Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa
File:                     326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier:          Te8NDOHqLdV9h/krQNl2dlY/ze4tKXk4Bq9QTA0uUAA=
Subject key identifier:   48:B1:4E:48:07:7B:16:80:46:33:F5:39:DC:90:83:2D:C4:62:8F:E5
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       49B1DCC6B062EF3B9E2F2CB2E0500C6091A8DE78
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa
Signing time:             Fri 19 Jan 2024 19:28:24 +0000
ROA not before:           Fri 19 Jan 2024 19:23:24 +0000
ROA not after:            Fri 17 Jan 2025 19:28:24 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:cec::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 18:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b1:dc:c6:b0:62:ef:3b:9e:2f:2c:b2:e0:50:0c:60:91:a8:de:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jan 19 19:23:24 2024 GMT
            Not After : Jan 17 19:28:24 2025 GMT
        Subject: CN=48B14E48077B16804633F539DC90832DC4628FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:8c:a7:a2:90:4d:29:f9:0a:76:20:df:06:
                    c4:8e:cf:f4:e5:db:ed:e8:52:f5:a3:ce:d4:54:b2:
                    3f:c4:28:3e:a1:43:1f:2e:e7:fc:b6:e5:55:b9:36:
                    e5:ab:d4:77:a8:fb:ee:32:19:12:67:de:70:bd:02:
                    97:13:72:a8:ab:20:31:ba:31:79:9f:9b:9b:e5:19:
                    af:35:95:ca:c6:d3:01:70:9b:d0:5c:f8:e6:d5:61:
                    33:1e:1f:a2:d9:81:cf:df:59:05:5c:d0:4e:21:18:
                    1e:6c:7a:7c:a1:37:42:7b:41:ff:25:5b:7a:72:c5:
                    19:49:94:b8:9f:08:32:3a:90:2e:4a:80:b0:54:44:
                    49:cd:9c:4e:46:8f:ad:8e:11:84:9c:b9:fc:f8:0b:
                    94:ba:38:de:49:e0:29:46:eb:a5:de:af:f4:0f:c5:
                    84:60:ba:a3:e1:64:f8:d9:6d:62:33:14:ff:6c:c4:
                    fd:14:f7:af:41:27:e4:b0:2f:7e:c5:96:f4:96:65:
                    1c:f6:a4:a0:9e:cb:94:e7:ae:a1:b7:06:6c:2c:15:
                    9e:ad:a7:7c:cd:7b:5f:e8:4c:42:ba:bb:fc:48:3e:
                    b0:6e:2f:7b:fa:9b:0b:d1:81:68:9e:f0:a0:2b:3f:
                    86:e4:43:33:bf:e6:dc:76:81:09:5a:ef:13:c7:9b:
                    17:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B1:4E:48:07:7B:16:80:46:33:F5:39:DC:90:83:2D:C4:62:8F:E5
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:cec::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:af:c2:0d:e6:ee:46:5b:e9:1a:67:3e:b7:eb:11:38:1a:e6:
         7c:48:4e:6b:04:87:8e:f1:a0:49:42:11:27:1c:c2:f2:66:82:
         51:13:1c:85:d4:46:af:1a:83:37:8b:9b:54:4b:b9:fb:4b:ca:
         a1:c8:e3:4b:ec:f2:fc:ea:c9:5e:64:a7:0c:02:00:c5:ca:09:
         77:7a:b5:62:6a:a8:84:8d:52:69:fe:f4:88:6d:12:72:a9:c2:
         f0:8c:db:65:7d:ae:2c:c1:53:23:bb:d7:03:b1:52:cc:64:9f:
         0e:6b:b0:2b:d7:e4:0c:65:ab:51:7f:42:c5:58:55:de:f4:56:
         21:d5:91:3f:74:cc:5e:4b:a1:72:d9:3a:5e:d5:ca:f4:8f:51:
         12:7d:da:57:2f:f9:aa:e8:6e:e6:e1:30:58:1c:c6:46:43:a7:
         b7:49:48:f8:97:4c:33:a7:34:c7:10:40:75:eb:b3:5f:97:52:
         c8:a6:1c:d9:1c:cc:0f:12:8c:83:54:0a:84:d1:48:27:5c:57:
         6f:0f:86:c3:0c:82:7f:f9:84:1b:55:21:6a:f1:51:37:e7:9f:
         4b:3a:26:33:16:2d:26:85:c2:f3:87:7e:fd:66:27:4f:ec:93:
         26:2b:e0:55:a1:1d:b7:ea:7f:98:8c:6e:20:9e:50:ed:97:7d:
         96:72:c0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:58:30 2024 by rpki-client on console-ams.rpki-client.org