Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333038303a3a2f34342d3434203d3e20313339333131.roa
File:                     326130363a396638313a333038303a3a2f34342d3434203d3e20313339333131.roa (raw, json)
Hash identifier:          pbZmV28Wt4ze+FksLnwLCrV710zHb2e2BaVUSlgicGg=
Subject key identifier:   28:84:38:3F:48:81:A2:BA:67:CB:6A:34:F5:A8:53:DC:AC:1E:E7:FC
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       9C424D6BB368F6E788111C54447FB7B2F86A37
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333038303a3a2f34342d3434203d3e20313339333131.roa
Signing time:             Sun 30 Jun 2024 13:05:39 +0000
ROA not before:           Sun 30 Jun 2024 13:00:39 +0000
ROA not after:            Sun 29 Jun 2025 13:05:39 +0000
asID:                     139311
IP address blocks:        2a06:9f81:3080::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9c:42:4d:6b:b3:68:f6:e7:88:11:1c:54:44:7f:b7:b2:f8:6a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Jun 30 13:00:39 2024 GMT
            Not After : Jun 29 13:05:39 2025 GMT
        Subject: CN=2884383F4881A2BA67CB6A34F5A853DCAC1EE7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:a2:53:a8:ea:cc:df:be:34:f4:a2:fa:ac:
                    66:23:84:46:32:a2:8a:c4:4c:ca:3d:d6:dc:86:10:
                    71:65:84:cc:95:5f:34:bc:63:cd:b5:62:d5:ec:38:
                    53:96:be:8f:36:ee:8b:b6:18:64:fc:d0:f9:16:40:
                    50:19:7d:bb:b3:66:1c:8f:b9:c4:f0:22:b8:72:78:
                    85:e1:61:6e:ab:8c:32:eb:83:0d:72:30:16:3c:ce:
                    a5:6f:13:4f:f9:21:d0:f9:6b:ca:f0:ce:e7:a6:10:
                    cd:4e:35:35:44:c7:15:7c:3b:c8:53:13:08:7d:97:
                    9d:e8:c5:a0:6e:9d:32:75:81:2b:69:3f:ca:70:33:
                    27:9d:4a:35:93:f5:bb:93:e6:95:79:8c:e7:e0:ca:
                    9b:ac:94:ff:d6:37:dc:62:67:08:1f:5d:33:8b:1c:
                    c0:3c:02:68:1b:ab:f9:50:9b:3e:21:99:f5:95:5c:
                    ee:28:a4:ab:60:f2:97:99:84:0e:85:9c:8d:08:41:
                    8f:38:66:0d:a7:a5:bc:9c:17:53:e8:59:bc:55:8f:
                    55:2c:ef:79:08:63:a3:af:bc:66:75:55:86:bf:55:
                    cd:e1:16:7d:c2:d9:43:a2:3d:9f:a6:ce:91:84:55:
                    e0:4e:b9:55:c6:53:a5:26:54:e6:cf:25:2b:60:b6:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:84:38:3F:48:81:A2:BA:67:CB:6A:34:F5:A8:53:DC:AC:1E:E7:FC
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333038303a3a2f34342d3434203d3e20313339333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:3080::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:4e:b3:c2:43:29:57:d4:68:e4:44:8e:c1:99:28:a2:19:fa:
         cd:62:ae:ab:9c:28:35:e9:25:29:f1:34:1b:4a:8e:b9:f2:7a:
         c2:62:a5:5f:e0:42:14:11:17:4c:d1:d8:03:d9:bf:30:fc:22:
         65:f9:75:d9:c9:37:b4:69:c9:77:21:eb:6f:ad:44:43:1b:61:
         3e:b5:ba:9d:22:f1:9e:b4:41:08:36:b5:c7:f6:5e:a8:54:33:
         84:ee:66:12:af:18:5f:a2:0f:ec:7e:eb:ef:1f:ad:7c:6b:38:
         96:af:d5:b5:db:6f:9b:2e:e6:0b:4d:c9:2a:d9:e8:9b:88:5c:
         49:42:d2:a7:14:9b:ed:b9:f0:9c:7f:27:0a:70:68:6c:30:9c:
         d6:74:66:82:a0:c5:9d:d3:ed:75:53:65:48:58:0d:29:71:f7:
         94:c8:d5:68:f6:73:46:a7:16:03:36:06:35:c8:a2:23:d1:8d:
         ac:4b:a5:0a:51:32:d6:58:c1:6f:8f:1d:a8:2e:1d:da:6d:92:
         7d:7e:ce:47:dd:93:a9:86:b2:df:74:ee:fd:c2:38:e3:14:11:
         1f:68:a4:c4:d7:8e:cc:99:3d:ff:75:ca:41:35:73:5b:b7:04:
         07:f1:da:90:6e:4d:17:dd:95:af:f4:a0:b8:2b:9c:d7:1d:be:
         93:2c:bb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org