Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          g9XSa+hkGR+O8hAd/ooNghahZ8wNAt5ZKRdKoKrGQPg=
Subject key identifier:   93:D8:FC:43:5C:B4:C1:9B:33:AD:5D:28:A2:10:10:FC:EB:F2:77:19
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       6F47002F979E03748DC48DDF135E9733A642D4A3
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:24 +0000
ROA not before:           Tue 04 Jun 2024 08:01:24 +0000
ROA not after:            Tue 03 Jun 2025 08:06:24 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:47:00:2f:97:9e:03:74:8d:c4:8d:df:13:5e:97:33:a6:42:d4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:24 2024 GMT
            Not After : Jun  3 08:06:24 2025 GMT
        Subject: CN=93D8FC435CB4C19B33AD5D28A21010FCEBF27719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8e:da:35:57:67:ea:d9:07:11:ce:fe:82:63:
                    5f:b4:c0:21:ba:10:3a:08:b5:58:4d:d2:b8:e8:8b:
                    78:9f:40:0c:0a:9e:ab:9d:5e:80:16:74:58:d5:3a:
                    05:c7:29:b0:7a:84:90:52:9d:7f:7e:d7:68:7c:78:
                    23:2e:22:8e:b0:9d:19:57:0a:31:1f:b1:cd:16:9e:
                    0c:94:f0:e6:f9:4d:c6:1a:ce:3b:f2:03:68:9d:01:
                    9a:dc:88:b9:38:d7:e7:97:75:4e:1b:57:3f:49:8e:
                    5d:72:28:04:b7:02:a1:48:6c:a0:5c:56:c6:d9:44:
                    ba:6b:53:0d:ca:26:4a:a8:c9:a3:59:cc:27:d4:fb:
                    30:c3:83:a1:c7:d7:85:76:12:63:a3:12:09:d9:88:
                    df:91:de:09:c4:a0:30:bd:b4:ef:47:9c:76:d7:c3:
                    74:3a:a3:75:c9:bf:c3:83:e5:79:69:f0:49:13:b4:
                    7c:2b:7f:e7:72:73:68:24:a6:1e:14:f1:e7:f5:55:
                    5d:da:ea:9d:55:e7:26:f4:da:9b:c2:d9:8b:b1:7d:
                    c7:5c:44:57:5d:db:60:51:ee:37:b1:1e:ac:14:66:
                    a2:5e:60:aa:cf:c4:28:cb:d0:7a:12:e6:72:c0:59:
                    e0:98:42:f7:eb:23:e4:36:51:f2:c2:9d:de:9a:96:
                    ac:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D8:FC:43:5C:B4:C1:9B:33:AD:5D:28:A2:10:10:FC:EB:F2:77:19
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e10::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:6c:e1:7e:d1:5b:24:df:cc:2c:4e:be:0d:39:af:16:11:40:
         02:ff:48:9f:0c:6e:4d:09:c8:c0:9a:26:0d:22:60:e7:51:a3:
         b5:ec:17:ac:35:76:18:3e:86:a4:e7:e5:a5:63:a2:38:43:8c:
         82:ef:7f:d4:04:e1:3c:a6:56:c7:9e:82:09:06:01:44:2d:e5:
         96:c1:00:76:4f:c1:ed:48:1c:48:83:74:57:eb:2c:5b:0b:91:
         91:1c:f2:31:ed:2f:53:a8:af:fb:f6:59:5b:8e:3c:73:23:4a:
         5e:f2:da:fa:10:bb:46:8c:9f:8f:17:a4:a7:08:df:08:11:dc:
         81:9a:09:60:02:ad:ac:b7:65:65:5c:4a:a6:75:e3:fe:c7:f5:
         44:af:ba:2d:21:fb:a7:14:dd:10:23:4b:7e:1f:c2:ef:06:2e:
         d1:c2:90:c1:e3:64:e7:4d:ce:57:c9:23:6c:c9:7c:09:5b:a6:
         58:8f:ad:6b:e7:a5:98:43:22:6f:1f:5d:5f:1d:d2:81:5a:d9:
         ac:07:bd:8d:b2:a0:b6:2e:92:e1:82:89:4a:6f:c3:77:a0:2e:
         75:e1:50:4d:e2:8b:a6:aa:12:07:6f:9b:10:6d:a0:5a:a3:67:
         6d:dc:9b:0d:47:a4:4f:76:07:c3:85:b8:b6:a8:04:6e:55:5c:
         50:7b:c0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org