Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          vfdl9n8P5v7Mc9ur+wyRaR08tksVFPmC0cYStpvJaig=
Subject key identifier:   4B:0D:AB:45:D0:28:5E:00:6C:E9:0B:C7:F3:E1:58:67:20:3C:DA:B5
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       7148C09760B5C9C7E546482AF840B583FB9A571F
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Sun 17 Nov 2024 03:38:55 +0000
ROA not before:           Sun 17 Nov 2024 03:33:55 +0000
ROA not after:            Sun 16 Nov 2025 03:38:55 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:48:c0:97:60:b5:c9:c7:e5:46:48:2a:f8:40:b5:83:fb:9a:57:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Nov 17 03:33:55 2024 GMT
            Not After : Nov 16 03:38:55 2025 GMT
        Subject: CN=4B0DAB45D0285E006CE90BC7F3E15867203CDAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:32:2b:6d:e2:3e:9f:a4:bb:02:fc:16:49:51:
                    d3:cb:d0:e5:52:ea:a8:6c:bb:f0:17:6e:00:30:93:
                    a0:97:e9:39:4d:93:2d:8f:ee:a9:f3:13:31:32:f3:
                    1b:7c:94:e3:5a:a1:c6:ce:4c:71:18:1a:8d:5e:05:
                    6a:57:2d:2f:d5:6c:85:7c:a8:3d:19:bb:a3:8a:54:
                    4f:67:9a:48:c3:c0:d3:29:78:3e:78:25:36:4d:40:
                    f7:2e:75:bd:4f:69:f2:2c:ee:d8:63:e8:ac:08:6b:
                    0b:93:82:f8:da:17:4e:ac:0d:10:55:89:77:48:7d:
                    3f:1d:ad:30:a8:f6:2c:18:bd:32:f8:b2:a9:4c:53:
                    e0:d7:4e:7c:24:14:65:00:43:ea:77:0e:4e:db:43:
                    59:03:d3:44:24:63:ac:bf:70:c9:c1:0d:69:5d:ee:
                    a8:a3:b0:fb:4e:e0:58:b7:32:df:7b:3d:cf:46:8f:
                    1a:20:ab:d0:dc:59:e5:a0:9a:31:c3:8b:12:1c:86:
                    67:5a:e1:15:75:5a:8f:cd:aa:10:7a:ee:1b:72:03:
                    47:62:8d:49:0b:ed:49:13:45:6c:2e:f6:b2:50:b8:
                    7f:3b:57:dc:e6:47:70:47:bb:b3:84:aa:d3:15:17:
                    4c:56:7b:10:c5:01:3b:69:00:20:a4:4c:3f:b5:9d:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0D:AB:45:D0:28:5E:00:6C:E9:0B:C7:F3:E1:58:67:20:3C:DA:B5
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         a2:fe:86:94:0b:4f:ed:10:4f:b8:7d:e9:cc:92:0c:4d:9f:6f:
         a6:89:35:60:40:04:e5:c3:12:82:49:e6:f4:8b:98:21:06:36:
         e1:05:a3:62:2c:ca:98:47:8d:d4:05:c6:b4:de:d2:ee:57:dd:
         e7:fa:dd:6f:3a:14:54:9f:cd:e9:6e:50:6e:85:ba:4d:bd:e7:
         95:b1:8b:04:56:d5:14:af:35:e4:9f:8b:53:0f:57:71:21:eb:
         a6:3b:81:2d:54:56:fd:0a:28:8e:67:ae:eb:c9:48:4d:c4:5d:
         bd:9c:e8:e8:83:f5:5e:41:86:a5:16:55:91:8f:9c:36:14:a1:
         13:d3:23:6e:79:fb:3b:13:c0:5f:3b:d5:1b:74:23:71:ab:a2:
         89:0b:96:68:fa:95:6f:66:24:9d:1a:d6:ea:ca:30:3f:8b:a2:
         46:d4:80:d4:82:49:2c:0b:65:f6:49:3b:ea:71:d6:58:69:66:
         3d:a8:ef:9c:fb:a5:b2:47:39:2d:61:6f:86:c6:0e:b0:ed:d5:
         9d:f8:24:68:5b:5b:75:82:e8:5a:b3:9e:8c:a3:60:d7:4b:28:
         e8:97:7d:87:7a:c0:91:53:cf:7e:0e:89:50:47:23:49:d0:da:
         3a:42:0f:52:a6:61:c2:ac:bd:31:8a:89:4d:4f:f6:dd:86:2c:
         13:9c:b0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org