Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa
File:                     326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (raw, json)
Hash identifier:          h8n4c/yMut+DwIceP5DlxAkZ1ZyaB0hDcKPZIDgCNzI=
Subject key identifier:   84:AB:13:DA:F7:19:CB:D8:5D:10:79:3D:A8:26:96:58:29:FD:6B:99
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       653FD2F485BE8FAD0407948CC349F4F2EAA83A1D
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa
Signing time:             Tue 04 Jun 2024 08:06:25 +0000
ROA not before:           Tue 04 Jun 2024 08:01:25 +0000
ROA not after:            Tue 03 Jun 2025 08:06:25 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:8ef0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3f:d2:f4:85:be:8f:ad:04:07:94:8c:c3:49:f4:f2:ea:a8:3a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Jun  4 08:01:25 2024 GMT
            Not After : Jun  3 08:06:25 2025 GMT
        Subject: CN=84AB13DAF719CBD85D10793DA826965829FD6B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bc:5b:34:b6:72:31:6e:50:b6:d7:f5:5f:59:
                    53:4e:f2:77:79:02:cc:e7:84:34:73:43:dc:3c:28:
                    fe:8d:cd:d3:31:11:c6:17:02:51:9a:2f:a1:a9:e9:
                    f0:ca:24:46:29:fe:0e:90:72:0e:74:0a:4b:4f:78:
                    ab:24:d3:6c:c1:f0:56:45:4b:0c:5e:2f:d7:29:d6:
                    dd:4e:48:b3:df:0e:04:37:3d:1c:66:ef:3e:7b:93:
                    a1:65:1c:9f:37:e4:91:36:5a:dd:6f:c6:f9:dd:82:
                    52:ad:f8:e8:5d:5c:92:4e:25:cd:7e:a4:f4:b3:08:
                    51:98:56:6b:e7:e3:1b:3a:d0:78:1b:2f:9d:8a:86:
                    62:58:c6:ba:f2:6b:0a:01:95:29:90:6c:a1:88:84:
                    9b:10:38:d4:f3:10:3d:f1:63:69:b4:22:90:27:d7:
                    f4:8a:79:b2:16:70:3f:c6:73:30:dc:44:ce:e8:06:
                    80:21:be:a8:4a:dc:ad:dc:53:28:f7:79:b1:f2:4d:
                    73:7a:f0:cf:4e:33:a2:ec:05:d4:b9:58:a3:57:26:
                    02:bb:d7:ce:e2:f0:65:19:99:fc:62:99:4c:0d:84:
                    94:99:41:27:82:17:bd:ff:98:30:27:4e:a2:cd:32:
                    2d:78:0a:f4:c5:dc:e4:14:71:65:98:66:97:58:54:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AB:13:DA:F7:19:CB:D8:5D:10:79:3D:A8:26:96:58:29:FD:6B:99
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8ef0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:b3:53:8b:a1:67:ab:28:2c:41:e8:a8:fb:e7:8f:8d:84:9b:
         31:30:5d:d6:73:bb:30:16:c0:d9:9c:80:21:2f:a1:23:a2:a3:
         c5:35:3b:08:39:5d:9e:db:4d:a3:64:cb:3b:77:96:5b:df:83:
         0b:53:0f:7b:9a:f3:63:50:3a:fc:b1:a7:e7:63:b7:4c:0e:8a:
         f4:78:78:9d:8d:27:a4:d9:e0:6f:c8:cd:5c:d1:e1:99:f7:08:
         1a:c0:9a:00:85:b1:43:a6:c2:6f:d9:1e:d5:e8:a2:62:49:f9:
         d9:c7:73:d6:67:06:4e:b3:09:c1:42:cb:7e:a4:0c:15:64:52:
         eb:0b:87:8b:09:e8:88:a8:7f:97:32:ca:19:39:8d:24:9c:bf:
         3c:66:55:30:b0:a1:f7:7f:77:4d:90:d9:f4:2c:80:c1:37:6f:
         9b:0c:1e:c8:cf:21:ac:13:19:97:00:81:00:f9:f1:17:7f:89:
         b8:68:cf:d0:03:17:50:41:70:a8:22:55:e3:d5:51:62:0e:33:
         09:58:bb:cd:b8:c8:74:95:21:b5:f7:0b:8f:2e:ed:35:d4:db:
         69:18:32:a2:5a:20:67:b9:78:4b:ea:58:0c:62:79:c1:d3:bb:
         a4:58:3c:43:39:8a:c8:29:5c:90:4c:0e:47:79:38:cc:65:5d:
         b9:c4:a2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org