Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa
File:                     326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa (raw, json)
Hash identifier:          h14IWMJlehamAlqzcYLGM+yp97jSJGV6NsTr5SmbRgU=
Subject key identifier:   E9:91:CA:E8:BD:D2:A5:4D:C3:CD:1E:E4:45:52:17:B0:81:6C:AE:FF
Certificate issuer:       /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial:       035DE581CC5EFE821DBF291721F228A6940EA186
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa
Signing time:             Fri 08 Mar 2024 19:00:28 +0000
ROA not before:           Fri 08 Mar 2024 18:55:28 +0000
ROA not after:            Fri 07 Mar 2025 19:00:28 +0000
asID:                     216455
IP address blocks:        2a05:dfc1:8500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5d:e5:81:cc:5e:fe:82:1d:bf:29:17:21:f2:28:a6:94:0e:a1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
        Validity
            Not Before: Mar  8 18:55:28 2024 GMT
            Not After : Mar  7 19:00:28 2025 GMT
        Subject: CN=E991CAE8BDD2A54DC3CD1EE4455217B0816CAEFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:57:35:b3:a6:a9:5f:de:70:b9:4a:19:b2:
                    44:e2:80:72:2d:e8:2b:3c:78:9f:c6:ae:9e:e6:5d:
                    8c:96:47:64:be:97:88:0f:94:b4:1c:59:d0:aa:d8:
                    f1:b0:f6:c9:18:b5:91:e9:a4:74:bf:66:4e:be:e6:
                    4c:45:26:cc:70:0c:cb:86:59:96:e7:c0:be:24:e8:
                    30:01:89:33:ea:b1:78:5a:c7:60:45:43:8a:6c:ae:
                    f4:d2:47:06:e7:ef:d6:27:4c:e4:11:90:86:31:64:
                    d3:14:ad:ec:7c:2a:ad:3b:da:23:43:dc:3a:8e:c6:
                    a1:dc:67:6a:88:05:2f:33:4d:8f:4d:e8:b0:9c:f9:
                    8b:c1:fa:41:97:b8:28:b9:3c:16:cb:4b:52:e7:e5:
                    32:2e:db:df:1c:19:fc:d1:64:55:ce:db:22:cb:a4:
                    f1:61:dd:ae:ed:33:26:44:b5:6a:6f:46:49:c6:a5:
                    10:3c:19:17:b7:ea:0e:27:24:a4:43:c3:49:50:0a:
                    d2:4d:dd:13:e9:d2:93:b5:68:21:80:09:4b:ab:d8:
                    68:95:5c:08:e6:61:35:0d:b4:ad:d6:00:e6:a2:f5:
                    08:14:b0:19:21:16:32:f3:c1:81:bf:df:f8:1c:2b:
                    bc:ad:07:4f:ca:05:09:7a:46:69:f5:08:a9:c1:0a:
                    28:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:91:CA:E8:BD:D2:A5:4D:C3:CD:1E:E4:45:52:17:B0:81:6C:AE:FF
            X509v3 Authority Key Identifier:
                keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383530303a3a2f34302d3430203d3e20323136343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:ee:45:ec:04:70:b8:0b:a0:f5:d8:7e:18:cc:2d:6a:fe:
         e0:e2:ee:80:cd:9a:52:be:0a:b7:db:19:3b:f3:00:8f:c0:46:
         00:b4:99:f0:10:a5:78:42:ea:68:58:ce:8f:a4:d3:a6:46:56:
         21:e3:50:5e:4d:5c:8e:40:e2:d3:0e:08:46:64:ad:ff:60:06:
         09:ff:41:da:32:16:e1:6a:26:cc:83:90:a5:81:27:2c:44:6c:
         db:12:94:fa:1a:10:3b:39:4f:8b:23:2a:6b:58:74:30:c0:37:
         04:e9:ec:36:be:80:60:10:ed:8b:7d:31:d7:ea:a5:7e:b0:db:
         c0:38:21:f2:9e:b7:33:81:6a:ed:a5:94:3c:70:5d:e3:48:30:
         88:24:12:cd:5a:c4:67:3f:17:05:3b:29:31:9a:87:a2:5c:ec:
         46:f4:4e:55:23:b1:1d:49:47:6e:41:d6:d6:76:1a:aa:9c:aa:
         95:95:22:25:de:b7:8a:11:00:b7:dc:99:64:73:04:40:16:33:
         97:30:d2:62:90:c8:db:4c:bd:fc:ca:6e:b3:ea:9b:36:b1:b4:
         18:53:23:93:c8:55:6e:fb:1d:5e:3f:d1:98:6b:c2:61:d5:c9:
         3d:76:4a:82:7d:a4:65:d3:31:f4:77:71:cb:23:76:4c:a3:e9:
         4a:ee:0d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:17:59 2024 by rpki-client on console-fra.rpki-client.org