Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          CHp/jTqTMOUjCGUpN4KSV4rsvvBtNkPd7BPzuM6nN+4=
Subject key identifier:   61:EC:03:FB:7A:E7:8C:25:0D:83:C1:3B:56:3B:F2:68:3D:93:14:C2
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       25E69FEFD7DB899D3F08CF6C42BAD2F46032A291
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:24 +0000
ROA not before:           Tue 04 Jun 2024 08:01:24 +0000
ROA not after:            Tue 03 Jun 2025 08:06:24 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e80::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e6:9f:ef:d7:db:89:9d:3f:08:cf:6c:42:ba:d2:f4:60:32:a2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:24 2024 GMT
            Not After : Jun  3 08:06:24 2025 GMT
        Subject: CN=61EC03FB7AE78C250D83C13B563BF2683D9314C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bb:f7:23:22:60:58:4d:ca:77:a6:be:81:7f:
                    a5:22:c0:53:5e:9c:38:8c:c1:47:8f:13:72:6a:70:
                    9b:97:cc:18:f4:63:39:a6:32:47:32:71:78:4e:d8:
                    02:e4:ee:e3:e1:85:b0:e4:a0:a9:a2:18:5e:d6:f5:
                    58:bd:33:21:c2:a3:44:20:59:9d:03:de:4e:7a:3d:
                    ac:7d:e9:b9:87:df:03:39:1f:05:5a:7c:61:cc:20:
                    ef:2c:44:0e:a0:7f:c5:3b:85:69:9e:a7:03:07:49:
                    83:aa:33:4d:83:f3:f1:02:9b:80:23:83:89:d3:66:
                    c8:13:d2:12:ef:77:1d:c5:58:21:a0:c1:8d:66:f2:
                    5e:b9:da:f4:02:4a:10:bf:35:6f:6d:0f:06:be:60:
                    82:80:47:56:f5:87:9f:cb:53:17:e5:80:72:de:9c:
                    23:a8:90:9f:4a:fe:f3:77:93:c2:59:23:78:0f:dd:
                    af:6b:56:72:c7:d6:f0:35:c8:5a:35:c6:2b:ef:cc:
                    ab:75:9a:14:98:c0:db:83:0d:d3:3f:72:02:96:8b:
                    06:99:96:bf:24:01:b6:35:9b:f7:8e:87:bf:a3:b9:
                    d5:61:03:a3:70:35:bc:b2:f2:e4:59:43:98:e8:2c:
                    fd:1e:af:82:13:dc:fa:1a:cf:e6:3e:a0:b6:65:7f:
                    86:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EC:03:FB:7A:E7:8C:25:0D:83:C1:3B:56:3B:F2:68:3D:93:14:C2
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e80::/44

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:e0:33:47:72:62:0d:bb:49:7c:a7:7b:86:19:f7:fb:2a:
         2d:e8:bb:22:e3:28:ae:c1:87:5e:ca:e8:dd:8e:8e:ec:32:74:
         e6:78:b9:64:a3:90:5a:67:cf:1d:67:1a:5d:f1:2c:36:2f:4e:
         bc:a7:f3:50:6c:d0:5c:3d:9b:06:1c:69:4d:0e:3f:1b:a1:8d:
         55:3f:4b:f2:a6:04:e2:89:13:ff:e8:63:f2:cd:56:98:c9:12:
         04:6f:dc:99:6b:c3:c5:f3:3e:e6:bd:12:24:91:db:77:6e:5a:
         81:14:fb:d5:6a:d5:11:1a:ea:a3:d2:45:b6:13:90:c0:dc:5d:
         a7:79:0a:36:17:6c:5c:9b:29:2e:e2:c4:61:d7:18:3b:73:41:
         2c:d3:1c:be:30:fd:01:62:c1:ee:24:da:52:c5:be:0f:50:5f:
         f0:2a:69:41:44:b9:ad:22:71:ac:e8:8b:6c:4e:3d:8e:11:e6:
         01:52:49:cd:f8:9a:cc:00:c6:0c:f1:f7:ca:d0:7c:19:7e:af:
         b1:8d:40:26:d2:75:1a:ca:a2:e4:42:f9:e2:cb:59:3b:b9:78:
         f6:31:8a:40:3d:36:22:df:3c:36:62:81:39:93:60:58:70:d9:
         5c:ec:0a:db:0a:15:1e:f4:ac:7f:8e:c6:fa:73:7c:f3:f9:9e:
         df:35:1f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org