Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          XPk2k9dsgjsxpPiSvqwJ4CNqJpsAAMLtunEw6Hp2t78=
Subject key identifier:   48:26:C9:CC:25:C9:DF:1F:C1:7D:6C:47:F8:E4:0E:3D:5F:BB:EE:50
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       68705101FBBF5E8626A6273BEAEF59425FC66CE7
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:24 +0000
ROA not before:           Tue 04 Jun 2024 08:01:24 +0000
ROA not after:            Tue 03 Jun 2025 08:06:24 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:70:51:01:fb:bf:5e:86:26:a6:27:3b:ea:ef:59:42:5f:c6:6c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:24 2024 GMT
            Not After : Jun  3 08:06:24 2025 GMT
        Subject: CN=4826C9CC25C9DF1FC17D6C47F8E40E3D5FBBEE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:8f:55:63:5b:09:73:be:08:70:96:dc:82:
                    7f:1b:63:22:b5:66:88:62:98:02:af:b6:43:fd:62:
                    31:3f:fd:f0:e8:d3:1e:7b:ab:e7:1a:43:58:72:74:
                    cb:af:6f:29:ef:be:38:39:ec:e8:16:f6:3c:51:03:
                    e7:e2:35:da:20:69:e8:e1:63:0b:47:5f:30:1c:b0:
                    18:50:83:f9:e7:92:d9:37:6c:62:3b:9a:03:aa:75:
                    76:1a:32:30:5f:76:7c:ae:73:8e:a1:9b:fc:ea:90:
                    3b:94:f9:2e:52:41:35:21:f7:72:31:9b:87:60:49:
                    32:39:a3:4b:23:c2:28:88:9b:f3:d3:01:de:f6:00:
                    d1:b3:c5:a1:92:10:30:57:97:af:1c:10:3b:bd:fd:
                    46:a0:81:86:9e:df:de:4b:e5:8a:c6:22:27:d7:b0:
                    7e:dd:71:10:28:99:9a:6d:a0:bc:ca:d0:c7:40:27:
                    20:15:c1:ae:26:84:40:3f:de:14:58:28:43:14:f9:
                    9b:ba:89:3f:9d:1a:d1:45:0e:fb:6b:9d:ed:45:02:
                    5a:aa:73:64:43:66:47:74:bb:ec:dd:b8:6a:1c:2b:
                    7e:0d:3b:ab:b5:fc:87:9e:23:e4:a4:41:7a:e4:b9:
                    ad:55:ea:f1:fd:08:ed:83:33:5e:ef:cd:c6:02:d0:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:26:C9:CC:25:C9:DF:1F:C1:7D:6C:47:F8:E4:0E:3D:5F:BB:EE:50
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:36:3d:71:eb:a9:46:e2:5d:9c:24:94:6c:69:15:c6:8b:cd:
         a6:27:c5:a8:bd:0c:53:61:86:06:69:3f:dc:66:80:81:0c:4f:
         e4:77:40:b5:63:2e:db:2b:c0:25:50:9e:bd:bf:97:1b:4a:73:
         58:14:04:61:ac:b1:da:ae:cd:05:f1:4f:9b:d7:e1:5a:36:fc:
         8b:6c:ad:77:20:21:3f:58:32:33:bc:f2:6c:ec:d6:67:f9:75:
         be:54:d1:13:22:70:81:55:65:9c:3e:26:19:d7:3f:aa:68:a0:
         3d:f9:78:b2:86:84:a0:cf:33:12:39:36:b5:51:fd:97:cb:d0:
         34:b5:25:75:4b:eb:23:27:61:46:08:11:cd:08:e8:35:f9:90:
         00:03:1f:95:36:d5:8a:b9:45:17:fc:85:48:5d:e9:84:79:3d:
         72:2c:0c:a8:28:09:ad:14:a8:d9:2d:e5:13:8a:a3:26:3f:67:
         cd:23:67:1e:c1:c0:0b:2d:20:13:30:d0:6c:58:56:c9:21:08:
         04:88:72:8a:71:6c:7b:d8:3c:3c:29:b7:b7:cd:b6:a8:28:17:
         a9:7d:f3:e2:8b:9a:a4:1e:c5:7e:cb:47:59:65:ce:e1:0e:1d:
         3c:0e:90:6e:a9:42:44:e4:fa:e1:c1:40:8a:75:dd:3b:7f:5d:
         7f:10:b1:a8
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUaHBRAfu/XoYmpic76u9ZQl/GbOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1
NzU2QjE5QzAeFw0yNDA2MDQwODAxMjRaFw0yNTA2MDMwODA2MjRaMDMxMTAvBgNV
BAMTKDQ4MjZDOUNDMjVDOURGMUZDMTdENkM0N0Y4RTQwRTNENUZCQkVFNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbY9VY1sJc74IcJbcgn8bYyK1
ZohimAKvtkP9YjE//fDo0x57q+caQ1hydMuvbynvvjg57OgW9jxRA+fiNdogaejh
YwtHXzAcsBhQg/nnktk3bGI7mgOqdXYaMjBfdnyuc46hm/zqkDuU+S5SQTUh93Ix
m4dgSTI5o0sjwiiIm/PTAd72ANGzxaGSEDBXl68cEDu9/UaggYae395L5YrGIifX
sH7dcRAomZptoLzK0MdAJyAVwa4mhEA/3hRYKEMU+Zu6iT+dGtFFDvtrne1FAlqq
c2RDZkd0u+zduGocK34NO6u1/IeeI+SkQXrkua1V6vH9CO2DM17vzcYC0ET9AgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUSCbJzCXJ3x/BfWxH+OQOPV+77lAwHwYDVR0j
BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz
NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMwMzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8AMA0GCSqGSIb3DQEB
CwUAA4IBAQB1Nj1x66lG4l2cJJRsaRXGi82mJ8WovQxTYYYGaT/cZoCBDE/kd0C1
Yy7bK8AlUJ69v5cbSnNYFARhrLHars0F8U+b1+FaNvyLbK13ICE/WDIzvPJs7NZn
+XW+VNETInCBVWWcPiYZ1z+qaKA9+XiyhoSgzzMSOTa1Uf2Xy9A0tSV1S+sjJ2FG
CBHNCOg1+ZAAAx+VNtWKuUUX/IVIXemEeT1yLAyoKAmtFKjZLeUTiqMmP2fNI2ce
wcALLSATMNBsWFbJIQgEiHKKcWx72Dw8Kbe3zbaoKBepffPii5qkHsV+y0dZZc7h
Dh08DpBuqUJE5PrhwUCKdd07f11/ELGo
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org