Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa
File:                     326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa (raw, json)
Hash identifier:          zbSyJWQbLAxEI4Oi5Y9adgQ2slgF+qekNaAV6vEljG4=
Subject key identifier:   FB:5A:5A:C4:08:57:A5:98:07:84:EB:18:A5:FC:FE:1A:CC:05:A5:51
Certificate issuer:       /CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
Certificate serial:       2A103E6951E7AC36389B3736ED4B4356CA702BB9
Authority key identifier: B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa
Signing time:             Tue 24 Sep 2024 03:52:17 +0000
ROA not before:           Tue 24 Sep 2024 03:47:17 +0000
ROA not after:            Tue 23 Sep 2025 03:52:17 +0000
asID:                     215087
IP address blocks:        2a06:9f81:30fb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:10:3e:69:51:e7:ac:36:38:9b:37:36:ed:4b:43:56:ca:70:2b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B75E5F3652430CEF96E1E0BD16DDAC40726889EB
        Validity
            Not Before: Sep 24 03:47:17 2024 GMT
            Not After : Sep 23 03:52:17 2025 GMT
        Subject: CN=FB5A5AC40857A5980784EB18A5FCFE1ACC05A551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:16:0b:3f:bb:84:86:ef:4c:92:04:9a:89:
                    52:5d:f4:19:d1:cf:3f:f4:4d:a0:ba:91:37:a8:3e:
                    fd:31:5c:a2:1f:86:b0:09:d8:77:dd:00:eb:d0:60:
                    e5:ad:ad:fa:18:19:8c:9f:58:e8:37:c9:76:f8:c5:
                    06:51:98:ce:9b:87:57:37:91:ab:79:19:0c:c9:45:
                    fd:15:8a:61:7f:ef:d5:c5:7e:f8:d8:7a:ca:3d:49:
                    8e:99:50:29:4d:a9:ff:5b:d3:f0:95:59:c4:b2:f3:
                    fa:25:8f:1a:ed:43:dc:cb:10:05:a9:56:65:8f:3d:
                    1f:f8:31:c2:c5:60:55:1d:f5:ac:a3:ae:28:e3:30:
                    06:a2:11:4b:86:5b:11:da:17:ca:7c:af:47:c6:3d:
                    24:50:44:b4:5d:6c:1d:e5:b7:2b:9b:7e:60:95:46:
                    0d:f0:6b:4b:a8:55:0a:b5:71:eb:42:83:35:b9:cb:
                    83:de:ba:64:a6:83:55:8b:df:df:dc:79:84:28:d9:
                    b3:2b:32:49:b4:24:cf:a0:50:49:53:1c:b5:4f:fe:
                    24:f8:4f:71:7c:ed:0a:ac:01:de:da:b3:87:35:91:
                    72:8d:4b:46:c7:d6:7c:92:13:7e:4c:49:7c:59:95:
                    97:19:eb:d8:35:d8:66:49:45:13:b3:5a:dd:8b:ca:
                    52:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5A:5A:C4:08:57:A5:98:07:84:EB:18:A5:FC:FE:1A:CC:05:A5:51
            X509v3 Authority Key Identifier:
                keyid:B7:5E:5F:36:52:43:0C:EF:96:E1:E0:BD:16:DD:AC:40:72:68:89:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B75E5F3652430CEF96E1E0BD16DDAC40726889EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d64ac941-5a7c-42cf-b64b-0b288f1887f2/0/326130363a396638313a333066623a3a2f34382d3438203d3e20323135303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f81:30fb::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:86:5a:26:2c:95:8b:bf:4d:49:50:1f:de:4a:ce:99:2a:13:
         01:d4:0a:23:7e:fe:ea:5b:75:a1:20:62:4b:c0:00:5c:13:8a:
         a4:2b:77:d0:2b:82:65:fb:36:e4:91:6e:1d:58:25:2a:52:3d:
         da:66:a7:9a:85:24:27:77:f3:82:ec:88:4f:0f:a0:56:9f:0d:
         4f:51:a7:58:68:0e:a5:02:8a:72:14:ba:68:62:73:77:64:bc:
         ce:f3:5f:36:e0:d0:4b:98:14:f5:ec:64:e8:e1:11:c6:3d:39:
         1f:1b:f1:ca:b2:87:aa:9e:3b:89:9d:e4:db:88:8d:63:9a:5b:
         00:df:d5:45:e1:c4:0e:4a:54:79:78:d9:1d:62:43:8a:5c:79:
         db:53:dd:68:2e:7c:1b:1b:a6:30:32:4f:60:8a:c5:81:24:f2:
         93:de:18:ec:cc:be:a6:b4:07:e2:00:e3:ab:28:c9:a4:15:53:
         93:7d:7a:bf:f6:d0:8f:62:b2:d5:25:59:c0:c7:85:1e:21:16:
         0e:ae:c3:84:c7:d4:4a:aa:d2:a7:e3:7a:f8:6d:b0:35:de:87:
         50:db:5c:6c:86:77:4a:4c:bd:84:e1:bd:58:5a:24:54:ee:6e:
         f8:9b:44:0c:88:5f:89:21:5a:10:bc:38:2c:bb:ff:43:e1:dc:
         dc:2a:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org