Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa
File:                     326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          Kbz9W4lb7zmz+rxWZ5m5sZvlIg/iowgkJ1r6K4M0ADs=
Subject key identifier:   1B:6E:20:80:E5:D4:08:46:CD:6C:F5:F5:0F:5B:8E:B1:5A:6B:9F:7E
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       55AABCB49C70ABAEB50957AC585C424ECC32FA0F
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa
Signing time:             Sun 20 Oct 2024 12:30:39 +0000
ROA not before:           Sun 20 Oct 2024 12:25:39 +0000
ROA not after:            Sun 19 Oct 2025 12:30:39 +0000
asID:                     16509
IP address blocks:        2a06:9f81:30f9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 05:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:aa:bc:b4:9c:70:ab:ae:b5:09:57:ac:58:5c:42:4e:cc:32:fa:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Oct 20 12:25:39 2024 GMT
            Not After : Oct 19 12:30:39 2025 GMT
        Subject: CN=1B6E2080E5D40846CD6CF5F50F5B8EB15A6B9F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:56:ff:c1:9d:40:28:b5:b6:54:df:cb:9d:
                    74:96:7e:a4:47:6f:bf:c7:55:5c:ae:f2:11:16:67:
                    7e:ae:dc:bc:91:83:13:aa:38:90:12:2c:5f:e0:22:
                    de:0a:84:6b:2d:15:d2:17:0a:2e:4a:15:57:cf:b2:
                    98:06:d2:44:76:fd:e5:e4:3e:60:c5:0f:f9:39:b3:
                    b8:36:3e:68:22:5e:77:3e:c7:ff:08:c6:a4:f6:1d:
                    cf:a7:79:10:0a:73:c6:9c:9e:32:66:f2:f7:3d:e5:
                    5c:7b:0f:1e:84:88:a5:f8:cf:6a:c8:c2:e0:df:7b:
                    31:26:37:1c:0b:d4:88:b3:c5:61:03:64:f2:a5:d8:
                    9b:8c:39:d4:5a:47:26:17:da:63:9e:2c:1d:d8:96:
                    10:52:60:a8:a4:bd:05:66:18:28:1f:94:45:b6:37:
                    17:bd:ce:11:b7:4d:71:5f:ee:4b:01:11:f6:73:41:
                    63:83:cd:46:68:a7:7e:b8:8f:ad:53:25:4b:6b:52:
                    5a:44:f1:54:db:c4:4d:2c:67:85:2a:02:0f:2d:ab:
                    ea:ac:03:39:44:eb:86:3e:81:4f:71:f2:ef:e6:4d:
                    94:58:aa:24:e2:5f:f3:e9:9a:d4:44:54:76:9f:de:
                    8b:fb:30:f0:8f:fd:85:91:76:af:a1:30:1a:80:ec:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6E:20:80:E5:D4:08:46:CD:6C:F5:F5:0F:5B:8E:B1:5A:6B:9F:7E
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066393a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:35:63:9b:93:81:12:6b:43:be:9b:c6:94:a9:cb:82:eb:
         b9:2b:16:13:27:a7:68:f8:f8:3a:a8:6c:74:16:ad:1d:b9:b2:
         b5:49:fe:e3:8e:d4:f9:24:bd:78:2f:d5:d1:81:d3:2e:67:a8:
         a8:9b:44:36:ec:13:59:c9:f3:79:dd:c9:20:a7:5a:e1:8b:ea:
         42:44:f4:e3:44:c8:30:7a:26:9a:8b:b1:6d:3a:46:4e:89:e0:
         ad:a8:11:0d:14:c5:9a:b7:88:1a:7e:c1:c1:17:bf:d7:b3:47:
         fa:49:25:a5:9a:68:d2:e3:49:45:df:59:8b:51:d8:7d:50:53:
         92:da:2e:c6:f3:74:b6:5c:19:c9:a0:04:58:71:3f:f9:f5:84:
         e5:76:4d:9e:93:72:08:16:1f:6e:de:67:46:f4:34:a8:8a:61:
         ef:95:97:bd:e6:b3:cf:43:16:d9:46:7a:b7:f4:5a:3a:5e:aa:
         67:58:44:32:01:27:5c:31:67:fe:5b:f2:2b:2c:55:b0:75:a9:
         cc:4a:da:b7:51:95:d7:81:da:51:56:cd:ed:ab:64:2d:0e:f1:
         cb:c4:bd:de:37:4e:2a:00:79:f4:22:fd:9f:c8:da:47:14:a9:
         30:44:01:4d:fa:cd:98:9d:c4:53:08:64:91:06:23:b5:d6:f6:
         60:97:5b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:02:14 2024 by rpki-client on console-fra.rpki-client.org