Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383531313a3a2f34382d3438203d3e20323136343535.roa
File:                     326130353a646663313a383531313a3a2f34382d3438203d3e20323136343535.roa (raw, json)
Hash identifier:          Lfg3mHt7cy+TUJoGs7HICBQr97boLuR2prHw+KIv6RY=
Subject key identifier:   84:A8:C3:C3:D6:B0:F6:E8:28:98:02:57:CC:7A:03:34:2A:98:E2:E9
Certificate issuer:       /CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
Certificate serial:       542C37CB3A4A2276C18153875A739165B8014055
Authority key identifier: 13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383531313a3a2f34382d3438203d3e20323136343535.roa
Signing time:             Sun 28 Jul 2024 00:31:23 +0000
ROA not before:           Sun 28 Jul 2024 00:26:23 +0000
ROA not after:            Sun 27 Jul 2025 00:31:23 +0000
asID:                     216455
IP address blocks:        2a05:dfc1:8511::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2c:37:cb:3a:4a:22:76:c1:81:53:87:5a:73:91:65:b8:01:40:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1305A50FEEC042C917D8EF2D77D1D2448848C0F9
        Validity
            Not Before: Jul 28 00:26:23 2024 GMT
            Not After : Jul 27 00:31:23 2025 GMT
        Subject: CN=84A8C3C3D6B0F6E828980257CC7A03342A98E2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:69:37:8a:7a:8a:4a:58:f8:cc:ae:e7:8d:
                    cc:3b:65:96:a3:9b:57:17:9d:0a:6b:b8:21:57:58:
                    ef:99:52:da:77:17:0b:35:05:96:3f:25:a1:65:78:
                    c4:07:bc:ab:91:b6:e7:34:11:64:b5:fe:eb:ea:82:
                    4e:1f:cc:db:db:8a:d9:dd:8e:02:37:87:94:63:a0:
                    d6:cb:2c:e0:17:f0:80:e7:e9:e1:cb:c5:17:a5:b9:
                    f7:91:ff:7c:61:c8:d4:1b:3a:8a:43:5c:2e:e3:cb:
                    ed:4a:65:34:70:89:c7:09:54:5c:73:73:dc:2e:d1:
                    2e:75:e4:78:38:78:1d:f4:1e:e4:e7:91:f8:b4:06:
                    94:af:2b:c5:61:2d:95:96:21:d1:b9:4e:7f:14:63:
                    d1:ba:4a:28:e7:17:38:56:01:95:fe:1a:13:55:97:
                    3f:ca:41:c5:44:0a:91:59:8c:dd:39:4f:f4:32:02:
                    70:fb:0e:2e:ee:08:e4:75:89:ac:3b:37:0e:bd:3f:
                    c8:a4:53:1b:9d:07:b0:2c:f4:bd:87:7a:5d:68:e5:
                    b6:6c:a3:47:29:24:32:b2:9d:a2:4c:fc:b9:78:b1:
                    fb:51:33:e2:e9:e0:98:c4:bb:5f:ce:3a:66:b8:e0:
                    b6:5c:03:c6:a0:6c:6a:e4:d9:7c:c9:ae:ad:7c:68:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A8:C3:C3:D6:B0:F6:E8:28:98:02:57:CC:7A:03:34:2A:98:E2:E9
            X509v3 Authority Key Identifier:
                keyid:13:05:A5:0F:EE:C0:42:C9:17:D8:EF:2D:77:D1:D2:44:88:48:C0:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/1305A50FEEC042C917D8EF2D77D1D2448848C0F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/1/326130353a646663313a383531313a3a2f34382d3438203d3e20323136343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8511::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:98:5a:8a:ef:34:53:a7:df:0f:9f:17:2f:ca:69:db:23:4a:
         c7:b8:57:c1:c8:05:dc:d9:8f:89:30:53:51:ce:03:82:ce:ca:
         f3:1b:5e:9e:71:71:51:1e:f1:93:14:b1:2c:78:60:eb:2f:cb:
         fb:64:f5:41:c8:a6:71:e6:c4:1a:d5:b4:b8:fd:d2:5f:9b:fe:
         0a:aa:59:0f:c1:22:b6:62:fb:fd:11:de:1d:31:ed:a4:b3:9a:
         9c:33:ea:32:d0:61:59:3b:69:b6:a7:b0:fc:88:31:22:fe:28:
         62:cd:52:3d:5c:56:e8:b9:7b:6f:49:55:01:57:88:84:da:91:
         c2:07:25:3a:8d:8a:03:5c:6c:c0:c7:d9:16:18:1c:5e:93:0f:
         45:19:97:e1:c5:4a:66:ea:8e:65:69:40:96:dc:a2:d5:48:9b:
         0f:19:cb:9b:30:08:8e:b9:6a:c1:cf:18:8a:25:ab:70:d1:0c:
         39:86:cd:79:75:82:dd:37:5d:03:47:e5:cd:e9:6b:c6:6d:6d:
         c3:b5:a4:78:1c:bf:c9:bc:6a:b8:d3:d2:f1:df:e1:63:23:c7:
         69:ff:87:8e:bf:4e:50:a1:4e:1e:21:ae:3a:25:af:24:9a:26:
         7a:5e:15:2a:a3:64:6f:c5:aa:1d:80:47:c9:6b:20:80:d4:3e:
         b8:e0:3c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:13:49 2024 by rpki-client on console-ams.rpki-client.org