Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393138633a3a2f34382d3438203d3e20323135323830.roa
File:                     326130353a646663313a393138633a3a2f34382d3438203d3e20323135323830.roa (raw, json)
Hash identifier:          SR7XrQx3p3SosQYaDLORUu1Ba3qDV69RZH6Q+bd7ckQ=
Subject key identifier:   A7:FB:BB:82:49:CD:F1:8D:58:37:60:71:DC:2F:99:CC:1C:0F:31:2F
Certificate issuer:       /CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
Certificate serial:       205EA5051D071CE691B11C562669F2B58D4C3DAF
Authority key identifier: F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393138633a3a2f34382d3438203d3e20323135323830.roa
Signing time:             Wed 20 Mar 2024 09:32:10 +0000
ROA not before:           Wed 20 Mar 2024 09:27:10 +0000
ROA not after:            Wed 19 Mar 2025 09:32:10 +0000
asID:                     215280
IP address blocks:        2a05:dfc1:918c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5e:a5:05:1d:07:1c:e6:91:b1:1c:56:26:69:f2:b5:8d:4c:3d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76
        Validity
            Not Before: Mar 20 09:27:10 2024 GMT
            Not After : Mar 19 09:32:10 2025 GMT
        Subject: CN=A7FBBB8249CDF18D58376071DC2F99CC1C0F312F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:14:81:7a:08:8c:b5:e4:31:01:a2:5b:84:
                    7a:0a:33:27:56:ff:b4:06:25:1d:87:c7:c5:38:1e:
                    a0:84:be:3e:10:02:6d:3d:eb:90:d2:50:2f:b0:e7:
                    f0:69:da:07:76:12:bc:42:82:b6:97:db:88:b7:6f:
                    55:d6:f4:cb:48:dd:e0:28:cf:aa:b6:00:20:4f:48:
                    a0:b3:cd:30:38:d6:3e:08:01:35:42:53:53:40:11:
                    34:1c:16:35:20:ee:aa:23:f4:ab:b8:01:84:2b:bf:
                    dd:d5:0a:ba:05:1f:08:15:c7:90:1c:21:71:7c:84:
                    f3:11:8a:8d:04:75:5d:fa:22:af:dd:66:93:3b:44:
                    91:7f:92:f7:c8:16:0a:4b:d7:19:d1:5a:45:d9:5f:
                    1e:77:22:44:50:31:e0:38:d2:1b:1e:ec:31:65:6e:
                    98:c6:02:cd:04:ad:c7:fd:01:81:8d:29:c9:32:b8:
                    cf:fb:6b:ba:3f:cb:e4:50:32:67:74:64:a0:0c:45:
                    b5:2b:af:59:f3:7f:5b:2b:7f:aa:ff:b6:87:05:44:
                    1b:46:9d:2e:f2:26:e9:56:04:15:68:45:e1:2a:3e:
                    2e:21:dd:de:d3:f8:10:57:32:db:70:85:71:f9:0d:
                    fd:1a:57:ee:6b:79:65:a0:fe:3d:92:e2:92:b1:b8:
                    06:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FB:BB:82:49:CD:F1:8D:58:37:60:71:DC:2F:99:CC:1C:0F:31:2F
            X509v3 Authority Key Identifier:
                keyid:F7:37:D8:1B:FB:EF:FD:EE:C9:EC:32:B7:B8:64:11:2D:E0:5E:7B:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/326130353a646663313a393138633a3a2f34382d3438203d3e20323135323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:918c::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:07:5f:af:d5:40:44:af:28:d9:40:2b:5a:ee:b2:fb:b3:
         31:90:64:b9:e9:49:dd:b2:40:10:0d:94:e9:12:73:35:cc:7a:
         48:e0:bf:38:39:35:5d:f7:2a:9c:2e:f4:32:a2:a9:fc:f1:9c:
         13:88:e0:6b:c9:d5:6d:a4:69:bd:98:f2:29:5c:e0:33:fe:c3:
         69:f1:62:44:ad:1a:53:4a:00:77:30:40:de:4e:7e:11:c9:a8:
         f5:50:5b:63:f2:88:a5:fe:16:87:8c:1a:2b:91:a9:9a:b3:0d:
         75:53:25:3e:5d:92:d6:c5:3a:f8:c4:83:f4:df:0e:04:a8:7d:
         83:de:13:75:4a:bb:a9:d7:15:7f:04:30:2b:00:cf:f8:2e:a4:
         47:e9:8d:aa:93:de:e4:59:0b:98:90:62:dc:26:9e:fc:04:06:
         f6:16:36:d3:a5:c0:43:8d:2c:8b:8f:06:72:d3:d6:92:e4:4f:
         03:4b:b7:b1:8c:5d:85:31:88:ef:c0:c0:5d:26:66:bb:0d:20:
         c9:a0:72:9c:e0:44:3b:f2:44:38:20:3b:6c:f2:12:fe:a3:62:
         81:3c:9c:32:68:bb:ee:2a:ac:54:67:00:4c:19:22:45:d2:0a:
         04:dc:74:d6:7a:59:ba:27:ff:1f:ac:cb:a8:32:83:9c:b1:7f:
         74:a6:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:09 2024 by rpki-client on console-fra.rpki-client.org