Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          Cy9GyosMFjfQy/vod1txAY20bDIBcoY1BrR6/Kpwb/w=
Subject key identifier:   C1:7D:7E:5C:43:41:9F:E4:14:BD:DC:FF:00:12:AC:73:00:E4:73:73
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       3349F5567118B10DB9FEEBDDD92236A350A23707
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:26 +0000
ROA not before:           Tue 04 Jun 2024 08:01:26 +0000
ROA not after:            Tue 03 Jun 2025 08:06:26 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:49:f5:56:71:18:b1:0d:b9:fe:eb:dd:d9:22:36:a3:50:a2:37:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:26 2024 GMT
            Not After : Jun  3 08:06:26 2025 GMT
        Subject: CN=C17D7E5C43419FE414BDDCFF0012AC7300E47373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:2c:20:c1:5c:e2:39:98:a6:2b:9a:f0:d8:
                    aa:bf:c9:4c:c9:d9:c8:8a:71:c9:7e:76:8e:f5:de:
                    90:9a:5a:e8:b4:92:7d:34:5b:d1:28:81:6f:0b:f8:
                    0f:4e:c5:5d:41:14:56:70:23:f0:10:6a:57:78:ff:
                    75:03:e3:f2:ec:7a:1d:ef:cd:e8:2d:6f:9d:d4:49:
                    e6:48:7e:32:52:e9:1c:e3:6a:c6:bc:ba:d2:b0:e6:
                    d3:3b:89:b6:30:28:91:50:49:0c:6e:9b:80:96:8a:
                    3a:50:0d:0a:88:cf:71:0f:bf:c0:b0:ee:8b:99:f3:
                    e2:de:d8:9f:ef:36:c7:1c:de:5d:37:fd:3b:83:7e:
                    6c:d3:63:ab:ab:87:f9:78:4c:e1:cb:5f:b2:58:ba:
                    88:3b:68:05:71:9c:33:a6:fc:23:30:be:04:96:2b:
                    ea:de:76:61:0d:80:8a:e9:c7:be:60:25:4d:54:a5:
                    24:7b:b4:0c:a0:4b:01:09:b0:45:26:02:4a:cc:6e:
                    00:48:55:44:94:b0:21:00:48:62:7c:ae:54:55:0d:
                    a5:f9:3f:08:4f:11:26:c1:ef:58:ec:35:04:1b:22:
                    99:e1:c2:46:ce:32:50:d1:7c:72:9f:0c:38:10:1a:
                    1a:50:28:d2:12:3f:da:8b:48:d2:4a:f3:12:5f:a8:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7D:7E:5C:43:41:9F:E4:14:BD:DC:FF:00:12:AC:73:00:E4:73:73
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e20::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:0c:83:cc:dd:1d:13:7b:ae:b1:c0:87:5f:04:97:5c:83:ff:
         45:b5:06:bf:65:75:80:b7:fc:44:e3:a8:d2:43:f9:1e:b5:19:
         bd:57:21:0c:2d:cd:47:c5:65:55:0a:b0:de:e9:bc:e3:0b:d1:
         d9:41:66:25:16:ca:46:3b:1f:2a:ae:3b:03:a6:7b:c4:c6:6e:
         ec:54:f7:a0:b7:c6:03:18:b5:5a:1c:97:d0:f2:df:07:59:6e:
         eb:d4:dc:80:4e:6f:cd:07:28:08:03:46:8e:09:2f:e4:5d:bb:
         93:b6:ac:0d:cd:fe:64:bb:41:b3:d2:f0:05:de:ab:f4:71:0f:
         9d:4c:4b:32:12:a0:19:c8:d7:ea:57:cc:a8:93:5f:2b:fc:25:
         07:ce:cb:ba:12:ef:5e:a8:b2:7b:ee:50:82:66:cb:c0:c7:06:
         c5:21:79:44:25:2f:a4:d5:3e:f9:62:db:a9:a6:43:05:ce:67:
         0c:c9:b0:dc:28:ab:34:f2:61:3b:e7:cc:35:34:fe:ba:97:69:
         c4:5c:c0:2e:50:04:17:2e:ea:85:16:cb:19:43:4b:66:3f:ce:
         a3:db:4f:3b:d5:46:8d:b6:96:17:3c:5a:5f:d8:cf:3d:29:7a:
         59:59:a5:ca:42:00:60:51:7b:c2:57:b8:14:35:e0:a3:af:88:
         e3:86:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org