Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          LbM/lhio8ehz4cSj7c3ND0vM0UKyF5aisyHwjS99PZE=
Subject key identifier:   32:4E:48:FC:53:DB:0B:E3:E7:2C:C7:8E:CD:3B:0D:E5:86:A9:F4:22
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       21FA531A29CEBD07F5458D9337B0ACCC8F34FD39
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:24 +0000
ROA not before:           Tue 04 Jun 2024 08:01:24 +0000
ROA not after:            Tue 03 Jun 2025 08:06:24 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f70::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fa:53:1a:29:ce:bd:07:f5:45:8d:93:37:b0:ac:cc:8f:34:fd:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:24 2024 GMT
            Not After : Jun  3 08:06:24 2025 GMT
        Subject: CN=324E48FC53DB0BE3E72CC78ECD3B0DE586A9F422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:27:e9:a1:f9:31:18:7c:bc:94:49:6d:48:
                    ba:6b:88:d7:3b:8c:c8:16:d7:ef:3c:ab:c9:2c:1d:
                    d7:7b:af:d3:57:c6:bd:8b:e0:07:be:5a:41:83:f6:
                    92:69:dc:4d:2e:3b:14:f1:38:ce:f9:d1:ff:24:0a:
                    b0:cd:8d:ab:b0:8e:de:fc:e1:3e:89:89:40:91:21:
                    af:52:3e:aa:2e:81:29:72:ea:89:bb:37:f2:6c:7d:
                    77:b4:ea:62:f5:60:cd:38:44:e7:dd:24:f6:b6:80:
                    92:63:45:e9:12:3b:64:b2:be:03:e2:ea:e3:6f:96:
                    48:43:56:02:d2:a7:21:93:ca:4e:36:52:66:df:d7:
                    0d:56:31:9d:cf:5a:30:86:46:5c:9f:e9:e8:10:f1:
                    a7:0c:d9:25:47:3d:9c:6c:bf:5f:e7:26:bb:b4:2a:
                    54:25:5a:33:c9:67:27:63:aa:60:04:72:f4:70:d3:
                    b5:19:4e:03:eb:59:b2:fa:6a:63:bd:c5:fb:c3:46:
                    3d:68:8f:12:35:c8:9a:42:bd:89:4c:1b:3b:b0:83:
                    d3:25:84:fe:3c:34:56:dd:c6:aa:3c:fd:6d:cb:92:
                    1d:04:91:11:ce:ec:66:d0:fc:67:f1:6f:82:18:d5:
                    fa:27:eb:b9:1e:2a:8c:4e:d4:dc:76:15:68:4b:67:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4E:48:FC:53:DB:0B:E3:E7:2C:C7:8E:CD:3B:0D:E5:86:A9:F4:22
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f70::/44

    Signature Algorithm: sha256WithRSAEncryption
         6d:a0:2c:77:66:89:48:71:8e:16:b8:b9:41:23:3b:2e:a4:ee:
         2b:9f:f8:72:5f:e8:91:98:c9:da:70:b8:b5:14:dd:21:4f:ba:
         7a:db:df:87:ed:6e:6c:c6:a4:c0:7a:98:f1:3f:cc:ba:c9:4d:
         4f:2a:ef:7c:b6:11:4b:bf:5e:56:aa:52:c4:6a:fb:72:38:d4:
         5d:49:af:55:c5:44:58:e9:c9:12:70:38:cf:0c:99:95:62:e4:
         c9:96:cd:d4:09:50:9a:c0:cf:81:30:f7:42:2f:bb:f4:35:8e:
         78:5c:50:ef:a4:dc:5d:fb:dc:69:88:6b:e6:53:94:7b:ee:0c:
         dd:1c:69:a9:93:e8:92:da:43:13:ad:43:2b:71:da:14:c2:13:
         a8:ed:db:6f:9c:bd:f5:65:a7:bd:e3:73:59:36:d5:5c:e1:68:
         92:a3:74:3e:f5:1b:9b:b1:92:fc:12:cd:90:33:44:17:61:bc:
         12:d5:cd:e9:08:b7:31:e0:fc:31:76:01:58:1e:5f:0d:f2:37:
         73:52:52:5b:f5:35:cb:98:47:cf:51:dc:94:3b:2a:67:1f:22:
         86:00:e3:7f:44:c2:c6:7d:78:3e:8b:1d:19:79:34:ca:19:c3:
         1b:49:aa:3b:cf:76:15:0a:ba:0b:93:1c:e4:4c:15:64:ab:98:
         9b:10:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org