Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          VUaWN5Hr9XE1FQcLJMnDoaZDScPCT+Tqxj2PjSvWgM8=
Subject key identifier:   39:55:51:E8:45:41:51:FA:CA:E5:71:65:93:C9:75:1A:7A:F4:FA:03
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       36A94136ED8E53BD56ADD90601DCE048D3B07AE7
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:26 +0000
ROA not before:           Tue 04 Jun 2024 08:01:26 +0000
ROA not after:            Tue 03 Jun 2025 08:06:26 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f50::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a9:41:36:ed:8e:53:bd:56:ad:d9:06:01:dc:e0:48:d3:b0:7a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:26 2024 GMT
            Not After : Jun  3 08:06:26 2025 GMT
        Subject: CN=395551E8454151FACAE5716593C9751A7AF4FA03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:c6:ed:a0:d2:51:6d:95:af:06:9e:68:61:
                    c9:45:0c:b2:12:6d:68:84:ec:29:15:a5:89:05:27:
                    91:83:0e:bd:ba:0b:32:0b:c4:b5:a3:15:f1:be:c4:
                    f0:a8:6a:e3:e6:56:51:06:02:a2:83:da:ea:4e:c7:
                    7d:be:d1:8b:c5:36:ec:92:20:3b:90:6b:d5:3e:54:
                    ed:0f:f7:77:83:ce:b8:86:c1:8f:b8:2c:3f:b8:a1:
                    d8:6c:f7:d2:7c:09:85:3d:bb:d6:1c:a9:dd:c2:fc:
                    48:af:01:a0:9c:07:62:1a:ec:c8:ce:b8:dd:19:3a:
                    17:df:ce:27:af:e6:b0:67:26:fe:e7:b6:46:95:ea:
                    b5:a4:66:bc:77:4f:8a:8d:01:41:c8:95:fb:f6:e8:
                    d8:b3:fe:c5:07:77:13:63:f7:a6:4f:b6:cd:86:ed:
                    e6:21:6c:17:71:6c:16:42:bc:76:9c:7b:e6:c1:32:
                    19:32:91:8f:c8:c6:63:5c:26:49:e9:c6:93:d8:71:
                    3d:bf:46:e0:b0:a6:88:4d:2b:4c:00:d6:3a:92:53:
                    8e:bf:94:c1:15:0e:fb:4e:5b:50:3e:18:7a:b3:8f:
                    81:73:46:d2:18:db:51:8f:97:96:50:4e:e9:6e:11:
                    ae:ca:58:e3:c2:05:fb:95:16:87:2d:4f:7a:0a:6d:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:55:51:E8:45:41:51:FA:CA:E5:71:65:93:C9:75:1A:7A:F4:FA:03
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f50::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:ef:89:f7:52:a2:52:80:6a:72:d7:f5:bc:4a:9c:65:9a:
         2a:2e:39:0e:5d:aa:c0:70:3e:49:90:ff:fb:c3:35:d1:50:29:
         ff:79:e1:1b:71:03:b5:6b:13:90:71:db:78:b9:5e:0c:c5:41:
         42:0a:76:52:34:cb:8d:22:97:c0:5a:bd:ec:71:d2:33:c0:0d:
         c1:28:cf:5a:9c:de:93:47:3b:8d:ba:7d:86:59:f6:7e:4e:63:
         f5:a8:7f:a1:00:3c:ae:4b:f5:98:cb:1a:2e:f0:ed:43:ef:50:
         14:1e:d2:8e:6d:2a:22:70:b0:4e:7b:c9:20:28:8b:b8:06:d2:
         51:a1:16:1f:a9:a4:f5:45:d1:68:9a:19:88:6a:65:9f:cc:ff:
         fd:6e:79:bd:c4:59:de:46:1a:57:6e:e9:1f:6a:5a:0c:c7:77:
         59:18:1c:3d:85:77:f6:9e:1e:d7:f3:8b:82:1c:d1:fc:c4:f3:
         01:67:27:71:3c:9c:19:be:a9:94:e7:4d:08:ac:91:17:e7:15:
         6a:20:00:a1:9e:1a:c4:bb:8c:54:90:dd:0f:24:1a:b8:6b:d0:
         63:06:1f:13:e7:45:3f:12:70:b7:94:b7:6c:40:0e:02:29:78:
         cc:3a:95:0e:43:6b:36:9b:1c:08:42:50:c7:aa:4d:e4:79:f0:
         33:f1:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org