Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          /vO6Aetvg1Z6nSXlTg5RzUgUqaLwZ0oGQJ1Dgblzw5o=
Subject key identifier:   D7:3E:6D:35:F4:D8:18:50:CC:05:1D:31:5E:AF:55:7F:65:73:D8:62
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       11365D2F9E0532616B21D83303A7CC6EC27CCF9C
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Sun 30 Jun 2024 13:05:35 +0000
ROA not before:           Sun 30 Jun 2024 13:00:35 +0000
ROA not after:            Sun 29 Jun 2025 13:05:35 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:36:5d:2f:9e:05:32:61:6b:21:d8:33:03:a7:cc:6e:c2:7c:cf:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun 30 13:00:35 2024 GMT
            Not After : Jun 29 13:05:35 2025 GMT
        Subject: CN=D73E6D35F4D81850CC051D315EAF557F6573D862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4b:04:a4:e2:c3:38:5e:0e:b7:e6:a5:15:e0:
                    b1:67:df:93:7c:ea:f1:55:3d:18:4f:cd:25:75:61:
                    c5:22:b8:62:f4:ab:e6:d5:24:22:c0:a9:e1:31:b7:
                    98:51:ed:32:ce:31:70:bc:8c:ac:2b:d4:b9:b0:62:
                    fd:26:cc:97:10:5f:c7:84:22:71:4c:38:32:31:c2:
                    4e:49:a9:b6:0c:2c:99:55:3a:8f:f4:c0:82:1b:dc:
                    3d:5a:12:72:3c:ec:20:4a:8f:e9:e9:18:7a:31:a6:
                    84:7a:58:c6:29:26:97:86:1f:c7:34:1a:f0:4f:7f:
                    12:b5:69:a6:18:df:f5:89:09:31:cc:00:bf:2e:c8:
                    06:b9:a4:db:cd:ee:f2:74:f4:b7:93:2d:99:d8:bc:
                    86:46:fd:8f:ea:48:63:1e:75:14:55:8b:a2:66:0b:
                    91:e4:1f:77:83:33:dc:ce:bb:a6:09:4c:ce:45:09:
                    3e:8d:54:73:b8:b7:87:0a:8f:34:03:de:ff:6c:e5:
                    05:14:81:1e:df:42:0d:b4:e5:cc:b8:97:bf:03:69:
                    6b:d6:28:16:f6:f7:e7:c9:ea:1b:06:2f:b6:73:2d:
                    9e:05:9c:ec:88:6d:f7:70:d5:cd:f0:00:d2:25:12:
                    fb:06:63:af:56:95:8e:e8:f7:14:f7:bf:65:76:e5:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3E:6D:35:F4:D8:18:50:CC:05:1D:31:5E:AF:55:7F:65:73:D8:62
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3003::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:5a:6c:02:59:88:7c:c5:0b:52:27:84:a8:7a:fd:52:34:
         18:a5:f6:29:fc:57:97:a6:3c:ab:0f:8f:1e:d6:7d:53:cd:7a:
         8d:fc:bd:8f:b2:e0:f8:bd:7c:20:1e:ec:3a:0b:51:54:55:0c:
         aa:65:3a:c7:99:de:86:9d:68:2c:04:52:8c:b1:12:5d:e0:11:
         f4:ae:1c:39:38:07:c8:01:42:4e:45:10:b4:77:61:2c:8f:3b:
         a7:74:4d:ba:c2:99:85:7c:67:6e:eb:54:80:3a:28:e1:71:a3:
         99:ac:0d:c2:e0:2f:32:cc:c4:7d:11:f9:fe:8f:e8:66:47:d6:
         10:70:64:32:9c:52:d9:9c:0d:48:4d:2c:e1:1f:b3:00:0b:5b:
         a0:ba:4b:fc:1c:92:89:92:16:80:46:c3:d4:5e:ce:c2:71:b8:
         7a:34:a3:c8:47:99:0f:bd:1a:2f:fe:ab:2f:ea:8b:1b:e2:46:
         46:bd:0a:3e:12:08:ca:f2:f3:c3:fe:99:63:a8:8f:27:2a:24:
         cf:13:1f:09:5b:59:83:6b:5b:13:ff:3b:1a:cd:94:36:d7:45:
         40:37:ef:60:e1:22:a0:86:42:c6:5d:de:d2:d0:c3:f7:b6:b7:
         e8:a1:8f:51:51:b0:7e:8d:4a:cb:54:86:80:6a:04:b6:35:81:
         4e:dc:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org