Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa
File:                     326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa (raw, json)
Hash identifier:          o42e8zQWNM3zuKtO/SaA2ho4i521e7Crxc5+2a9FM2w=
Subject key identifier:   A0:8B:B5:B4:68:A1:F4:E0:1C:75:54:0F:67:99:24:BB:85:33:EF:54
Certificate issuer:       /CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
Certificate serial:       322A5535F138E1EE3BD994CBAB62D5049DBAEAFA
Authority key identifier: CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa
Signing time:             Sun 07 Jan 2024 21:23:02 +0000
ROA not before:           Sun 07 Jan 2024 21:18:02 +0000
ROA not after:            Sun 05 Jan 2025 21:23:02 +0000
asID:                     197814
IP address blocks:        2a05:dfc1:80c0::/42 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2a:55:35:f1:38:e1:ee:3b:d9:94:cb:ab:62:d5:04:9d:ba:ea:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2
        Validity
            Not Before: Jan  7 21:18:02 2024 GMT
            Not After : Jan  5 21:23:02 2025 GMT
        Subject: CN=A08BB5B468A1F4E01C75540F679924BB8533EF54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:17:32:63:e1:46:d4:9b:e7:d3:a9:07:c8:
                    4c:b7:80:5b:e3:8f:85:68:e2:2b:1a:0d:c2:fb:9d:
                    0a:a0:f2:bc:d6:43:c1:88:7d:d4:40:98:a6:26:28:
                    af:c1:5e:79:51:39:d2:12:42:9c:68:d1:77:7d:14:
                    db:41:21:15:ad:14:81:3e:bf:5a:ba:43:ae:b3:2b:
                    71:7e:60:1e:aa:8c:4d:d6:3b:a3:c0:d1:36:bd:85:
                    aa:0e:c7:fa:9a:d4:19:2c:86:d7:a6:d1:78:93:65:
                    d4:e4:0d:f6:c8:62:80:9c:9e:fd:79:96:24:5d:5f:
                    d9:81:86:d6:9b:1c:0c:1c:13:80:a9:b1:01:59:ba:
                    24:36:b1:94:19:a1:1d:75:c8:d4:20:fc:9a:ee:40:
                    99:04:b4:4e:47:31:fb:10:12:ce:f3:72:44:1a:02:
                    af:ff:a4:b5:68:e3:f4:a1:be:2c:f8:c6:11:44:1e:
                    af:41:8a:8f:cc:05:8c:a2:25:5f:0f:6d:e6:ff:36:
                    fa:db:29:01:eb:45:14:92:da:6e:5e:a5:25:31:f2:
                    1a:12:9d:77:f8:9e:65:1c:36:e5:ee:5c:85:65:7a:
                    db:35:c3:fb:0f:28:18:f0:65:03:16:cd:2a:e6:22:
                    fb:9d:2f:f2:d5:39:19:df:a8:f8:a5:3d:a5:5a:61:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8B:B5:B4:68:A1:F4:E0:1C:75:54:0F:67:99:24:BB:85:33:EF:54
            X509v3 Authority Key Identifier:
                keyid:CA:DC:66:A6:E5:5B:EB:AF:DD:FA:8B:D7:2B:31:27:C8:AE:B5:0E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/CADC66A6E55BEBAFDDFA8BD72B3127C8AEB50EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/1/326130353a646663313a383063303a3a2f34322d3438203d3e20313937383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:80c0::/42

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:7f:24:01:79:ec:c8:b9:b1:8f:d9:1c:9c:c6:39:81:0a:
         0d:24:cb:84:73:ea:74:3a:89:a5:03:09:60:a9:3b:1f:fa:aa:
         1f:6b:2f:8a:42:ed:64:29:6a:c8:2f:de:69:02:13:e6:b0:c5:
         f8:3c:27:58:3b:39:f6:d5:7f:81:da:00:41:9b:02:f3:02:df:
         7d:ab:ed:92:67:79:3b:f0:85:f3:6c:f6:7f:e4:30:9c:be:d1:
         64:4d:ab:5f:45:d7:8d:45:a5:2e:54:b3:c7:69:c3:0f:86:45:
         1b:52:6b:73:85:5c:8e:08:bc:0f:ac:f2:a6:fa:66:7c:06:cc:
         c5:d9:4a:10:f0:1a:32:6f:bd:ce:86:2f:16:e6:41:ed:96:53:
         bc:8d:ba:e9:27:4e:86:02:21:ce:12:41:a8:6e:b6:ac:9d:a4:
         b1:73:ad:b9:67:c5:44:ae:06:9d:f2:df:d4:8e:1a:6d:c3:d4:
         0f:b0:bd:b8:07:6a:81:1b:3e:15:10:70:51:63:d3:cb:bb:a2:
         93:81:72:45:86:0f:95:4a:1e:c8:c4:82:ca:a6:a7:d2:5e:77:
         4b:8c:f4:71:b5:4d:48:6f:7a:d3:65:25:0e:73:e9:bb:2e:83:
         c2:8f:c9:79:9b:cb:39:2d:a6:9a:8e:a1:1c:0b:8f:c3:c3:ce:
         b5:15:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:06:14 2024 by rpki-client on console-fra.rpki-client.org