Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          ujafko6Du8oL8es1Gnrowrgg1edgn5M5VsXv5iUwkb8=
Subject key identifier:   BF:9D:57:A3:61:94:BF:7F:B8:F9:2F:1A:B1:6C:A8:40:FC:DB:65:EF
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       532218AADA403761216DEE3777B57E94406B1B09
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Mon 12 Feb 2024 15:20:53 +0000
ROA not before:           Mon 12 Feb 2024 15:15:53 +0000
ROA not after:            Mon 10 Feb 2025 15:20:53 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:22:18:aa:da:40:37:61:21:6d:ee:37:77:b5:7e:94:40:6b:1b:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Feb 12 15:15:53 2024 GMT
            Not After : Feb 10 15:20:53 2025 GMT
        Subject: CN=BF9D57A36194BF7FB8F92F1AB16CA840FCDB65EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:d1:bb:66:fa:29:ac:94:6d:5e:ce:cb:62:
                    47:b1:e6:7b:90:86:6e:d4:94:0b:11:f2:80:7c:17:
                    c5:4c:d7:a4:39:21:3a:4e:87:29:0c:f3:ec:58:12:
                    52:54:fc:be:99:7f:d6:5f:ff:f0:3b:45:0c:05:e0:
                    1d:2b:0a:dd:9d:e1:3d:27:f7:f4:8f:44:b1:81:ed:
                    a7:d8:8f:31:f9:30:66:47:ba:aa:9a:ea:14:32:43:
                    6b:fe:b6:0c:b2:98:78:16:df:63:ed:44:61:7d:07:
                    31:17:3d:51:ac:df:fd:02:7f:8c:32:fe:4e:3e:8a:
                    6e:6a:f0:d4:8d:68:38:28:a5:24:a2:5b:30:e1:41:
                    ea:77:08:bf:8e:28:03:e1:16:47:d9:66:94:b6:9d:
                    84:b3:ba:28:eb:ca:58:06:5c:1f:11:11:42:b4:13:
                    5d:a2:a9:37:42:ef:f0:4d:fc:b6:01:46:66:de:65:
                    95:ec:77:2e:3d:4c:03:88:b3:72:83:82:a5:c5:f4:
                    a6:f8:08:1c:d1:5d:86:4e:f5:d4:f4:5e:19:0c:b6:
                    4d:1f:8b:82:3d:96:b2:d4:85:3b:45:fd:ff:2a:ee:
                    82:13:d6:b9:96:ca:72:44:55:aa:59:38:82:62:0d:
                    50:1a:e7:a3:e7:2e:b0:d7:ba:e1:73:09:ca:5d:1b:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9D:57:A3:61:94:BF:7F:B8:F9:2F:1A:B1:6C:A8:40:FC:DB:65:EF
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131313a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba11::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:6a:a4:08:39:92:d4:0c:0c:c4:2d:d6:89:2b:13:01:8a:c3:
         89:10:e5:86:ad:f6:58:7f:b9:81:5b:56:14:20:cf:36:79:8e:
         9f:46:69:bb:ec:15:75:d3:f3:fb:9d:55:03:39:2f:f0:93:44:
         ef:32:d0:c5:31:e6:b6:7d:ce:70:b4:65:b5:18:a5:de:23:51:
         24:23:06:03:a0:41:06:49:b1:30:67:c4:b2:6b:f5:15:f2:9f:
         70:81:19:20:27:a4:b0:37:54:c7:c3:3e:23:96:fe:76:c3:ac:
         5c:75:7b:9b:66:00:11:a4:23:85:ba:99:a1:fe:09:8f:ac:3c:
         fe:3b:22:f2:f5:31:82:54:84:87:6f:bc:7a:08:a7:cb:93:86:
         9e:40:7d:1f:8b:4d:7d:fa:12:c4:25:a5:6f:bd:b3:ed:35:4c:
         34:e6:e9:e1:ab:33:1c:ef:f5:18:35:0d:f3:52:82:48:73:68:
         0f:45:29:89:52:c0:7f:70:f7:0d:5d:98:91:73:a5:20:ff:47:
         20:2e:7b:51:2c:31:8d:68:00:69:d0:7a:8d:9a:5e:1b:ce:c9:
         f3:c9:d9:d7:bb:df:90:fe:39:a4:b1:dc:a3:6f:99:25:bf:88:
         47:8c:6d:bb:19:98:8d:fa:e2:09:6c:49:ed:bd:14:41:04:3e:
         bd:f3:88:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:20 2024 by rpki-client on console-fra.rpki-client.org