Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa
File:                     326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier:          okjmfMUPtNtmB+YgoKbmrSqd6CYYzeYzA5IuvR4FqE4=
Subject key identifier:   56:F7:65:27:E2:D9:F0:2E:C8:41:6E:A9:5E:C1:AB:90:E4:0F:21:87
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       3997DF855E503F27BA48B6F30A9C1FC3809AC7A5
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa
Signing time:             Fri 19 Jan 2024 19:27:45 +0000
ROA not before:           Fri 19 Jan 2024 19:22:45 +0000
ROA not after:            Fri 17 Jan 2025 19:27:45 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:cd2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 23:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:97:df:85:5e:50:3f:27:ba:48:b6:f3:0a:9c:1f:c3:80:9a:c7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jan 19 19:22:45 2024 GMT
            Not After : Jan 17 19:27:45 2025 GMT
        Subject: CN=56F76527E2D9F02EC8416EA95EC1AB90E40F2187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:90:79:78:e5:51:3b:bd:be:d9:17:d2:df:3f:
                    01:f2:b8:f7:77:96:50:e4:73:36:f2:5f:7d:2b:ec:
                    42:c1:2d:f3:e1:9a:03:fe:eb:44:a9:4b:0f:cf:22:
                    2c:91:7d:7e:37:6d:b5:86:6f:ae:de:5b:7c:d1:df:
                    5d:89:9a:cd:d5:26:c7:2c:a9:fa:35:89:a4:32:21:
                    d6:dd:a3:0e:f2:c7:e2:5f:aa:cd:e0:f5:35:f9:d8:
                    e9:70:33:70:1c:52:b9:36:54:16:77:c0:c7:db:78:
                    9a:f3:78:0a:89:9e:53:bc:f5:40:a1:77:84:ab:6f:
                    ca:54:ec:59:37:c5:25:4a:a7:60:21:85:30:b4:f9:
                    ca:d3:7c:57:06:c1:ce:a6:b9:d9:32:3a:f0:3c:d3:
                    bd:98:ed:17:2a:38:73:ba:59:81:1e:9e:aa:54:2c:
                    6b:32:c0:ee:f1:ba:51:e1:1f:80:e2:3f:f2:99:62:
                    05:08:be:46:a6:a2:b0:d2:32:a8:dc:88:c7:56:d7:
                    19:93:ba:a5:53:eb:e2:b7:e4:dd:d1:bc:ab:44:fb:
                    2e:be:2f:64:f2:58:e6:e5:f4:f6:13:f5:b0:5f:22:
                    95:4d:47:49:2d:7e:4a:81:95:67:87:9d:7f:a4:34:
                    f4:6b:fa:a3:fd:1d:b8:cd:78:35:3f:52:45:d8:96:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F7:65:27:E2:D9:F0:2E:C8:41:6E:A9:5E:C1:AB:90:E4:0F:21:87
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:cd2::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:f8:a2:69:74:83:ec:d9:1a:83:2c:54:32:20:c5:12:f3:70:
         90:13:ed:e3:6b:de:2e:3a:6a:6e:58:4a:95:00:4e:bd:d9:c6:
         85:46:2a:7a:25:dd:89:09:44:c6:ab:c5:bf:7a:25:04:52:6f:
         69:a0:42:8b:4c:e1:29:c4:38:5b:2f:b8:1a:b6:ed:a1:d9:89:
         10:9c:82:25:83:2b:2f:bd:12:ef:4c:90:5a:bd:10:62:af:02:
         1a:4d:4d:f3:ef:0d:e6:61:12:1e:d1:40:f0:97:f9:81:15:e0:
         7d:43:e9:96:7e:6d:32:e0:8a:b0:28:cc:1b:b2:ba:02:e0:e0:
         c4:2a:4c:9b:10:89:02:71:52:9f:f2:be:43:50:d2:27:1d:d8:
         a7:0e:9b:38:09:62:43:57:d0:c1:f1:d3:ba:0a:f1:de:8d:8b:
         16:9b:54:ee:1c:be:33:bd:b2:89:cb:d7:38:a4:9b:e7:ea:8b:
         3a:72:2e:91:c7:32:2e:5d:1f:75:78:0a:3a:36:ed:63:1e:06:
         8a:be:c8:76:a3:6c:4a:77:89:fe:95:3c:d1:bf:cc:86:d1:b5:
         08:0f:ab:6e:fd:05:c0:66:e8:b5:75:9d:8e:93:33:71:ef:10:
         38:3e:18:e2:2c:d4:47:25:5d:79:fd:26:b5:83:90:2d:a6:7a:
         c6:e3:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:28 2024 by rpki-client on console-fra.rpki-client.org