Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          Z7UmNc3Gv5gVjdr5GEZSa1WMeyYlH2/3EFP7QkcQfYs=
Subject key identifier:   1F:58:81:7C:20:7E:82:87:62:B6:3B:07:7B:BE:43:07:8F:1E:C5:4C
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       40E6642AB760D22348EAF711A8CA7AA253EBF8D5
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:24 +0000
ROA not before:           Tue 04 Jun 2024 08:01:24 +0000
ROA not after:            Tue 03 Jun 2025 08:06:24 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f60::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 22:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e6:64:2a:b7:60:d2:23:48:ea:f7:11:a8:ca:7a:a2:53:eb:f8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:24 2024 GMT
            Not After : Jun  3 08:06:24 2025 GMT
        Subject: CN=1F58817C207E828762B63B077BBE43078F1EC54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:87:1b:d6:59:20:dc:2a:4d:3e:2e:3d:84:f7:
                    0b:34:20:25:3a:35:74:0c:04:47:d1:6b:4b:33:5c:
                    6d:94:80:50:cd:7a:86:a4:c8:e6:33:84:e5:a0:f7:
                    38:6b:a7:f2:6b:5a:7b:11:19:72:27:df:21:fb:c3:
                    27:51:96:86:9a:ca:c2:4d:30:f0:33:b1:b9:12:00:
                    74:2d:a3:f0:e7:94:f2:14:4c:fc:b2:5f:dd:6a:3d:
                    2a:b5:2f:94:ff:46:89:14:37:07:09:dd:2c:05:a5:
                    88:5d:35:55:50:df:18:87:5c:a7:3d:2b:5b:6e:7f:
                    e7:ad:8d:fb:45:9c:a2:74:7d:7b:1f:de:f0:e4:73:
                    e7:ca:44:13:e1:b8:ee:b5:3a:64:15:e8:04:31:93:
                    5e:3e:0d:a9:00:e8:6b:44:0e:49:a6:0f:10:17:26:
                    e9:a0:ce:4a:38:16:7d:19:c4:5e:36:16:38:66:e5:
                    1e:45:a0:6f:ea:cc:1f:de:aa:ed:e8:73:f1:a7:ac:
                    9b:da:08:f5:1c:a2:06:6d:87:57:b7:00:5b:1b:5f:
                    40:ba:ec:d5:3e:02:cf:77:9b:c5:bc:78:34:e9:25:
                    0a:2b:ea:83:0b:c3:66:0d:8c:2d:f2:bb:3f:e7:4a:
                    d7:6f:03:78:89:60:e8:95:2f:c2:0c:cf:32:f6:82:
                    4b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:81:7C:20:7E:82:87:62:B6:3B:07:7B:BE:43:07:8F:1E:C5:4C
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f60::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:cc:6e:a7:da:99:c8:ef:ee:c0:c4:8e:27:77:09:18:4e:
         d6:31:e0:c6:be:e4:e3:fb:43:13:bb:2c:3a:92:ae:a8:b9:c0:
         a3:d9:fb:bc:7d:35:4c:a4:96:f2:e6:2d:69:b7:3a:ae:88:a7:
         eb:1c:12:d0:fa:17:af:74:ae:28:cf:e4:f1:f6:ad:21:2b:ee:
         b8:34:a8:1d:af:55:34:94:ef:64:2d:34:6d:e9:d5:47:c1:49:
         d0:e5:3a:3f:2d:20:ad:00:92:7e:77:c3:b5:16:79:f5:c2:45:
         d9:84:f4:a6:44:71:e8:4b:47:81:62:ec:7e:43:a2:27:22:42:
         c0:ae:bc:c9:62:a4:70:a1:27:b7:97:78:97:7e:75:7f:75:b1:
         e9:6d:3e:00:af:06:1b:a9:82:2e:c3:c8:ae:30:35:47:10:93:
         d5:f6:0c:f1:ac:09:d3:52:04:ea:10:ff:4a:6b:67:f2:ea:72:
         21:1b:b1:0d:50:c4:ad:22:dd:8f:76:d9:c0:01:18:8e:23:06:
         05:91:a3:2c:e7:82:30:64:8a:4c:ee:26:3a:5d:8d:76:a2:ed:
         85:dd:03:04:67:bf:4a:ff:b2:34:f8:fc:78:f8:42:02:ce:35:
         ad:a8:68:2a:0f:e1:48:c2:7c:c8:f4:06:91:73:cd:96:37:3a:
         d9:fa:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 09:06:54 2024 by rpki-client on console-ams.rpki-client.org