Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          wTQJOpRyr0NU7c8GCu93MPq0bxGhVl2EEzBCdAqk6kE=
Subject key identifier:   BB:F5:CC:D2:B2:FB:FB:D2:46:AB:65:8F:F8:EB:2A:BC:B1:C0:DD:C6
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       3AE0E349F6178AA530331788E05BC9B5EE793524
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Sun 30 Jun 2024 13:05:36 +0000
ROA not before:           Sun 30 Jun 2024 13:00:36 +0000
ROA not after:            Sun 29 Jun 2025 13:05:36 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3011::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e0:e3:49:f6:17:8a:a5:30:33:17:88:e0:5b:c9:b5:ee:79:35:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun 30 13:00:36 2024 GMT
            Not After : Jun 29 13:05:36 2025 GMT
        Subject: CN=BBF5CCD2B2FBFBD246AB658FF8EB2ABCB1C0DDC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:05:f5:f8:19:af:ce:b5:c5:69:69:04:02:8b:
                    0c:7d:69:85:d5:87:9e:b6:da:90:93:57:96:e6:1f:
                    ce:12:66:25:60:db:80:ab:00:5c:c3:8e:6f:5f:42:
                    31:f1:c7:ae:f1:ae:29:11:b2:60:c8:7c:2d:53:a5:
                    42:02:14:59:a5:e6:eb:75:c8:dc:27:ae:83:2e:b1:
                    95:fb:f9:95:1d:28:a3:7b:c1:38:ae:27:50:51:5e:
                    9d:2f:cc:77:02:c0:26:c2:de:ca:6e:b4:65:6f:45:
                    77:52:bc:cc:ed:f8:02:52:c1:3f:7f:57:df:64:9c:
                    e1:c0:b6:94:15:c4:1c:91:ac:7f:fc:c9:ef:a7:98:
                    96:20:fa:2d:09:b9:62:7c:75:fc:d7:73:33:af:cc:
                    cf:97:9c:10:28:af:31:4d:8f:7c:b7:78:34:e5:ed:
                    50:28:fc:43:a4:cd:48:17:30:ea:b6:ff:bf:44:ba:
                    5c:3b:a3:26:18:d8:3c:ce:11:88:20:ae:fe:47:8e:
                    45:b2:db:1b:95:05:c6:92:57:d3:d8:3e:87:d5:47:
                    5b:8f:67:b2:56:1d:11:3a:07:cc:3e:f0:c7:b2:ee:
                    ad:2f:fe:75:69:2c:86:95:10:87:d7:8f:cb:26:40:
                    4d:93:a3:a5:cc:ab:a3:af:cd:e7:8c:77:f3:db:d4:
                    14:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F5:CC:D2:B2:FB:FB:D2:46:AB:65:8F:F8:EB:2A:BC:B1:C0:DD:C6
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3011::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:8d:df:8a:35:93:7d:8a:cc:dd:60:89:40:32:b3:50:bf:3e:
         a1:35:de:73:31:54:bb:f0:dc:9a:a8:7d:b5:c5:1b:98:67:be:
         2d:8e:96:a0:8f:f9:13:3e:ff:67:4c:92:cf:87:84:30:01:e0:
         8c:c3:12:5a:6f:b2:e4:02:29:24:74:db:1c:aa:f8:72:f6:8b:
         cc:13:f3:c9:3f:70:60:e7:d2:39:f7:78:68:b9:2b:c4:cd:57:
         d7:60:5d:83:ea:c5:7b:78:c4:59:bc:31:18:ee:ba:17:6f:32:
         6c:69:0a:81:89:29:a4:4c:0a:2e:9c:d1:19:ab:fc:9e:09:e5:
         66:e6:e6:ab:8f:45:e2:54:83:e3:79:ff:db:34:f2:70:1b:85:
         5b:02:81:86:f1:97:f5:50:3b:4d:6d:fd:2c:b8:6b:5d:2d:b6:
         5b:d3:59:a3:40:87:c4:e1:3e:f5:4e:9d:d9:b7:15:e7:b1:1c:
         9e:bf:04:2e:cb:01:8d:ab:16:ac:55:5c:14:64:22:a9:35:1f:
         50:7d:cb:a8:cf:82:cb:b2:d9:aa:ac:af:cb:6b:c2:83:8d:e1:
         2e:3a:45:90:af:d2:06:2f:55:ef:b2:e5:61:ab:f6:49:d3:f7:
         28:03:26:fd:67:9f:51:1b:ef:ae:1b:0e:2e:91:d5:8c:fe:90:
         bd:68:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org