Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa
File:                     326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (raw, json)
Hash identifier:          wGBqAzu0M+mLqVLFFdIyUacIzJo2wxLiPXDa+r545ew=
Subject key identifier:   1D:5D:81:F6:E4:34:9D:6B:9F:03:20:75:F0:25:14:10:2A:7A:F5:E6
Certificate issuer:       /CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
Certificate serial:       08002EDAB37C7912B4D6F366823E115A6E02B842
Authority key identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa
Signing time:             Tue 16 Apr 2024 20:18:39 +0000
ROA not before:           Tue 16 Apr 2024 20:13:39 +0000
ROA not after:            Tue 15 Apr 2025 20:18:39 +0000
asID:                     211151
IP address blocks:        2a0a:6040:db00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:00:2e:da:b3:7c:79:12:b4:d6:f3:66:82:3e:11:5a:6e:02:b8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
        Validity
            Not Before: Apr 16 20:13:39 2024 GMT
            Not After : Apr 15 20:18:39 2025 GMT
        Subject: CN=1D5D81F6E4349D6B9F032075F02514102A7AF5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:ec:96:65:7a:2f:a5:f0:c8:71:96:dc:ae:
                    4e:4d:a7:8c:67:e8:e6:44:3d:9a:15:2f:68:f7:ad:
                    ac:ff:26:d5:51:63:44:f8:a4:80:d4:66:03:21:a2:
                    4f:42:b8:94:e2:2b:ef:4f:b2:88:60:13:01:01:1c:
                    90:54:f5:15:ba:1a:b5:6b:9f:e5:63:8a:b2:9d:6d:
                    46:8c:bf:cd:ea:2a:72:5e:df:1f:75:c9:6c:6e:14:
                    0d:2e:23:74:bf:03:28:1f:2f:c8:a5:b8:a3:91:31:
                    01:f7:23:89:de:a2:ef:e5:c7:5d:a7:e4:50:ca:89:
                    b6:f6:4a:0f:c2:e2:97:58:af:b3:1d:a1:4e:5e:1a:
                    5f:eb:d7:bd:e7:26:5c:a0:10:21:9e:19:8c:a3:dd:
                    1d:6f:8d:aa:73:4b:4a:f6:f2:5f:df:76:99:cc:6c:
                    ec:fb:7f:e6:83:8d:3c:15:06:4f:a8:2d:98:88:6d:
                    4f:25:5b:22:6b:bc:a4:8a:52:ce:62:60:b8:6b:22:
                    c3:f6:c0:83:86:cf:52:ea:9e:3d:69:25:06:a7:0a:
                    4c:6c:00:78:d1:cb:02:cd:d6:30:24:35:97:5c:64:
                    04:39:4b:79:d1:a4:47:7e:26:5a:29:ec:d3:5b:c3:
                    83:5c:3e:bf:35:3e:17:d7:69:33:87:e3:a3:ee:66:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5D:81:F6:E4:34:9D:6B:9F:03:20:75:F0:25:14:10:2A:7A:F5:E6
            X509v3 Authority Key Identifier:
                keyid:23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:60:d6:12:88:6f:d9:52:c9:62:5f:80:1d:b8:5a:9f:63:65:
         39:df:18:cd:52:f6:af:91:9e:a8:a1:61:ca:83:55:af:ee:d7:
         49:97:ca:ac:fa:8e:ba:5c:4f:7b:08:fe:d0:97:5a:46:de:6e:
         be:4e:4b:93:4b:e3:fe:b6:42:a8:7d:f3:45:a9:98:18:a2:37:
         49:e7:f0:84:11:2a:59:4a:85:84:e1:1d:c9:48:c8:86:18:f1:
         0a:75:c1:c8:48:db:3d:0b:5a:a3:b0:a5:dc:1a:b5:1c:82:95:
         c7:f5:e9:7a:0c:d1:0b:39:d6:be:39:07:64:38:3e:e4:b6:b9:
         5c:ea:6d:65:8b:fc:02:3f:8a:ef:dc:b2:78:1d:b0:80:72:93:
         04:1d:bf:88:78:aa:88:67:a6:d4:70:68:b8:d2:60:02:29:9e:
         15:58:e9:ad:10:bf:7e:14:ee:8d:f1:b3:22:74:18:b5:95:40:
         31:7d:ea:89:9b:b1:b6:d1:19:64:9a:67:40:88:87:09:f7:fa:
         26:54:83:d4:1b:c9:29:0c:e8:2d:ca:00:b5:84:ff:53:dd:76:
         b4:97:2e:eb:75:a9:f5:54:f0:00:74:9c:a4:ac:45:53:b6:ed:
         b3:0b:74:ba:c1:b3:a8:39:c9:df:3a:7b:36:a4:4b:ba:ff:22:
         ca:a9:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:53:33 2024 by rpki-client on console-fra.rpki-client.org