Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa
File:                     326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier:          CnAZ047tmrpRp78Hj9O+EaIJNOL4YEi+nEB/HQghDBU=
Subject key identifier:   0C:6B:54:E1:3D:76:78:9E:C6:5B:63:3A:43:24:61:B5:A7:03:6E:19
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       583E3AABD0F8ECC50A507FC7A1C241C5E7D0D79C
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa
Signing time:             Sat 27 Jul 2024 15:33:55 +0000
ROA not before:           Sat 27 Jul 2024 15:28:55 +0000
ROA not after:            Sat 26 Jul 2025 15:33:55 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:c53::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 18:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3e:3a:ab:d0:f8:ec:c5:0a:50:7f:c7:a1:c2:41:c5:e7:d0:d7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jul 27 15:28:55 2024 GMT
            Not After : Jul 26 15:33:55 2025 GMT
        Subject: CN=0C6B54E13D76789EC65B633A432461B5A7036E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d5:98:fc:24:6e:9f:de:97:e8:ba:aa:28:9b:
                    7e:fe:4a:3c:0a:1d:91:a8:24:0c:53:2a:90:5f:8f:
                    5a:53:6f:b9:20:a3:0a:6c:9d:d3:9e:9b:d4:4d:db:
                    50:81:54:df:c6:05:6c:c2:f8:76:08:9c:dd:1f:a3:
                    85:0e:2a:52:b5:12:94:b1:28:80:cb:50:3d:77:df:
                    e2:a3:19:52:00:e2:32:f7:fd:90:5c:db:ba:45:2c:
                    d8:9f:7e:81:5f:5c:24:9f:2d:b3:e8:55:ec:32:a6:
                    d1:bc:d9:2c:d4:35:f3:3f:97:3f:8b:d4:c7:fa:af:
                    63:5a:e3:87:e2:e3:a1:47:33:b7:49:e5:78:ab:44:
                    a9:a4:56:16:56:68:e3:63:60:a9:59:35:dd:29:9b:
                    d6:0b:f5:c0:28:67:3c:e1:c2:72:8a:a4:90:bb:a8:
                    35:59:33:56:a8:c9:65:d3:b4:b0:81:6f:91:34:2c:
                    ed:0c:2d:87:74:f2:62:87:d2:cb:1d:7b:06:c7:79:
                    09:8b:8b:24:66:0d:1f:d9:62:55:a3:c9:28:2a:c4:
                    08:47:a9:e6:a6:56:ea:57:ce:84:ff:47:1d:27:f2:
                    2e:c8:41:7d:32:bf:5f:4c:ee:6d:0e:23:74:57:40:
                    34:cb:20:ce:0f:46:92:23:19:3c:6f:fe:76:a8:10:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6B:54:E1:3D:76:78:9E:C6:5B:63:3A:43:24:61:B5:A7:03:6E:19
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:c53::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:45:e3:ae:e6:e5:98:6d:ab:c5:4c:e5:31:7f:89:79:d8:
         a2:03:12:e1:e5:85:de:10:3e:82:04:d2:8d:20:24:b7:c5:ca:
         0c:6e:75:4c:95:97:74:f1:9e:bf:95:fd:b8:d0:e2:01:cc:f4:
         a2:3b:dd:32:a7:5b:9a:cb:8a:e0:9a:88:f7:05:66:08:a0:c6:
         29:eb:d0:eb:33:2a:1f:fc:5b:fe:93:f9:c7:35:19:ae:1a:64:
         44:d6:b8:af:25:82:8f:7e:63:68:53:26:bc:90:f9:7a:cc:79:
         36:db:a0:e2:b2:34:17:7e:08:01:39:c0:45:aa:1c:b7:7c:ba:
         16:0a:a2:17:37:20:96:2f:a5:c5:d1:66:58:b8:45:dd:67:16:
         83:08:c4:d8:13:3b:4e:77:7c:05:06:19:03:72:5e:b2:3a:f5:
         ea:d8:5a:96:60:07:2e:b4:2c:09:c9:73:20:a7:b9:d1:08:53:
         ba:c2:cc:58:d4:30:57:90:32:71:e6:17:a8:77:92:08:fc:ff:
         1b:c7:c5:2e:47:bb:94:80:a5:a0:6c:10:8d:49:ca:ba:af:9b:
         05:2e:3f:ce:dd:c2:fa:21:19:c3:8a:ed:85:30:5b:01:7c:ee:
         06:af:69:37:33:3c:99:f1:d2:3d:56:37:78:c1:c7:d3:41:26:
         f5:79:6e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:01:29 2024 by rpki-client on console-fra.rpki-client.org