Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa
File:                     326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa (raw, json)
Hash identifier:          NyjS0J9OSZc3HGajOO1nIcfJxB1Vx0HNeI0VD1YZ3IU=
Subject key identifier:   BD:FA:FF:81:FB:25:BA:F5:06:53:1A:6D:1E:15:4B:F3:85:F9:E7:76
Certificate issuer:       /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial:       26BB2315F50FBC0B92912F437C08B17AF64C071A
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa
Signing time:             Tue 23 Jan 2024 20:23:51 +0000
ROA not before:           Tue 23 Jan 2024 20:18:51 +0000
ROA not after:            Tue 21 Jan 2025 20:23:51 +0000
asID:                     215665
IP address blocks:        2a05:dfc1:916c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 04:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bb:23:15:f5:0f:bc:0b:92:91:2f:43:7c:08:b1:7a:f6:4c:07:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
        Validity
            Not Before: Jan 23 20:18:51 2024 GMT
            Not After : Jan 21 20:23:51 2025 GMT
        Subject: CN=BDFAFF81FB25BAF506531A6D1E154BF385F9E776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:49:10:91:18:7e:03:64:12:f3:08:c2:87:cf:
                    ba:50:d3:be:d8:6e:7e:a4:74:23:2e:81:ec:f3:e1:
                    3d:51:62:5b:81:2f:2a:80:aa:29:dd:20:1a:fd:ea:
                    ab:02:c7:23:f4:8e:bb:ed:9a:60:c2:3a:d8:9d:41:
                    e4:43:36:f6:27:1f:56:4d:87:e0:95:81:6e:c4:d2:
                    7e:bd:0e:b4:a0:b2:ec:ca:43:77:91:bb:c1:66:77:
                    b3:2b:a5:82:bc:dd:43:aa:29:7e:4e:49:f3:51:2d:
                    88:82:21:d4:f4:09:63:79:86:cb:6f:30:65:87:0e:
                    e1:bc:48:e6:ae:ba:2b:93:f7:17:6d:60:69:f2:b9:
                    2f:d7:37:94:fc:81:c0:17:a9:ec:5f:96:e0:43:5f:
                    02:ef:1f:2e:c2:a6:a4:f5:c5:1a:5b:91:8a:79:81:
                    ab:9a:da:e9:af:85:a8:5f:5a:38:8f:94:1b:df:49:
                    18:82:46:66:de:61:4c:75:7e:5e:88:b2:c6:5c:1c:
                    02:0d:68:55:7d:e6:a9:45:f5:04:73:6a:7b:d2:a7:
                    1b:01:5d:57:3c:a1:62:83:28:ce:f3:0f:54:25:c8:
                    af:65:42:08:6c:c8:32:e8:a5:b3:fb:c0:18:fc:53:
                    de:64:2a:96:8a:ed:f1:c7:d3:62:fb:6a:c3:ef:c4:
                    31:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FA:FF:81:FB:25:BA:F5:06:53:1A:6D:1E:15:4B:F3:85:F9:E7:76
            X509v3 Authority Key Identifier:
                keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393136633a3a2f34382d3438203d3e20323135363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:916c::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:fd:37:ea:c8:e6:6c:fb:5f:a7:70:23:96:c3:fb:e9:40:e4:
         c1:98:6f:81:5d:f1:b2:29:5b:c3:1e:ea:c0:4f:84:2f:08:9d:
         fb:4f:44:ec:3d:48:70:c1:e4:d2:fc:36:f0:c5:04:9e:c2:b4:
         a0:99:e6:de:3c:b1:aa:d7:8e:b2:29:da:51:a4:36:40:96:ba:
         47:ee:c8:8c:ae:ae:f0:92:75:c5:a1:0c:dc:b4:4a:1a:ca:e1:
         3b:13:ef:b9:78:4b:22:62:9b:d8:ee:a9:8d:fd:ab:6e:d1:63:
         fe:cd:2a:b4:90:30:3a:86:9c:e0:42:4c:7a:c8:45:2a:cf:a2:
         61:0d:2d:0d:52:17:4e:26:85:b0:ea:e7:dd:75:8e:ae:50:57:
         5a:12:6a:6c:2b:1f:c9:5b:8c:c3:8e:c0:ca:98:67:37:c8:a0:
         e9:23:ca:ee:25:b6:8f:c7:fb:17:e1:00:8a:7b:43:9d:d1:75:
         8c:07:27:d9:0b:a8:7e:14:50:d6:f3:ac:69:60:19:6c:9b:5a:
         46:98:12:9d:17:60:4d:bf:1b:68:92:e4:e3:c0:f0:bb:4f:c6:
         c6:f9:e9:14:39:53:19:71:99:6f:4f:39:dd:b6:a7:5c:5e:09:
         f4:ef:ca:58:29:70:52:9e:62:03:46:b7:be:e5:67:69:73:09:
         e9:57:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:39:44 2024 by rpki-client on console-ams.rpki-client.org