Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
File:                     326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (raw, json)
Hash identifier:          H6LWNAYSKtSE1gD/H3eKvS9vjsXPrCs8buJJLc0Ybs4=
Subject key identifier:   20:3F:A5:CC:8A:BA:1E:36:FE:50:F8:68:5D:A6:A1:7F:32:31:6B:22
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       588D47674DF7A1707865C4F16D6F64E1B0B8466A
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa
Signing time:             Sun 30 Jun 2024 13:05:38 +0000
ROA not before:           Sun 30 Jun 2024 13:00:38 +0000
ROA not after:            Sun 29 Jun 2025 13:05:38 +0000
asID:                     151349
IP address blocks:        2a06:9f81:3031::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8d:47:67:4d:f7:a1:70:78:65:c4:f1:6d:6f:64:e1:b0:b8:46:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun 30 13:00:38 2024 GMT
            Not After : Jun 29 13:05:38 2025 GMT
        Subject: CN=203FA5CC8ABA1E36FE50F8685DA6A17F32316B22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:58:91:a5:af:c0:68:b1:a2:a4:3c:38:0c:
                    5a:e2:a6:b7:a7:f6:aa:92:58:6c:86:ae:55:cf:8c:
                    f1:c8:b4:b6:7d:7a:96:fe:53:b2:91:f7:65:ac:e8:
                    9d:e1:09:0d:30:84:5a:11:a4:f4:16:0a:12:6e:d0:
                    54:da:8e:80:29:ca:d6:36:00:02:f8:68:f1:f6:7f:
                    88:3e:17:b4:c8:d6:9a:dd:09:7e:72:ff:8d:e7:76:
                    d1:0b:ce:89:ce:0f:fd:60:b7:11:89:1d:fb:64:54:
                    69:66:fb:42:d9:6a:e7:bb:a2:61:56:e3:5e:07:ba:
                    29:5d:3d:33:cd:a5:a4:58:9f:fd:ee:1d:ad:78:4a:
                    68:f9:48:e0:dd:05:81:8a:e5:af:16:4f:5c:69:a7:
                    53:13:62:1c:aa:60:c5:7b:b6:e1:fd:32:b8:f9:b3:
                    88:25:c2:64:cb:bb:b5:53:0e:56:2e:75:18:10:9a:
                    6f:d1:17:d9:fc:b7:f6:9e:83:0e:7e:ff:43:b8:8a:
                    eb:90:7f:ed:18:b3:97:32:42:ab:e6:03:fc:3f:c4:
                    2a:eb:eb:f4:17:95:a9:14:3d:ba:37:1d:5b:b9:b0:
                    b8:f9:31:dd:95:8a:a0:e1:29:d7:2f:9f:6b:a7:40:
                    6f:e1:12:cc:63:cf:84:2b:2e:85:a1:f2:46:3f:62:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3F:A5:CC:8A:BA:1E:36:FE:50:F8:68:5D:A6:A1:7F:32:31:6B:22
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3031::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:a8:a5:4b:09:50:62:29:a4:e9:89:bb:8b:40:ac:6d:e0:1c:
         5d:83:02:92:81:a1:db:42:17:c6:65:4d:14:6f:11:de:5e:63:
         10:3b:e8:1b:a1:29:b0:f9:ce:cf:52:72:22:a0:76:c0:82:a6:
         0c:21:5b:33:84:b6:11:5b:71:92:c7:f6:76:b2:df:d9:fc:ce:
         3e:3f:87:b5:20:f8:bd:5c:0b:c2:f0:3e:72:4d:e7:c8:83:ed:
         9c:54:3a:60:75:f3:4f:84:41:8a:b8:6a:7a:af:06:49:62:1b:
         4b:b7:83:9d:36:15:35:6d:68:f1:66:b6:6a:06:7b:25:ab:38:
         5a:76:b3:67:a5:63:97:b4:7a:31:0a:1d:c2:68:6c:91:5b:15:
         18:62:7c:14:97:fd:c2:9f:9b:3f:2c:8c:41:63:82:c6:2e:a0:
         90:dd:36:80:db:1c:60:9c:42:3d:6b:e8:18:03:e8:6d:00:bf:
         9e:93:fe:f9:bf:d8:1b:e5:1c:f3:3c:7b:00:3c:f0:5e:ef:8b:
         9d:eb:c1:4b:4a:1a:f6:8b:9e:2f:fb:c2:9f:8c:f6:89:07:3b:
         cb:73:c4:23:92:83:0e:84:20:9b:b0:dc:94:fe:a7:ef:04:90:
         32:0b:f5:f5:f9:0b:77:85:b1:41:fa:b5:2b:e3:0d:94:27:98:
         98:e9:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 10:53:22 2024 by rpki-client on console-fra.rpki-client.org