Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          Tgfrgar40d8idzFtgsgIHn77m2VnvSI9U8cDXGONvPU=
Subject key identifier:   99:06:59:FE:33:4D:3C:E5:76:BC:73:9A:B2:D7:60:31:71:7B:28:DD
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       6D2A56D39E1B33C59484D2F492C302283B60657F
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:25 +0000
ROA not before:           Tue 04 Jun 2024 08:01:25 +0000
ROA not after:            Tue 03 Jun 2025 08:06:25 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8e90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2a:56:d3:9e:1b:33:c5:94:84:d2:f4:92:c3:02:28:3b:60:65:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:25 2024 GMT
            Not After : Jun  3 08:06:25 2025 GMT
        Subject: CN=990659FE334D3CE576BC739AB2D76031717B28DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:53:00:18:a6:9b:80:31:f5:95:24:86:26:
                    63:87:10:b8:0d:4c:19:63:66:00:e0:05:f8:cc:d8:
                    11:d0:e8:1e:d8:c1:8d:1a:c4:91:68:ad:ec:56:b4:
                    94:e8:a7:09:4e:a1:d3:57:bb:37:f0:4f:16:e5:4e:
                    83:73:9b:21:ee:d1:ec:97:4d:d8:35:e1:f6:d2:02:
                    65:d3:8e:79:b3:9b:c5:4c:70:53:8b:93:e5:bc:5f:
                    80:18:01:a9:28:71:28:6d:21:1c:11:44:17:ba:72:
                    97:c4:34:44:47:d6:f8:fb:19:30:d1:56:eb:2c:52:
                    6c:0a:d9:0d:50:69:1e:ec:ea:45:d5:99:00:7e:77:
                    9b:5f:31:4e:a7:6a:dc:6f:f3:39:55:fc:02:e7:30:
                    85:25:d1:78:30:61:28:ac:30:b0:73:27:ff:23:09:
                    06:26:73:98:70:26:3f:0e:fe:8b:a1:44:3e:dc:76:
                    c9:f4:5d:9e:30:27:f2:cf:5e:93:48:78:81:bc:86:
                    41:fa:a6:a1:5d:82:35:b8:2a:4c:37:90:61:5c:a2:
                    14:ff:9e:97:ce:fd:7d:4e:a6:99:8a:ab:b6:7e:db:
                    ff:dc:af:0a:76:f6:70:77:f7:05:27:3f:54:33:cb:
                    02:b5:d9:26:42:60:c5:66:14:56:9e:b5:a4:6d:56:
                    2d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:06:59:FE:33:4D:3C:E5:76:BC:73:9A:B2:D7:60:31:71:7B:28:DD
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         95:da:4c:06:19:0f:dc:3d:81:c2:ac:b9:0d:7b:da:7d:7f:fe:
         11:99:52:85:2a:7b:22:e3:46:94:20:f5:e2:01:77:41:ed:98:
         8c:22:5f:aa:75:60:08:ef:1a:13:72:b5:7f:b1:c9:71:d7:e1:
         18:a8:ac:d1:60:29:30:ba:c5:af:4f:b4:b9:33:0f:77:bc:fa:
         18:d3:ff:57:aa:51:b9:ec:df:0e:ec:de:e7:6b:51:27:ca:74:
         c8:d0:49:b3:50:07:9a:2c:76:f7:d1:47:7b:51:48:8e:2b:6a:
         85:2e:2a:a9:c0:bd:4e:87:0e:bf:6f:32:30:1e:fb:20:87:23:
         27:d2:5d:40:31:c9:7a:12:fe:10:9c:a2:75:8c:1e:df:d8:2d:
         c6:cb:95:86:88:3b:dc:79:5a:77:61:05:56:c2:48:50:7c:b9:
         03:26:b6:a1:d6:70:db:a2:87:af:f5:dc:df:6c:e7:76:40:83:
         1b:9f:a8:3b:80:f7:4a:99:0e:a0:f9:e6:ae:72:82:1f:a3:0a:
         1d:df:a0:4e:8d:96:14:33:b2:59:de:97:32:49:17:f5:cc:f7:
         42:91:86:8f:cb:68:83:e1:36:d8:1a:04:18:52:ef:12:ab:78:
         43:8e:3b:9b:40:4c:e5:b4:fc:15:19:50:d0:6b:62:fd:ba:e1:
         69:7c:73:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org