Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          PkkPy4ZC1uvLgq5pe5bwSoV2078t31rlgRftDtaSF70=
Subject key identifier:   99:B4:82:CD:49:64:66:43:3D:AD:EB:9F:60:81:75:46:E7:B0:F1:CA
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       2D59819FB507ADB2403AE3BE9594B5D8B6A98C1A
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:25 +0000
ROA not before:           Tue 04 Jun 2024 08:01:25 +0000
ROA not after:            Tue 03 Jun 2025 08:06:25 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f15::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:59:81:9f:b5:07:ad:b2:40:3a:e3:be:95:94:b5:d8:b6:a9:8c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:25 2024 GMT
            Not After : Jun  3 08:06:25 2025 GMT
        Subject: CN=99B482CD496466433DADEB9F60817546E7B0F1CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d4:b3:94:2e:b8:55:1d:5d:a4:43:8e:e1:f2:
                    28:d6:a7:c3:4f:fc:65:3c:1f:2b:0a:f4:b9:b5:d1:
                    a0:14:d1:24:e2:54:b2:d4:94:d8:05:2d:c0:e9:b5:
                    3a:5d:10:84:b9:a1:95:27:58:27:70:9e:36:ad:89:
                    04:37:0b:fd:09:d1:bd:9b:51:21:44:ca:86:76:19:
                    78:24:de:cf:f2:1a:87:98:e5:26:f7:16:a3:6a:bc:
                    c0:14:17:12:57:eb:0c:2e:7b:17:f9:de:c3:74:cc:
                    24:6b:84:76:58:5f:02:06:e6:90:63:63:86:87:07:
                    5a:4d:29:0e:6d:fe:07:75:7f:44:b9:ed:cd:bc:4c:
                    26:3d:b1:43:1d:2b:98:be:1b:9d:76:5e:d8:5c:50:
                    cc:9f:71:e9:e6:a6:16:46:45:80:e9:db:85:b9:83:
                    b6:4c:ff:9d:0c:bb:39:fb:e6:5c:4a:f6:86:ff:c5:
                    48:2f:3f:0c:eb:0b:c1:3e:04:91:57:94:9d:73:ec:
                    c7:25:97:9d:57:08:39:c5:bf:51:5b:43:69:70:85:
                    c7:80:57:27:47:1c:26:c5:b8:bf:be:67:0d:54:88:
                    32:74:a6:1e:f1:b5:de:40:35:4c:07:5e:56:01:7f:
                    fc:44:d2:9c:c2:c9:a0:75:29:15:dc:c8:81:31:05:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B4:82:CD:49:64:66:43:3D:AD:EB:9F:60:81:75:46:E7:B0:F1:CA
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f15::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:9d:3d:72:b3:34:41:18:a4:6b:9d:07:db:97:12:ef:1d:19:
         ff:4a:e2:d2:d1:89:bc:59:be:d9:4b:8e:97:93:5d:63:6f:f6:
         22:61:67:56:c2:ab:0e:84:d7:37:22:82:ef:23:8d:b7:5e:10:
         60:19:27:16:ee:50:2b:cf:6c:9f:ce:cc:8d:55:8d:af:8f:00:
         45:a3:07:49:98:53:b2:fe:9b:4b:a4:a3:42:84:0a:02:87:a6:
         f8:35:34:23:ae:35:da:73:32:59:d5:d2:34:a7:23:42:0c:58:
         a3:79:46:67:da:47:13:d4:4d:94:0a:62:12:07:37:5c:7b:cc:
         a9:ca:a5:41:42:66:62:a4:f5:82:8a:01:e7:04:71:a1:34:55:
         cc:2d:aa:4d:81:22:99:5c:8d:2b:77:8f:8e:71:43:f9:a3:c5:
         03:56:0a:05:c2:5c:3c:84:b3:d5:82:44:40:de:cd:06:74:6c:
         50:29:02:36:ea:c3:0e:1f:fd:79:d6:e4:fa:8b:fe:3f:56:12:
         97:74:08:eb:a8:f3:0f:9e:8e:34:4a:e1:7b:72:c9:1e:f8:1e:
         b0:a2:05:77:26:69:bb:c3:da:3b:55:ad:5b:6c:36:78:e7:65:
         66:34:7d:6a:80:53:1c:74:c7:28:79:87:41:52:f8:f7:b2:5e:
         86:d1:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org