd:cf:ab:63:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jan 22 20:52:53 2024 GMT
            Not After : Jan 20 20:57:53 2025 GMT
        Subject: CN=B7BBAC1C4F3E63E26EA0FA2B3DE62C8ADE079296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:89:6d:db:31:29:f7:99:5f:16:2d:46:55:
                    92:07:1c:3d:51:2a:ab:07:93:09:8c:d0:c3:fe:55:
                    0e:29:2f:44:f2:50:73:2b:c5:f6:d0:c3:b6:14:3b:
                    f5:99:52:06:99:63:70:7c:a0:ac:c8:be:ae:3a:d9:
                    b0:a7:1e:d4:b3:b9:f8:68:85:6f:48:90:60:04:d0:
                    6a:ca:34:ff:57:17:57:1f:c3:a4:ef:19:ff:80:ff:
                    b0:3f:66:20:51:18:71:c7:39:41:05:a9:63:c2:1c:
                    61:5d:54:02:2d:04:cb:2b:ad:95:cf:77:c3:ef:0c:
                    a5:be:ee:04:a1:8e:d4:97:20:33:97:4d:87:bb:0d:
                    87:b1:79:80:5e:24:22:43:87:67:36:fc:e4:66:52:
                    0c:8d:b2:93:9a:e9:3a:92:94:09:ec:10:3e:1d:ec:
                    45:d1:b7:0f:1f:4b:1c:00:b7:4c:2a:da:8e:cc:24:
                    80:ae:26:7f:25:b7:36:90:71:fc:aa:13:18:59:68:
                    ce:65:ef:da:4a:f4:a0:25:a7:1a:5c:b8:9e:aa:a5:
                    1a:1c:14:fb:31:ef:72:0e:49:7a:5e:9e:a2:82:e4:
                    89:b6:18:d5:04:e8:26:55:0c:a0:f2:a2:43:1f:0c:
                    cc:cd:ca:40:b5:1f:a7:f5:69:4c:d6:90:a3:cf:36:
                    c3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BB:AC:1C:4F:3E:63:E2:6E:A0:FA:2B:3D:E6:2C:8A:DE:07:92:96
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c00::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:50:0a:66:0a:cb:ee:86:cc:c8:ba:10:90:47:f2:ff:e4:0f:
         92:b6:ed:cd:4f:bd:e1:7f:b8:04:2c:1f:5e:49:3a:30:f0:ea:
         52:b6:36:32:cf:98:fe:ad:34:aa:fe:42:37:94:03:9c:66:94:
         f7:e7:e8:a6:f8:a0:cd:4a:37:27:40:0b:0e:9c:1f:e2:26:4c:
         90:97:6c:d9:51:a9:e8:f2:5d:5a:f5:e2:01:39:36:81:fa:43:
         53:92:7b:4f:78:8a:93:af:b9:2f:d6:6e:37:ce:33:80:fa:7f:
         0c:f6:04:78:f1:37:1a:73:82:4b:e5:e5:55:08:90:f1:be:39:
         ec:30:22:f8:5c:87:26:25:f8:77:fe:90:9d:0c:40:7d:fd:a7:
         d2:76:b3:21:eb:44:2b:7b:32:cc:85:ef:a4:3f:d8:55:4a:56:
         f2:9c:2b:ef:4d:f4:82:55:d9:ca:90:71:ca:81:cf:89:70:70:
         71:da:98:b2:65:be:71:2e:7e:6c:be:74:f8:2f:54:aa:62:59:
         0d:09:18:37:8f:a1:24:af:61:39:13:a4:04:f8:39:2c:28:bb:
         91:59:0e:ed:da:a1:f7:61:07:4f:f7:e2:d6:23:99:42:3d:cb:
         3d:b6:a7:cc:f0:24:dc:c7:25:14:e6:c5:03:9d:fa:1b:cd:0e:
         8c:d5:be:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:28 2024 by rpki-client on console-fra.rpki-client.org