Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          jPd2PIWqEhpbHqPzvZRYzMFR6G9zFHayHqczImBo3XI=
Subject key identifier:   45:20:86:26:BC:B1:57:B9:76:D8:43:5F:2A:95:CC:6D:87:BF:74:7A
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       44C2213DEF4ECB9E666D32EAEC8EBB23178F36B3
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:25 +0000
ROA not before:           Tue 04 Jun 2024 08:01:25 +0000
ROA not after:            Tue 03 Jun 2025 08:06:25 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8ea0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:21:3d:ef:4e:cb:9e:66:6d:32:ea:ec:8e:bb:23:17:8f:36:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:25 2024 GMT
            Not After : Jun  3 08:06:25 2025 GMT
        Subject: CN=45208626BCB157B976D8435F2A95CC6D87BF747A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:f9:e7:8d:b3:10:b5:9b:f6:78:14:ec:91:
                    0e:af:69:6d:16:e6:41:b4:87:ce:44:53:eb:aa:f7:
                    90:24:33:5d:8b:6b:68:3d:e4:84:34:36:ea:e6:12:
                    f1:f3:4d:d5:c7:3a:16:fa:aa:7e:cd:96:56:c0:76:
                    c4:1f:89:09:96:3c:cd:6a:a0:9a:bc:1d:3a:29:90:
                    98:13:3d:18:9f:5e:8f:5b:3e:e0:72:8b:31:a5:64:
                    72:32:03:0e:a3:e9:79:0a:e0:c7:9f:39:60:db:f2:
                    e1:5f:b6:0a:1d:93:e1:5a:9d:13:2a:bd:e4:ae:32:
                    70:f9:89:5b:92:1a:fa:3b:23:06:aa:86:6b:da:44:
                    78:49:a9:66:66:7b:58:01:c0:1c:04:29:b1:2f:3e:
                    eb:4d:5b:4a:52:84:f3:af:1d:0d:b6:4b:d9:4b:da:
                    95:ba:ec:53:87:75:fa:83:e1:b8:53:3c:84:dd:ef:
                    86:81:25:fb:1e:26:d4:2b:7a:9a:f1:08:cd:0a:50:
                    2e:f4:17:6d:08:75:c2:5a:3e:33:2f:48:10:4e:54:
                    00:23:b6:dc:f0:5f:e5:99:20:ed:6b:e2:3b:40:85:
                    df:af:7b:f3:40:63:02:74:3b:dc:2a:44:a6:9f:48:
                    17:2b:12:c2:c3:75:46:40:2d:af:f1:4b:ef:8c:11:
                    85:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:20:86:26:BC:B1:57:B9:76:D8:43:5F:2A:95:CC:6D:87:BF:74:7A
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8ea0::/44

    Signature Algorithm: sha256WithRSAEncryption
         09:92:4d:13:11:3a:1f:74:81:14:74:e6:38:20:b4:53:11:67:
         4f:c2:f4:06:cd:db:9f:23:b1:6a:3f:68:d0:94:80:16:21:14:
         f2:fb:f0:31:90:f3:75:fd:15:d0:2e:e6:f1:2c:c7:6c:d0:f6:
         ce:d2:ce:89:ca:d9:0b:82:41:97:a2:cf:03:e9:3c:d7:60:b9:
