Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066393a3a2f34382d3438203d3e20323136343235.roa
File:                     326130363a396638313a333066393a3a2f34382d3438203d3e20323136343235.roa (raw, json)
Hash identifier:          KARcI0EGjiOymhj11NMXN7fF/d6YTtTZ100hSbwQdVI=
Subject key identifier:   82:DE:F5:21:F4:08:E2:07:45:B3:CF:20:C5:E5:F9:3D:E4:F0:6A:4B
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       09B6597D6153618F022AD002351AF4D5F0DBC7FD
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066393a3a2f34382d3438203d3e20323136343235.roa
Signing time:             Sun 15 Sep 2024 13:49:47 +0000
ROA not before:           Sun 15 Sep 2024 13:44:47 +0000
ROA not after:            Sun 14 Sep 2025 13:49:47 +0000
asID:                     216425
IP address blocks:        2a06:9f81:30f9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b6:59:7d:61:53:61:8f:02:2a:d0:02:35:1a:f4:d5:f0:db:c7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Sep 15 13:44:47 2024 GMT
            Not After : Sep 14 13:49:47 2025 GMT
        Subject: CN=82DEF521F408E20745B3CF20C5E5F93DE4F06A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f5:11:49:7a:b3:de:84:9a:80:3c:4c:80:17:
                    92:8e:b8:8b:e3:fd:9f:96:e1:26:d1:39:5b:da:c0:
                    bf:d3:2f:38:9c:ce:f3:0d:cb:83:de:1e:c0:89:ae:
                    df:0c:34:82:64:f3:44:c0:b4:d9:1b:5e:1c:dd:69:
                    ac:36:b8:3a:65:e8:bb:d9:a7:f2:af:3f:89:f3:76:
                    4f:d3:da:c7:75:34:4c:a1:8c:ec:f8:c2:46:e3:62:
                    8d:00:07:09:d5:5e:1b:a7:3b:68:38:8b:3c:cd:58:
                    c5:bc:aa:d6:6c:92:da:0d:35:d7:3c:41:97:7c:e7:
                    43:e0:61:c0:d9:4b:94:4d:ff:48:7b:ad:99:e4:79:
                    2c:57:a2:ab:45:c4:f2:43:22:f0:b0:ff:74:15:c2:
                    a3:d6:8a:aa:c5:c9:2b:98:55:0a:ba:3b:2d:7f:22:
                    f2:94:05:9d:04:ff:7f:f6:02:6b:03:02:f3:62:30:
                    cd:a0:2d:44:d9:18:a2:b2:77:ba:ff:56:5e:03:85:
                    89:4f:1c:69:04:fe:96:04:17:96:c2:39:59:bf:04:
                    37:e6:a1:3b:79:77:c1:16:c7:21:75:24:d8:36:63:
                    ed:62:63:ec:60:66:fd:57:b6:d1:39:d2:8c:bb:31:
                    a0:b1:89:4b:9b:45:a5:19:aa:6e:dd:22:02:49:58:
                    9d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DE:F5:21:F4:08:E2:07:45:B3:CF:20:C5:E5:F9:3D:E4:F0:6A:4B
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066393a3a2f34382d3438203d3e20323136343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:48:0c:ca:fb:bf:53:14:e0:45:35:c1:2f:55:f3:a7:77:83:
         1b:fd:0b:25:57:4e:26:ce:bf:f5:d3:b9:4d:35:47:e7:57:7b:
         cd:0d:77:c9:67:e0:a1:a5:37:8c:52:76:10:ea:c5:c2:3b:32:
         f4:46:8a:c9:60:c7:ea:18:0d:fb:6d:6f:e9:19:4b:a4:df:3e:
         0a:5f:04:72:59:d1:68:d3:11:e9:ba:27:aa:9c:24:ba:62:2c:
         57:78:0b:ef:89:61:4f:72:12:36:92:0a:87:5d:44:8d:69:ea:
         b8:74:c8:65:b4:fd:ed:1e:11:a3:1d:88:0b:7a:d6:1d:f9:53:
         4d:c8:4d:5a:90:65:7e:f6:02:d9:c0:82:14:9f:99:75:ac:3d:
         eb:5d:5d:94:55:3a:21:7b:21:9f:3f:87:72:6d:3b:eb:c0:36:
         e7:25:a1:8a:65:4e:5a:35:6a:6e:c6:d8:7c:a2:c3:1a:e8:39:
         7b:78:f9:4e:42:b4:b9:7e:1b:98:51:73:28:4a:35:19:76:3e:
         dc:f4:2f:69:ec:45:4d:13:af:b0:ef:16:ba:bf:34:ce:95:03:
         5e:1c:91:ba:15:a5:06:b2:55:aa:25:20:e2:ec:dd:9a:22:3f:
         78:53:b5:77:b2:26:d3:fa:0a:6a:43:91:23:44:5d:28:0b:61:
         40:1a:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org