Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa
File:                     326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (raw, json)
Hash identifier:          xZP1TdoBBOXgaTQoQE3M5ucBwQKGU4zzOq7+G2QnQI8=
Subject key identifier:   3A:62:CD:B3:70:FA:CE:E8:D8:85:A1:B5:22:F1:D8:4F:C9:40:18:A3
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       1A827AF8DE55B5614691CF71733FB39F0837C52B
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa
Signing time:             Fri 19 Jan 2024 19:28:44 +0000
ROA not before:           Fri 19 Jan 2024 19:23:44 +0000
ROA not after:            Fri 17 Jan 2025 19:28:44 +0000
asID:                     216107
IP address blocks:        2a05:dfc1:cff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 18:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:82:7a:f8:de:55:b5:61:46:91:cf:71:73:3f:b3:9f:08:37:c5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Jan 19 19:23:44 2024 GMT
            Not After : Jan 17 19:28:44 2025 GMT
        Subject: CN=3A62CDB370FACEE8D885A1B522F1D84FC94018A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:81:94:5d:1b:cd:38:35:0f:1f:05:f8:b0:
                    e3:ae:94:16:f1:cd:a2:58:6b:83:a1:de:a9:93:d8:
                    37:01:a0:b9:25:ce:1d:ba:69:a0:36:59:3e:c4:7a:
                    f7:86:6a:72:80:e7:73:2d:12:e2:d2:97:47:d9:14:
                    6b:47:ac:9a:6b:36:d2:f1:61:13:f3:6b:a0:22:66:
                    31:02:6f:21:71:3e:e6:5d:ff:1d:e1:fb:71:54:7c:
                    5d:80:ac:b8:ab:25:63:e6:5c:8d:e8:e5:c6:d5:e0:
                    bd:3e:a2:2f:ce:69:01:b4:e4:9b:23:5f:d0:c9:db:
                    0e:d2:f8:dd:ba:29:77:59:42:ee:76:49:f6:4a:43:
                    92:09:c5:d3:3e:4f:a6:fd:9e:27:e3:58:20:cb:4b:
                    4e:dc:a3:d3:64:3f:3d:8d:ad:b5:f1:0a:18:94:39:
                    78:6f:d7:3b:86:28:23:43:d2:97:71:76:b7:55:bd:
                    80:6c:a1:8e:9e:0f:8a:64:6f:ef:b3:de:30:e7:37:
                    8b:3d:26:b6:51:9c:f2:dc:06:3b:c7:15:84:ab:d4:
                    e1:eb:79:d7:a2:1d:94:86:07:a9:8f:4c:a7:08:b1:
                    78:09:4d:f1:91:e6:da:1b:3a:d6:5d:0a:54:78:29:
                    09:dc:49:65:5f:1f:f4:34:f1:53:e2:67:1e:fe:ca:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:62:CD:B3:70:FA:CE:E8:D8:85:A1:B5:22:F1:D8:4F:C9:40:18:A3
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:cff::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:06:53:b8:da:f0:ca:90:4a:b3:32:2e:f4:f3:4d:93:f7:0f:
         2f:4d:5c:2c:8f:c6:08:16:20:75:ae:68:2b:4d:9e:f3:36:96:
         1f:92:33:cd:c1:67:5f:1f:14:4b:50:5d:77:f2:dc:07:41:87:
         d2:cb:6e:62:1c:a2:5a:1a:73:cf:ca:d3:29:5a:65:06:92:03:
         8b:37:2a:24:5e:8a:93:f4:65:71:d1:9d:6a:7f:0a:38:88:d2:
         4b:82:0b:86:f8:fa:cd:a8:07:97:8f:55:22:4a:41:33:2d:9d:
         c5:13:66:70:a3:19:3a:4e:15:4d:81:b9:f8:09:a9:fa:04:14:
         e5:9e:5a:aa:2d:86:cd:ae:d2:e6:da:62:49:90:7a:e4:fb:f9:
         70:94:fe:55:c1:8c:ec:4d:d9:8f:e1:3c:1c:68:0d:d5:af:eb:
         d7:49:b6:fb:2d:6b:37:38:c0:95:90:b1:f8:f0:39:28:4d:b9:
         31:75:7d:8a:91:95:e9:1d:b1:87:6b:96:11:c6:25:7d:41:03:
         c2:4a:a2:ef:c3:fa:c7:d9:45:72:27:2c:a9:b9:01:4a:12:07:
         c0:b3:fb:9a:de:19:83:97:58:46:9d:75:50:d0:aa:d3:0a:45:
         8d:de:36:87:97:22:64:0f:6e:6f:d6:06:21:6f:69:83:f0:23:
         37:e2:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:01:29 2024 by rpki-client on console-fra.rpki-client.org