         8b:3e:5a:8a:4b:30:fa:10:8d:c7:eb:a1:ea:b0:09:54:e2:e5:
         06:23:ac:c0:6c:08:28:c3:3b:86:a6:50:b7:0f:0e:00:88:85:
         92:71:63:a1:b5:2a:10:97:b6:f0:72:b0:8f:86:57:d8:33:7e:
         ae:bf:1a:81:88:ac:18:09:5b:4f:1a:92:2f:75:a7:15:bf:22:
         fc:69:1a:9f:bc:1d:f9:b7:37:78:df:ac:34:4d:44:cc:b1:b0:
         54:f0:b9:93:3c:fe:38:79:c3:0e:10:ee:55:a0:31:8e:9b:dc:
         79:a2:ca:91:73:a9:31:d6:55:67:0b:a2:2e:07:16:58:93:0a:
         89:1e:71:6c:7d:e7:37:fe:d9:d8:75:73:ca:31:7d:b1:8c:62:
         91:ab:a1:83:6b:8c:8e:ae:a4:d4:9f:19:50:3c:55:66:66:b8:
         16:cd:e0:79:1c:e6:cd:52:c8:01:43:74:c9:64:ee:eb:f3:40:
         a5:27:8f:8c
-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIURMIhPe9Oy55mbTLq7I67IxePNrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1
NzU2QjE5QzAeFw0yNDA2MDQwODAxMjVaFw0yNTA2MDMwODA2MjVaMDMxMTAvBgNV
BAMTKDQ1MjA4NjI2QkNCMTU3Qjk3NkQ4NDM1RjJBOTVDQzZEODdCRjc0N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDK/nnjbMQtZv2eBTskQ6vaW0W
5kG0h85EU+uq95AkM12La2g95IQ0NurmEvHzTdXHOhb6qn7NllbAdsQfiQmWPM1q
oJq8HTopkJgTPRifXo9bPuByizGlZHIyAw6j6XkK4MefOWDb8uFftgodk+FanRMq
veSuMnD5iVuSGvo7IwaqhmvaRHhJqWZme1gBwBwEKbEvPutNW0pShPOvHQ22S9lL
2pW67FOHdfqD4bhTPITd74aBJfseJtQreprxCM0KUC70F20IdcJaPjMvSBBOVAAj
ttzwX+WZIO1r4jtAhd+ve/NAYwJ0O9wqRKafSBcrEsLDdUZALa/xS++MEYXFAgMB
AAGjggJeMIICWjAdBgNVHQ4EFgQURSCGJryxV7l22ENfKpXMbYe/dHowHwYDVR0j
BBgwFoAUSCTPmU/Yo281sD0axpx7T1dWsZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWNlY2ZkYzctNmRiOS00MjViLWFjYWUtN2UyMGZiZTZl
MTI5LzAvNDgyNENGOTk0RkQ4QTM2RjM1QjAzRDFBQzY5QzdCNEY1NzU2QjE5Qy5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzQ4MjRDRjk5NEZEOEEz
NkYzNUIwM0QxQUM2OUM3QjRGNTc1NkIxOUMuY2VyMIG1BggrBgEFBQcBCwSBqDCB
pTCBogYIKwYBBQUHMAuGgZVyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5l
dC9yZXBvc2l0b3J5L2FjZWNmZGM3LTZkYjktNDI1Yi1hY2FlLTdlMjBmYmU2ZTEy
OS8wLzMyNjEzMDM1M2E2NDY2NjMzMTNhMzg2NTYxMzAzYTNhMmYzNDM0MmQzNDM0
MjAzZDNlMjAzNTM4MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgXfwY6gMA0GCSqGSIb3DQEB
CwUAA4IBAQAJkk0TETofdIEUdOY4ILRTEWdPwvQGzdufI7FqP2jQlIAWIRTy+/Ax
kPN1/RXQLubxLMds0PbO0s6JytkLgkGXos8D6TzXYLmLPlqKSzD6EI3H66HqsAlU
4uUGI6zAbAgowzuGplC3Dw4AiIWScWOhtSoQl7bwcrCPhlfYM36uvxqBiKwYCVtP
GpIvdacVvyL8aRqfvB35tzd436w0TUTMsbBU8LmTPP44ecMOEO5VoDGOm9x5osqR
c6kx1lVnC6IuBxZYkwqJHnFsfec3/tnYdXPKMX2xjGKRq6GDa4yOrqTUnxlQPFVm
ZrgWzeB5HObNUsgBQ3TJZO7r80ClJ4+M
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org