Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa
File:                     326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier:          GvQX7Hq7Lk5dV/2LRULKKfFGAvYvS66+a11SezP2Gv0=
Subject key identifier:   B0:B4:5A:F1:91:5F:D2:FB:4B:6B:A8:78:B9:14:8D:04:85:82:62:89
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       44346F98EE9160295AC290E2D22270BD9C7D5FAC
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa
Signing time:             Fri 19 Jan 2024 19:26:14 +0000
ROA not before:           Fri 19 Jan 2024 19:21:14 +0000
ROA not after:            Fri 17 Jan 2025 19:26:14 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:cb0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 23:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:34:6f:98:ee:91:60:29:5a:c2:90:e2:d2:22:70:bd:9c:7d:5f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jan 19 19:21:14 2024 GMT
            Not After : Jan 17 19:26:14 2025 GMT
        Subject: CN=B0B45AF1915FD2FB4B6BA878B9148D0485826289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:6d:a2:8f:20:65:bc:d8:22:e3:68:0a:f1:
                    1c:42:e3:2a:39:79:eb:85:ce:eb:8b:80:a5:ba:8e:
                    42:15:08:55:9d:ba:7a:82:ca:9c:dc:b6:dc:02:f6:
                    5d:f9:6a:40:8d:a5:1c:9f:0c:71:c1:92:58:1c:ef:
                    83:8f:bc:e1:83:70:3a:cd:fc:99:e9:cf:60:90:da:
                    0b:d9:69:83:85:45:0a:77:7d:bd:81:19:f0:16:e1:
                    31:ca:ba:93:84:0b:09:71:d7:df:41:5b:f1:c8:da:
                    0f:dd:c7:94:19:ac:f7:28:7c:e2:64:0a:c2:5b:6b:
                    3c:da:92:ba:c3:a6:b5:2f:0e:52:63:29:e8:c5:60:
                    25:23:86:8f:65:de:e9:4b:4e:3f:f0:78:16:f6:18:
                    1c:b7:60:62:c7:23:32:fd:46:76:e9:74:1d:b8:d7:
                    2f:b2:3a:af:49:e7:3d:71:d6:5e:80:8d:39:48:f7:
                    15:b5:50:1e:15:01:e7:a1:1f:7f:68:9d:d1:2e:fc:
                    6f:f5:c4:35:3d:45:a3:ae:3d:86:82:91:27:a5:3f:
                    13:4d:28:ed:fb:5a:c0:42:a9:e7:00:39:27:76:ef:
                    60:d2:7c:e5:f8:6c:f0:c0:03:cf:fd:ec:0e:17:c3:
                    bf:d6:2a:11:ba:62:13:78:0a:5d:bd:3e:b5:2b:24:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B4:5A:F1:91:5F:D2:FB:4B:6B:A8:78:B9:14:8D:04:85:82:62:89
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:cb0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:98:40:ec:15:16:de:c1:72:97:55:91:eb:00:f3:1e:87:
         35:12:ed:14:71:0c:8d:d4:8a:b8:3b:7f:a8:3c:90:1e:3a:13:
         7e:73:8d:b6:40:ae:c5:39:b9:b5:af:36:d2:f6:03:49:8d:9e:
         60:90:9d:e0:e2:55:4c:f6:b5:2c:86:a3:ea:c7:b1:24:e7:2f:
         d6:b7:0a:74:7c:52:d1:3f:3d:22:9b:67:10:d0:53:7d:d5:92:
         63:1f:44:f8:83:f2:db:3e:19:a8:c1:69:30:c4:70:dc:d1:a7:
         eb:06:b5:02:bb:5b:ae:5c:4f:51:bf:90:e6:e8:bc:17:b7:95:
         2a:d8:7b:dc:4a:12:c6:95:b9:3c:e5:66:62:1e:41:1a:2b:59:
         de:e7:a3:c5:bf:43:de:9a:9f:57:12:9e:2a:3a:da:fc:1a:cc:
         33:95:d6:b1:91:15:b8:f8:2b:91:ce:4d:2f:c6:5e:df:2a:c7:
         b5:e2:5c:1f:44:6a:f3:bf:3f:ec:be:45:c8:4f:eb:04:64:c9:
         63:dd:0f:fa:f8:26:5d:c2:6f:60:fd:27:6f:37:8d:19:4f:f8:
         6b:f8:4c:7e:b9:ea:a8:82:27:e4:8a:04:ee:d6:6d:9a:87:d5:
         5b:2d:37:0d:47:c5:9e:46:ae:cd:6f:e8:86:18:42:d3:90:9c:
         04:a9:45:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:28 2024 by rpki-client on console-fra.rpki-client.org