Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          1Z3KnSHAtzj/eRxYKUB1Ez4GM/okPJ8NL2ugJD6hNl8=
Subject key identifier:   B2:FD:3D:B3:11:52:11:83:92:46:F9:02:54:33:E1:A4:CD:E4:85:49
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       036C6DA983748232513C4E2D74D9EE804F03AE95
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:26 +0000
ROA not before:           Tue 04 Jun 2024 08:01:26 +0000
ROA not after:            Tue 03 Jun 2025 08:06:26 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e00::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6c:6d:a9:83:74:82:32:51:3c:4e:2d:74:d9:ee:80:4f:03:ae:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:26 2024 GMT
            Not After : Jun  3 08:06:26 2025 GMT
        Subject: CN=B2FD3DB3115211839246F9025433E1A4CDE48549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7d:4b:cd:ec:6e:c5:f4:46:53:4e:72:38:6f:
                    d8:c9:a1:06:9a:62:fe:03:73:4a:fe:b4:b6:f2:1f:
                    c7:74:88:88:81:61:7f:21:bd:c6:71:b0:12:ce:07:
                    a1:cb:41:b3:67:67:54:0d:f1:3b:c1:8e:44:b0:5b:
                    0b:48:e9:90:32:02:0e:b1:e5:6e:62:a9:57:bf:1a:
                    af:50:bf:28:b4:87:ae:00:b3:fe:56:b8:46:a2:84:
                    4b:40:2e:b3:ff:df:19:26:f8:4a:6b:32:84:13:02:
                    58:bc:bb:4d:36:bb:7c:57:33:80:41:01:fd:e5:af:
                    f5:7c:4f:12:df:e4:84:17:46:bb:83:5b:e1:e5:6c:
                    c6:75:8b:18:e6:f4:ec:df:c3:fb:65:91:8b:9f:5a:
                    d9:ba:95:a0:7c:cc:7e:fd:19:c8:67:39:bc:2f:44:
                    2c:68:70:00:8b:a7:ac:1f:3f:d8:cb:5f:14:02:9c:
                    5c:bc:79:d3:5c:97:ef:eb:63:da:79:31:1e:1c:7f:
                    cd:cb:af:82:a4:69:70:00:cf:d0:f2:61:3e:56:65:
                    64:81:c9:75:79:52:f9:07:e1:6c:c4:f6:bf:5a:78:
                    1d:a0:35:c4:98:cf:24:13:1e:01:e9:d3:1b:b0:99:
                    c2:b3:4e:c8:e0:f1:4a:9b:8d:3c:3c:9f:bf:7e:aa:
                    60:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FD:3D:B3:11:52:11:83:92:46:F9:02:54:33:E1:A4:CD:E4:85:49
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e00::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:17:4f:ca:55:b7:33:41:9e:06:72:02:f9:cb:4a:9c:44:6c:
         9c:c0:e0:ec:75:0a:38:c0:67:b7:e8:5e:5c:b6:c3:da:a8:76:
         65:09:16:6d:69:be:8d:d0:ef:5a:01:84:e4:b4:e6:d5:39:90:
         58:01:00:3a:b2:cd:3f:98:5b:84:bb:af:45:ce:06:c0:b4:e1:
         77:8c:84:e4:bc:2e:59:1e:ee:fe:6c:7d:aa:ca:f9:5b:72:d7:
         41:78:90:da:b7:c2:45:03:1b:f5:9c:2e:34:58:2c:04:57:8f:
         e7:fc:2f:f9:30:a2:c2:a7:8e:db:c7:89:1c:33:33:da:cb:bb:
         6e:f1:f5:17:f8:3c:9f:33:ed:55:07:cd:3f:a3:3b:55:45:6f:
         89:d6:53:e1:93:5c:93:2b:f9:70:44:58:46:e4:ef:27:af:d0:
         52:ad:11:41:7f:38:3b:71:b1:2f:dc:53:0b:5c:a4:2a:a1:53:
         ed:b1:68:bc:c6:01:9b:79:2a:a1:33:fe:c4:18:3a:89:33:51:
         d5:98:96:b0:8b:fd:23:41:6b:b2:d3:b4:2d:33:7e:00:4e:b5:
         85:70:46:e8:80:4d:88:e9:31:e4:6f:04:2f:6c:22:21:23:2f:
         05:d7:25:81:52:2c:45:48:00:25:de:32:29:f2:a8:4f:fb:3c:
         a2:86:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org