Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa
File:                     326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier:          oJg5pclyso5zMIfNIsi7kdzWNEsDSg9d9FZs4wwG1Mo=
Subject key identifier:   2E:D1:BD:F5:BF:CA:98:32:F5:86:9F:79:9D:C4:5F:FD:A6:23:A7:E6
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       6748CE6C276F92CFAD5DC8D8D79869F83F4DFF52
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa
Signing time:             Tue 24 Sep 2024 03:51:54 +0000
ROA not before:           Tue 24 Sep 2024 03:46:54 +0000
ROA not after:            Tue 23 Sep 2025 03:51:54 +0000
asID:                     215087
IP address blocks:        2a06:9f81:30fa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:48:ce:6c:27:6f:92:cf:ad:5d:c8:d8:d7:98:69:f8:3f:4d:ff:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Sep 24 03:46:54 2024 GMT
            Not After : Sep 23 03:51:54 2025 GMT
        Subject: CN=2ED1BDF5BFCA9832F5869F799DC45FFDA623A7E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:7a:17:b7:ff:31:a1:99:11:83:a4:78:49:
                    82:8c:63:74:a0:50:ae:d3:b1:2a:25:e8:45:4b:b1:
                    e0:42:d8:05:53:79:cc:ff:87:23:b5:3a:63:f4:97:
                    09:88:b0:ba:bc:5e:ca:b0:41:20:ff:99:5e:e2:bf:
                    c4:60:fa:34:6f:64:5e:9e:49:df:9c:b0:cd:39:14:
                    e8:37:fc:ee:9f:f1:55:02:1d:d4:37:85:2f:2a:17:
                    1a:e8:05:8e:64:47:7e:0f:a3:40:21:c3:35:dc:48:
                    ec:89:e7:8a:73:d1:f5:13:8a:85:db:58:e1:d5:b7:
                    02:53:4e:6a:3c:f6:5d:27:76:bf:3e:24:75:98:e4:
                    77:05:cc:2b:27:fe:c3:49:62:f9:3e:16:dc:44:95:
                    54:7c:bf:b5:93:62:93:e7:2b:d6:0d:7b:c3:85:aa:
                    5b:20:fa:a2:1d:c7:ec:d9:80:92:e5:4a:bb:12:58:
                    8f:9c:ec:f8:02:4e:95:08:ce:92:cb:a9:f0:96:ab:
                    8f:6a:5f:5c:e8:4e:39:8a:d4:aa:c9:48:34:d9:fa:
                    88:67:e4:94:98:7a:7f:31:aa:54:2c:0c:00:dd:78:
                    22:95:a4:03:8d:a4:2c:59:f3:37:0a:20:9f:a6:56:
                    1c:c1:06:26:8a:3e:63:0f:0e:43:20:4d:b0:ad:88:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D1:BD:F5:BF:CA:98:32:F5:86:9F:79:9D:C4:5F:FD:A6:23:A7:E6
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066613a3a2f34382d3438203d3e20323135303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30fa::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:29:93:6b:26:ca:81:ee:3c:dc:67:52:68:55:f8:75:f8:45:
         b6:8e:19:74:3d:0a:2e:07:7a:3c:c8:97:c7:42:f4:3d:99:81:
         81:2d:8d:0f:55:60:7f:74:a5:ed:ef:db:ff:d0:81:05:5a:6e:
         57:46:eb:17:c7:6d:a9:4f:f2:4a:dc:12:07:86:7e:fe:cb:d0:
         56:59:53:9d:a6:a4:16:77:cf:be:f1:25:c6:81:92:29:d5:68:
         9b:ac:e7:51:82:21:f9:63:42:e2:c0:c5:86:70:14:76:26:2b:
         62:8b:5d:b4:4b:72:47:fd:c7:c8:c3:4e:d4:9b:90:bf:6a:09:
         cd:20:b4:ac:e9:cc:c5:6c:1e:03:0c:c9:43:ea:68:a0:97:8c:
         44:41:62:75:96:32:e0:a1:dd:2b:27:4b:e2:6c:95:dd:2e:e4:
         a8:e4:c8:8f:8a:87:01:10:9b:d8:f1:21:8f:32:45:f7:7b:72:
         00:b1:5d:af:4d:af:2f:87:54:cd:49:da:0b:fb:f9:72:01:a9:
         90:e6:a3:55:a7:43:5d:a9:f3:49:44:85:67:42:dd:8f:3c:8f:
         25:43:52:a6:5f:67:e8:87:f8:94:1c:b2:55:f3:29:63:cc:36:
         d7:bd:60:e1:7f:c7:1c:93:7a:89:c4:64:76:5a:7b:43:ac:64:
         a8:80:9a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org