Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa
File:                     326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (raw, json)
Hash identifier:          Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=
Subject key identifier:   B2:F2:A5:02:7B:08:21:FA:4B:07:FA:38:99:36:1E:F4:E2:E8:83:C4
Certificate issuer:       /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
Certificate serial:       092BE9D89AC696B2BF794D39AF76F33D6D2EC1C3
Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa
Signing time:             Tue 20 Aug 2024 02:31:52 +0000
ROA not before:           Tue 20 Aug 2024 02:26:52 +0000
ROA not after:            Tue 19 Aug 2025 02:31:52 +0000
asID:                     51019
IP address blocks:        2a0a:6040:9f00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 05:10:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2b:e9:d8:9a:c6:96:b2:bf:79:4d:39:af:76:f3:3d:6d:2e:c1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576
        Validity
            Not Before: Aug 20 02:26:52 2024 GMT
            Not After : Aug 19 02:31:52 2025 GMT
        Subject: CN=B2F2A5027B0821FA4B07FA3899361EF4E2E883C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:47:61:ac:77:81:f5:14:73:4b:4f:6e:a2:8f:
                    1f:36:e7:e9:c7:37:70:c5:a0:ed:d5:7f:48:b0:3d:
                    e3:6b:24:ed:80:21:b0:f6:1d:94:b1:e7:9f:2f:97:
                    c9:ff:6a:3a:38:ec:ea:3a:cc:3d:48:be:fd:51:c4:
                    4e:23:b2:d1:1b:cf:c9:d8:ae:fd:23:d9:d6:00:d7:
                    6a:38:7d:f6:09:63:e7:c0:3b:dc:61:8a:47:13:63:
                    b3:da:f6:52:50:fb:cf:18:48:ad:92:bd:a2:af:e7:
                    f3:78:24:e8:3c:70:08:3d:2a:04:09:b2:03:bb:a8:
                    86:7d:22:4c:1e:fd:2d:c5:4b:11:ad:ba:11:e7:94:
                    84:49:b9:98:89:f4:d5:fe:d7:28:6b:f0:da:17:19:
                    73:05:b0:ae:47:1d:15:80:6e:a8:29:16:89:ea:7b:
                    14:31:c3:e2:21:aa:b4:e4:67:29:fd:58:7a:c3:c9:
                    d8:9a:9e:13:e2:cc:97:4b:9d:7a:cc:3b:e9:16:81:
                    d8:3d:a1:54:e1:6c:2a:fd:8d:a0:f9:ff:ab:2f:c5:
                    3a:c7:1e:e1:7b:30:df:60:42:d3:31:f1:e2:ed:08:
                    eb:fe:93:5e:3e:99:a7:49:fc:13:f9:22:b3:51:4d:
                    2b:2c:78:fe:65:d0:ba:e2:af:63:71:37:9c:79:10:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F2:A5:02:7B:08:21:FA:4B:07:FA:38:99:36:1E:F4:E2:E8:83:C4
            X509v3 Authority Key Identifier:
                keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:9f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:60:91:3d:8e:a3:06:e5:3e:a5:8f:55:50:22:d8:51:e5:5c:
         c7:cf:2d:f1:50:68:83:59:53:8e:d4:e0:8d:04:59:57:ad:71:
         e9:72:ac:59:17:7c:8e:77:7a:d1:95:fd:83:cc:47:05:99:3b:
         96:1b:78:22:5a:95:9d:af:c4:01:58:5e:20:a6:52:89:dd:c4:
         ac:6f:eb:89:17:88:2b:32:eb:78:47:88:05:4f:cc:42:00:49:
         43:7d:0e:5a:15:a8:11:a5:6b:56:e6:10:b3:3f:95:77:a4:23:
         30:01:b8:c7:a4:26:24:13:a3:dd:d1:19:76:d7:63:0f:db:e7:
         a1:b9:a2:75:85:34:75:25:cd:48:45:c6:4c:e2:c4:3d:65:3f:
         f6:8c:87:5c:ce:83:85:e5:80:3d:62:c1:1a:6d:1b:a2:f2:7c:
         e2:1a:d5:90:55:df:da:ec:ac:af:83:6f:83:ac:30:ec:92:02:
         21:6b:d3:f3:45:aa:46:30:27:76:88:f4:43:3f:73:08:8f:b8:
         c0:ef:21:d6:26:18:56:32:41:bf:e6:18:05:bf:f9:37:ca:8b:
         16:51:bb:f1:1b:34:22:bc:a3:be:d3:51:f0:be:aa:20:ab:30:
         3c:8c:2e:65:a3:a7:83:27:3f:9f:35:31:a9:c7:f6:cc:1e:06:
         ee:93:42:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:55:33 2024 by rpki-client on console-fra.rpki-client.org