Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          CI2trAO5tY7xWETG/nEdmZBLg2xb/bS4UECfuMJO6Gg=
Subject key identifier:   C8:33:4B:30:F2:7B:90:42:50:B9:15:39:B8:B0:17:B9:B9:C7:21:C9
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       59030B24415D7F766E5E906E6E354D77B6225EB4
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:24 +0000
ROA not before:           Tue 04 Jun 2024 08:01:24 +0000
ROA not after:            Tue 03 Jun 2025 08:06:24 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:03:0b:24:41:5d:7f:76:6e:5e:90:6e:6e:35:4d:77:b6:22:5e:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:24 2024 GMT
            Not After : Jun  3 08:06:24 2025 GMT
        Subject: CN=C8334B30F27B904250B91539B8B017B9B9C721C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:e9:75:e0:e9:08:a5:4a:58:bc:56:9e:45:
                    82:a1:4c:45:6c:65:cd:28:e9:6b:ea:16:d0:4d:4e:
                    50:5a:7b:2b:ef:c0:ea:7d:b6:9f:9b:c4:ce:63:8d:
                    a8:76:08:5f:28:c0:9b:a6:08:f9:cb:a2:18:42:7a:
                    fb:75:94:ba:8d:9c:72:53:1b:b3:19:fb:85:4b:5c:
                    a4:89:22:30:80:93:df:d8:ae:2a:32:63:c8:ee:86:
                    f0:5b:10:ee:bb:a3:e0:ad:07:7e:b8:67:28:d2:22:
                    a7:2a:32:70:d6:a9:30:74:c0:e5:df:b1:20:7d:09:
                    ca:dc:6d:8d:f5:26:69:9a:08:85:1b:55:55:f5:07:
                    f5:79:ae:5b:b1:5c:d1:6e:b4:06:af:e5:d6:c2:4e:
                    27:2b:85:60:c9:ed:71:53:8e:34:cb:aa:75:ba:ce:
                    b6:fe:c1:a6:5d:26:fa:2e:1d:ec:6c:eb:c5:73:83:
                    4d:79:02:8a:43:08:80:7a:ac:8e:e8:72:01:83:36:
                    88:15:be:20:4d:91:e0:c1:2f:3d:4e:f6:ac:a2:12:
                    b7:7b:6a:12:87:c9:20:73:60:00:15:e9:a7:f1:d6:
                    31:a0:27:e6:a9:ca:ca:bd:39:55:6b:12:cb:96:cd:
                    08:56:9b:68:6e:29:c3:6c:84:15:37:a3:3c:19:f1:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:33:4B:30:F2:7B:90:42:50:B9:15:39:B8:B0:17:B9:B9:C7:21:C9
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f10::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:db:76:da:dd:55:70:1a:89:dc:c6:4c:7e:8e:16:ba:8f:c7:
         db:35:89:9a:f8:cb:b3:3a:e4:92:4a:61:0e:09:9a:07:65:05:
         43:cd:85:b1:8b:c9:90:09:a9:89:19:be:40:dc:98:56:b3:e0:
         2f:df:a2:0c:51:a0:09:94:69:b1:6d:7d:73:b1:eb:ed:12:c8:
         53:06:84:0c:de:10:74:fd:f5:ee:3d:8f:97:6d:34:54:80:d1:
         f3:73:0e:c3:91:f4:79:43:22:40:74:a8:27:df:3e:99:7d:e4:
         30:0b:86:ab:d1:38:da:cf:38:a3:c2:24:de:a8:0c:f8:4f:8a:
         ea:99:37:95:7f:e2:a8:4a:48:26:0f:ca:0c:fa:6e:33:d6:e2:
         76:87:16:ed:92:4f:cb:aa:74:56:59:e2:86:34:c4:40:f9:7b:
         48:96:c8:fa:0b:ad:b2:42:db:58:ed:b6:7b:31:3f:66:f4:30:
         fb:70:d2:d0:62:21:5c:74:9a:1e:83:4e:f5:60:70:7b:a1:f3:
         42:11:32:2b:51:7e:db:1f:d0:cb:4b:3e:71:d5:62:fd:fe:78:
         43:13:5a:10:2d:5a:d6:6b:a8:b1:89:77:74:e6:67:10:3b:4c:
         9e:cd:7b:a6:a9:14:04:40:ad:1d:1b:ea:bf:61:1b:7e:a4:2c:
         94:ff:e2:dd
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIUWQMLJEFdf3ZuXpBubjVNd7YiXrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1
NzU2QjE5QzAeFw0yNDA2MDQwODAxMjRaFw0yNTA2MDMwODA2MjRaMDMxMTAvBgNV
BAMTKEM4MzM0QjMwRjI3QjkwNDI1MEI5MTUzOUI4QjAxN0I5QjlDNzIxQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5yul14OkIpUpYvFaeRYKhTEVs
Zc0o6WvqFtBNTlBaeyvvwOp9tp+bxM5jjah2CF8owJumCPnLohhCevt1lLqNnHJT
G7MZ+4VLXKSJIjCAk9/YrioyY8juhvBbEO67o+CtB364ZyjSIqcqMnDWqTB0wOXf
sSB9CcrcbY31JmmaCIUbVVX1B/V5rluxXNFutAav5dbCTicrhWDJ7XFTjjTLqnW6
zrb+waZdJvouHexs68Vzg015AopDCIB6rI7ocgGDNogVviBNkeDBLz1O9qyiErd7
ahKHySBzYAAV6afx1jGgJ+apysq9OVVrEsuWzQhWm2huKcNshBU3ozwZ8awPAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQUyDNLMPJ7kEJQuRU5uLAXubnHIckwHwYDVR0j
BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz
NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzU2NjMxMzAzYTNhMmYzNDM4MmQzNDM4
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgXfwV8QMA0GCSqGSIb3DQEB
CwUAA4IBAQDI23ba3VVwGoncxkx+jha6j8fbNYma+MuzOuSSSmEOCZoHZQVDzYWx
i8mQCamJGb5A3JhWs+Av36IMUaAJlGmxbX1zsevtEshTBoQM3hB0/fXuPY+XbTRU
gNHzcw7DkfR5QyJAdKgn3z6ZfeQwC4ar0TjazzijwiTeqAz4T4rqmTeVf+KoSkgm
D8oM+m4z1uJ2hxbtkk/LqnRWWeKGNMRA+XtIlsj6C62yQttY7bZ7MT9m9DD7cNLQ
YiFcdJoeg071YHB7ofNCETIrUX7bH9DLSz5x1WL9/nhDE1oQLVrWa6ixiXd05mcQ
O0yezXumqRQEQK0dG+q/YRt+pCyU/+Ld
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:50:20 2024 by rpki-client on console-fra.rpki-client.org