Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa
File:                     326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa (raw, json)
Hash identifier:          5mpJF+s6CqpqwSrSlttfU1GwfwEb1pV825oBZgzU96I=
Subject key identifier:   59:F9:45:AC:A4:E6:EA:3C:E5:19:DD:4D:FE:FF:DE:CB:0F:94:87:6A
Certificate issuer:       /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial:       4D722EFFA590D004445443FCC65EC7790A0BE616
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa
Signing time:             Sat 11 May 2024 14:14:42 +0000
ROA not before:           Sat 11 May 2024 14:09:42 +0000
ROA not after:            Sat 10 May 2025 14:14:42 +0000
asID:                     211431
IP address blocks:        2a05:dfc1:8000::/40 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 09:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:72:2e:ff:a5:90:d0:04:44:54:43:fc:c6:5e:c7:79:0a:0b:e6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
        Validity
            Not Before: May 11 14:09:42 2024 GMT
            Not After : May 10 14:14:42 2025 GMT
        Subject: CN=59F945ACA4E6EA3CE519DD4DFEFFDECB0F94876A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:db:e3:ca:9d:dc:c2:b6:df:7d:02:7e:d5:
                    94:13:b6:db:5e:d0:70:d0:f8:96:ce:cf:2b:dc:83:
                    0a:24:db:03:80:f1:23:31:e5:5b:52:d6:ec:91:7c:
                    dd:53:04:42:4e:e2:1a:24:72:33:55:f1:18:b8:fc:
                    5a:cb:04:2e:9c:d3:c3:dd:40:fb:d4:b7:d2:d4:98:
                    70:88:a0:e3:cc:97:c2:77:0f:93:cc:27:8c:8a:37:
                    e7:f3:37:0b:34:63:43:59:97:8c:da:3b:2a:8d:e6:
                    58:03:bd:a9:6d:81:1a:df:65:21:f1:c5:ea:5e:d7:
                    b2:58:f0:ab:8a:8c:12:fd:62:44:fc:ed:98:46:16:
                    55:0c:9a:58:41:c9:3b:6a:ea:6d:71:5b:14:cf:fa:
                    34:9d:7a:38:53:09:89:3f:ac:e7:e4:e6:e4:4b:c9:
                    81:a3:e2:26:50:1f:83:2a:79:57:ed:9a:9a:66:85:
                    14:76:a5:db:f8:53:07:96:c7:6d:3b:75:3a:aa:f3:
                    a1:22:c9:13:68:da:22:4a:8d:8e:04:1f:11:e6:f4:
                    f2:09:77:b0:37:62:f4:2c:b3:1f:55:37:f8:93:27:
                    ce:88:e9:6d:14:0d:77:f6:60:38:60:4f:29:da:39:
                    9c:75:cb:58:69:ca:6b:7c:66:a2:71:54:f8:e1:31:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:45:AC:A4:E6:EA:3C:E5:19:DD:4D:FE:FF:DE:CB:0F:94:87:6A
            X509v3 Authority Key Identifier:
                keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383030303a3a2f34302d3434203d3e20323131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:e4:34:ca:a9:2b:2b:47:91:d9:08:ef:b0:f6:2a:88:e4:5c:
         1e:db:0c:7a:60:04:a9:fc:a8:b4:d9:13:64:bb:a6:0d:4f:5d:
         f3:de:39:a8:66:55:d8:c0:cd:3c:cd:37:b8:52:b0:30:84:c5:
         d2:45:a7:b8:16:00:60:6a:98:eb:fe:b5:bc:2f:9e:42:5b:b7:
         2a:09:8b:b7:de:79:a8:93:39:0c:03:00:6b:74:a0:3b:8a:78:
         e1:86:2f:02:0e:cc:0d:1a:8a:c6:25:e1:db:6c:2d:20:27:08:
         e5:b4:c6:cc:0a:75:5f:38:31:9d:0a:41:f2:29:8a:b5:fe:f8:
         69:8f:74:a4:06:18:8f:d8:2c:93:e3:dc:e8:5a:1d:31:1f:38:
         3f:29:34:44:c1:63:af:1e:b5:54:2d:aa:6d:2b:7c:a1:26:9e:
         b3:d0:99:d9:ac:93:e5:5d:a4:12:27:96:a3:cf:a7:54:d9:08:
         83:a3:6b:17:a5:5f:e2:76:e0:95:6b:6e:af:da:d8:35:1d:2c:
         e7:1f:f0:43:69:7d:c0:06:66:34:f0:6c:c3:df:d1:15:4e:4a:
         ff:d5:0d:34:a7:61:ce:22:95:69:1b:16:fe:23:81:d6:4f:e6:
         88:05:2b:ad:b9:54:7b:9b:7d:5a:ae:3f:b2:f5:50:4c:e4:d0:
         bb:ef:9d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:06:33 2024 by rpki-client on console-ams.rpki-client.org