Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa
File:                     326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa (raw, json)
Hash identifier:          N4HPw7Pswg2+VYtlq0M98D+xXZ1etxMfntKiLLSgXRw=
Subject key identifier:   3E:39:01:07:96:4C:08:9F:CF:CB:56:D2:3B:D7:D4:F4:EE:EE:89:1D
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       36C36B718F6809D30B0744A303F365399650C5BA
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa
Signing time:             Thu 18 Apr 2024 23:17:38 +0000
ROA not before:           Thu 18 Apr 2024 23:12:38 +0000
ROA not after:            Thu 17 Apr 2025 23:17:38 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 19:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c3:6b:71:8f:68:09:d3:0b:07:44:a3:03:f3:65:39:96:50:c5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Apr 18 23:12:38 2024 GMT
            Not After : Apr 17 23:17:38 2025 GMT
        Subject: CN=3E390107964C089FCFCB56D23BD7D4F4EEEE891D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:84:f8:07:ad:2c:75:84:31:58:83:e9:3b:
                    dc:5c:1d:6a:a6:86:63:e4:d1:69:55:ad:57:dd:27:
                    c4:cd:5a:83:88:64:01:f1:c3:6e:3a:a8:56:96:99:
                    d9:e3:76:a7:a4:9e:d2:3d:42:26:9c:96:b4:16:a0:
                    a5:9c:af:05:60:cf:70:45:e9:9f:b9:d2:2b:6f:5d:
                    89:14:e8:4e:ec:ae:8a:4f:98:e5:00:7f:fc:97:51:
                    84:08:d6:ff:ca:04:b0:c7:26:25:12:d1:4a:9c:63:
                    94:bd:33:c9:20:85:b7:76:55:53:1d:27:5e:05:e0:
                    67:71:13:9d:2f:96:c7:71:b5:be:57:57:62:c6:63:
                    f2:12:f5:88:71:42:11:c3:75:db:5a:35:c9:1a:42:
                    b8:3a:6a:e2:39:3b:d3:33:08:5f:fa:5c:52:36:bc:
                    ca:c9:6f:57:cf:ec:47:a6:74:88:71:d7:95:89:69:
                    74:a1:0c:7c:4f:69:24:2e:a6:65:26:69:e5:34:aa:
                    de:0f:ad:06:2d:a6:eb:4c:b5:02:18:9e:f5:83:f6:
                    01:7f:5e:f0:25:fd:a4:46:c9:66:1c:1a:be:8f:7b:
                    17:63:a3:a7:d3:9b:64:51:fc:95:88:85:39:cf:91:
                    6a:18:bd:f4:9e:eb:82:83:30:83:63:ae:52:d1:c0:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:39:01:07:96:4C:08:9F:CF:CB:56:D2:3B:D7:D4:F4:EE:EE:89:1D
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626130303a3a2f34302d3430203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:60:c2:fa:6d:39:14:98:6e:ce:22:6e:6e:8c:12:61:ca:18:
         81:0b:04:c2:98:32:4d:a9:35:9e:bf:a0:ab:ea:3b:ba:b7:ed:
         90:f2:ae:4b:bb:a0:4c:36:2d:03:03:ef:0f:d3:f4:64:54:0d:
         17:73:e7:37:5d:80:0c:69:fc:96:88:66:d9:5a:26:37:1b:62:
         d0:62:b0:08:50:1f:6e:4c:97:12:48:d0:8b:72:c7:7f:f2:b3:
         2c:c8:bc:fa:82:16:15:c4:d3:9d:d8:bd:b5:2c:82:69:2b:9c:
         b8:51:6b:04:e0:e6:63:17:7c:da:cb:6c:b5:de:30:49:20:95:
         76:69:27:d0:db:6a:f6:90:a4:41:4c:af:68:eb:79:eb:42:e3:
         9d:0f:b4:1d:38:d1:26:2f:a1:42:c4:1b:b6:28:b4:07:92:aa:
         3b:ee:8c:ff:02:90:22:30:e5:93:b6:1c:93:1e:2a:14:43:42:
         22:d8:f8:9c:a3:dd:8b:f0:53:d7:78:9a:98:96:71:23:8d:ae:
         d7:c2:3f:ae:14:bc:3f:db:33:9c:9b:8f:b4:12:82:1f:6b:29:
         c3:3a:90:28:f0:65:a6:47:08:7f:c8:d2:da:ea:e5:47:e6:c8:
         7f:93:84:41:7f:76:f1:22:26:2d:cf:d5:52:9e:af:97:81:3b:
         2a:10:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 05:39:35 2024 by rpki-client on console-fra.rpki-client.org