Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa
File:                     326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          FI47MURWTFWikQVohyPC3i+m6GkNNvGpYuxpgU2LP/Q=
Subject key identifier:   1E:7F:18:C5:DF:65:5E:CE:79:44:C8:E6:09:C6:26:AE:F1:40:20:E5
Certificate issuer:       /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
Certificate serial:       7BEFF3AA81DB0416331E24A6388526491995B951
Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa
Signing time:             Tue 10 Sep 2024 19:15:17 +0000
ROA not before:           Tue 10 Sep 2024 19:10:17 +0000
ROA not after:            Tue 09 Sep 2025 19:15:17 +0000
asID:                     50755
IP address blocks:        2a0a:6040:b1f8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ef:f3:aa:81:db:04:16:33:1e:24:a6:38:85:26:49:19:95:b9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
        Validity
            Not Before: Sep 10 19:10:17 2024 GMT
            Not After : Sep  9 19:15:17 2025 GMT
        Subject: CN=1E7F18C5DF655ECE7944C8E609C626AEF14020E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4f:fa:2e:92:25:e2:3c:1f:bd:68:b2:92:de:
                    2a:d6:b3:aa:59:41:c1:db:19:d5:18:5c:67:01:fb:
                    ac:ef:25:17:df:75:9a:96:ae:25:00:6a:6d:86:d5:
                    7e:a7:aa:38:22:99:a3:0f:71:3c:6f:4a:e6:15:59:
                    3f:4e:08:bb:47:ec:6a:aa:36:1c:4f:dd:74:59:dd:
                    62:38:7d:56:21:06:4e:78:5d:be:7b:1c:f4:34:80:
                    1a:a1:07:e6:a8:da:75:4b:2c:b0:50:e3:6a:31:f0:
                    a8:6b:37:2f:50:0d:4c:ed:1f:32:7f:16:6d:d3:06:
                    7b:a0:7f:ce:a9:d2:9d:b8:5b:de:e6:cd:c7:a9:6b:
                    d7:04:cf:84:43:5e:15:fd:07:0c:cb:c1:9a:b2:b3:
                    68:79:c3:04:98:35:d8:3b:44:74:b0:45:e4:51:4e:
                    f5:eb:1e:0c:26:d0:df:7f:27:54:b6:58:9a:d8:0a:
                    24:4b:57:58:9b:a8:c2:0d:81:6f:88:8f:f8:b6:3f:
                    29:af:09:cc:9b:87:00:6f:c3:92:4f:47:ce:5d:ce:
                    9d:48:6f:b0:7c:0c:7a:18:76:99:ca:6b:6c:ef:98:
                    3e:32:a6:33:98:de:7a:3c:26:7a:96:82:5a:80:8c:
                    ca:0a:41:a1:74:71:58:e0:0e:a7:1e:07:81:df:3d:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7F:18:C5:DF:65:5E:CE:79:44:C8:E6:09:C6:26:AE:F1:40:20:E5
            X509v3 Authority Key Identifier:
                keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:b1f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:95:90:0c:48:ac:21:eb:35:47:a9:85:53:f1:da:05:38:ab:
         8a:9f:4f:05:02:54:df:3a:64:aa:76:88:c6:28:1f:6b:4d:2b:
         a2:c6:0b:0f:a0:9b:2b:43:ac:08:1f:46:70:1e:f5:68:00:b4:
         45:ba:19:4a:50:41:2f:9e:7c:9d:5a:5e:80:b5:f3:76:40:28:
         b4:a3:d6:26:5f:bb:dd:cd:11:63:52:71:fe:85:06:aa:47:c7:
         a5:83:d1:66:75:13:07:ff:b2:b2:8a:79:69:08:da:59:74:65:
         e0:15:60:bc:6b:a0:ec:81:cf:b3:a2:90:b7:8d:be:e1:59:48:
         e0:46:11:7d:45:f7:36:38:9a:04:40:11:1e:f2:26:3a:06:4d:
         15:9b:5b:d8:6a:b4:32:f8:16:5e:cb:eb:9c:0f:cd:85:55:f7:
         8d:7f:13:48:a3:32:69:7d:20:9e:3d:5d:33:d5:6e:25:d9:48:
         44:d5:cb:a3:ea:a4:ca:10:ba:29:f9:06:b6:f6:19:b7:d4:24:
         a6:9a:77:f3:4e:ba:51:9e:66:ef:75:ed:e2:41:9d:40:a3:7d:
         9b:fd:bb:c7:97:df:3f:70:b5:43:8e:1a:65:4d:6d:1e:fe:6a:
         8f:7e:a6:ad:5f:0b:78:e1:9b:01:61:72:5c:b2:ee:60:42:b6:
         36:a7:b9:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:58:16 2024 by rpki-client on console-fra.rpki-client.org