Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          Eqr4IieQW3MK0L9wffHhXozvPL9Yv2ggqj0c6+GE2B8=
Subject key identifier:   61:13:7C:80:9A:25:36:72:03:74:3A:F7:56:BD:5C:EF:78:56:8E:E7
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       288E5E9688B87E36FD07BF3E5FF5D1BA0F9B9F3E
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Sun 30 Jun 2024 13:05:42 +0000
ROA not before:           Sun 30 Jun 2024 13:00:42 +0000
ROA not after:            Sun 29 Jun 2025 13:05:42 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:8e:5e:96:88:b8:7e:36:fd:07:bf:3e:5f:f5:d1:ba:0f:9b:9f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun 30 13:00:42 2024 GMT
            Not After : Jun 29 13:05:42 2025 GMT
        Subject: CN=61137C809A25367203743AF756BD5CEF78568EE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:27:3d:5d:5e:bd:d4:cd:f9:f3:d7:58:36:
                    f5:26:0e:67:27:66:7c:8e:67:5b:81:4a:f5:89:15:
                    1b:db:0d:de:12:cf:8b:17:48:53:e0:66:c9:1a:5f:
                    af:76:8a:35:b9:a3:3b:a3:91:7c:b1:51:c0:4e:06:
                    25:84:71:cf:af:d0:ae:10:f6:b3:46:cb:2a:94:e0:
                    ca:25:dc:e1:28:87:c1:d2:d8:0c:27:38:13:0a:06:
                    a0:09:d9:03:93:3f:57:60:4a:bd:b9:85:95:29:b0:
                    7e:31:c2:f1:5c:0d:ca:a0:f2:80:7f:70:b2:ba:5a:
                    fa:96:cb:31:1f:b7:19:01:de:9a:43:38:16:96:09:
                    fb:7e:e7:f7:9b:5b:9d:75:68:b2:3b:6e:95:94:db:
                    c7:db:98:12:22:89:84:f9:d7:e3:f7:b2:5b:e1:85:
                    56:fe:18:09:30:b6:b6:e2:fa:c5:73:e0:6d:a0:5a:
                    30:4e:33:70:ae:70:0f:57:35:a8:ad:62:82:27:56:
                    f5:00:a1:31:1b:19:9d:55:95:f1:22:51:80:54:c9:
                    e2:66:a4:14:9c:3d:00:9c:1a:09:d4:b3:8c:01:79:
                    86:02:04:c6:1f:32:bc:3d:c6:50:8c:b1:ed:26:55:
                    dc:79:7f:15:24:2c:6e:76:91:0f:19:00:cd:e7:1e:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:13:7C:80:9A:25:36:72:03:74:3A:F7:56:BD:5C:EF:78:56:8E:E7
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3001::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:47:70:78:13:b9:e2:a7:00:01:04:b4:38:fa:4e:12:bc:
         70:f9:de:d9:be:98:57:ad:81:89:5b:1c:d1:ec:27:ff:2a:81:
         8c:e5:36:e8:8b:94:21:11:53:72:62:32:40:34:81:a7:34:a1:
         8c:f6:bf:72:29:45:34:c5:95:90:2a:92:86:9e:2c:b7:d4:dc:
         78:b4:c8:d8:7f:27:9b:83:b5:4a:6f:67:50:ca:02:51:51:fb:
         28:0b:84:f5:8a:4e:57:d7:54:4e:ea:79:f2:a6:74:55:09:eb:
         67:bd:97:d0:60:f0:a5:22:9a:2b:9a:3d:24:48:5d:08:cf:7b:
         ce:a6:12:39:9e:ba:85:1e:4c:e5:95:d4:44:65:fe:af:72:e6:
         3d:0d:26:e5:b7:46:5a:c7:03:75:4e:dc:84:ba:eb:ac:c0:3c:
         99:9e:97:f6:9f:39:ce:3b:e5:06:14:1c:11:56:57:c0:2c:f4:
         ec:a2:47:06:bb:53:67:d9:a9:b7:95:5f:0c:78:64:25:6a:c6:
         2e:20:44:4c:aa:3e:13:f4:bc:a7:dd:0c:f0:55:b0:a5:7f:bc:
         16:32:b5:f0:5a:13:2e:83:c8:eb:a9:d7:d3:c4:d2:fd:09:e2:
         d3:52:b1:9e:6a:26:e6:37:09:49:b7:1a:9e:de:82:02:c3:ef:
         66:9f:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 10:53:22 2024 by rpki-client on console-fra.rpki-client.org