Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa
File:                     326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa (raw, json)
Hash identifier:          Opw+/zUrRL+edlMn6fP0gnUOGTdXKF6bVI9Gbetqyds=
Subject key identifier:   94:68:05:84:B3:29:82:10:B1:1A:AD:03:53:AD:51:5E:73:8B:3A:69
Certificate issuer:       /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial:       1F105A434F1332501A1A0094473B9D35C0CB0B4F
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa
Signing time:             Sun 12 May 2024 19:15:11 +0000
ROA not before:           Sun 12 May 2024 19:10:11 +0000
ROA not after:            Sun 11 May 2025 19:15:11 +0000
asID:                     212154
IP address blocks:        2a05:dfc1:8010::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:10:5a:43:4f:13:32:50:1a:1a:00:94:47:3b:9d:35:c0:cb:0b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
        Validity
            Not Before: May 12 19:10:11 2024 GMT
            Not After : May 11 19:15:11 2025 GMT
        Subject: CN=94680584B3298210B11AAD0353AD515E738B3A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:a8:a4:22:61:6b:1a:8c:ea:87:0b:88:42:
                    06:03:2a:83:61:e8:30:1c:97:6b:73:5f:a4:33:40:
                    50:42:39:61:9c:e4:c2:83:0e:ae:5c:8a:c6:8e:07:
                    e1:cb:93:65:eb:ae:48:09:6c:61:a2:5b:fb:43:de:
                    6f:45:6e:ab:e9:65:fd:2e:5e:21:93:bc:1f:4f:58:
                    e4:1e:04:b1:6a:09:f8:ae:1f:15:23:2d:2e:8c:a0:
                    84:ae:52:48:bb:5c:d4:1e:24:ea:5a:a3:7b:c6:2d:
                    25:20:da:c7:49:05:e9:8e:0d:db:5c:d2:26:13:ca:
                    f6:fe:4d:4d:7a:79:84:98:65:22:25:ee:27:5e:97:
                    48:dc:6a:3b:f9:89:05:82:b5:ae:c1:fd:0c:bb:a8:
                    e4:c5:0c:c7:ea:ee:e4:fa:4b:9b:df:a2:35:32:bc:
                    00:ee:e7:9f:93:1a:30:d8:75:cc:ff:32:b3:15:cb:
                    46:16:1e:3b:d2:25:ff:93:45:af:ad:70:12:95:f8:
                    c5:90:45:de:43:b3:74:a5:ee:fe:30:eb:38:80:9a:
                    1b:09:4c:c6:52:be:55:1c:86:89:1c:9f:8d:22:5d:
                    73:dd:01:fc:f1:9c:dd:62:83:43:62:c9:fb:b8:93:
                    c2:09:1f:ce:ce:62:af:43:88:56:f6:e5:ee:68:c2:
                    66:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:68:05:84:B3:29:82:10:B1:1A:AD:03:53:AD:51:5E:73:8B:3A:69
            X509v3 Authority Key Identifier:
                keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383031303a3a2f34342d3438203d3e20323132313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:fd:dd:48:4c:d7:b7:2f:07:47:b3:00:9f:09:99:7b:e0:
         11:ed:c2:24:42:02:54:ff:a6:5d:d3:c0:43:82:e6:e7:62:16:
         ec:ba:74:bf:22:3f:e0:ca:17:d3:48:ad:19:ba:a3:a8:e3:60:
         a0:3c:96:d7:d4:e4:f7:c9:b7:f0:8c:a1:4c:ae:6e:63:d5:91:
         f4:24:6a:77:3b:dd:c5:9a:c3:0b:3d:0f:11:fa:ad:bb:18:1c:
         6d:ad:b8:3b:f5:4c:dc:0f:42:03:b1:a0:f6:92:86:da:5c:fb:
         d4:47:73:85:9b:6f:40:1d:23:e4:2c:b3:45:b1:cc:2f:ea:8f:
         5d:7e:e6:28:8f:a4:c6:6d:2a:56:e7:44:8d:df:13:26:fb:6d:
         a2:1b:c3:e5:fb:ee:c6:8a:1c:ec:d4:86:d9:5b:48:4c:ca:ee:
         15:1c:1e:cc:be:53:37:fb:a9:81:ed:39:98:8a:e9:84:00:bb:
         d4:44:52:75:e0:06:62:8b:c4:5b:82:12:a7:45:f8:64:f5:69:
         49:d0:ee:49:b2:ec:d4:69:6d:e2:83:81:e4:86:e0:6a:a4:bc:
         97:c4:9b:43:41:22:81:6d:25:8c:5b:48:f6:82:f8:86:96:9f:
         46:0b:4c:b7:19:8d:83:5d:19:75:44:20:68:eb:3e:53:11:4a:
         a1:c0:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:21 2024 by rpki-client on console-ams.rpki-client.org