Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          CChf9OIppssPqesFmGeB75av66j7Ak1+PdSvVdL7Y0Q=
Subject key identifier:   E9:1F:3F:51:00:58:C2:8F:AA:7B:60:DF:85:8A:4F:79:E0:7B:D1:AC
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       38C2DF4F2B9E0A32CF01571C0AE6C651B1479C88
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Sat 30 Sep 2023 04:38:27 +0000
ROA not before:           Sat 30 Sep 2023 04:33:27 +0000
ROA not after:            Sat 28 Sep 2024 04:38:27 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba15::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 19:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c2:df:4f:2b:9e:0a:32:cf:01:57:1c:0a:e6:c6:51:b1:47:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Sep 30 04:33:27 2023 GMT
            Not After : Sep 28 04:38:27 2024 GMT
        Subject: CN=E91F3F510058C28FAA7B60DF858A4F79E07BD1AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e7:24:9a:49:63:0a:72:a4:3f:26:76:34:c6:
                    29:c9:f5:82:51:f6:0b:4c:05:64:11:8f:be:7a:1e:
                    6f:d0:12:95:2c:62:d1:28:55:60:6b:cf:14:a8:2f:
                    2e:b3:62:33:41:de:a6:4c:da:4c:c7:96:77:16:66:
                    2b:ce:ea:5b:12:1e:8a:6e:f9:9c:e3:18:c0:82:28:
                    9c:16:af:67:44:f9:78:98:9c:44:06:b5:62:2c:4f:
                    0f:b2:ea:80:3c:f3:c3:a1:31:a0:f2:77:77:54:26:
                    d6:29:99:b6:5e:ca:13:e2:47:ba:a2:77:cd:39:be:
                    c0:58:df:8f:77:ef:0f:0f:a1:56:36:7f:c1:b5:9f:
                    df:e8:60:d7:93:0e:f2:c7:66:2a:36:80:1c:00:1f:
                    7a:3d:55:0b:8c:13:38:98:c1:c1:49:a3:37:cd:b4:
                    c1:72:7d:df:61:f8:82:d1:28:89:ac:f0:d9:69:e0:
                    77:55:cb:06:f0:d7:68:27:a7:de:d9:0d:6b:de:13:
                    71:71:0c:57:db:fb:09:d9:7d:f9:3c:c4:7d:a6:3c:
                    d2:0e:fb:bd:bf:5e:12:70:40:aa:09:f7:82:fc:df:
                    ac:cf:8a:32:eb:83:bc:1b:a9:ca:ce:a5:e9:d9:34:
                    f8:86:18:75:85:40:c2:9d:88:40:45:f7:ed:6a:f3:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1F:3F:51:00:58:C2:8F:AA:7B:60:DF:85:8A:4F:79:E0:7B:D1:AC
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba15::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:37:da:26:6b:06:2d:28:ef:05:a7:ed:db:15:61:94:37:10:
         d2:eb:d1:ca:70:86:9f:e6:54:d0:06:ab:b2:b5:52:b8:e0:2e:
         d7:18:54:1c:38:f2:41:c9:ba:82:1d:95:7e:53:9b:b8:bb:25:
         5a:d5:8b:67:47:e7:e8:4c:8d:b0:c0:51:88:82:1a:3d:12:db:
         6d:60:0d:ae:39:0a:29:38:fe:24:d3:8c:d3:30:a9:f3:3d:cf:
         e4:f6:47:bd:51:9e:33:51:69:41:8c:21:07:30:ce:17:80:a2:
         37:10:f5:c1:05:35:1d:1e:f5:5c:7e:79:37:3b:44:f6:33:e7:
         34:e9:8d:aa:fc:3d:6b:9d:58:18:e3:75:05:c8:cd:81:e4:b9:
         55:6d:82:78:1f:55:7f:b3:ec:77:6c:e4:e7:e5:c7:4e:0b:24:
         ff:c1:87:2a:ab:de:be:80:bd:d3:b6:46:2a:81:45:13:c5:07:
         f9:d0:62:f7:9b:62:d0:0f:76:42:d7:98:3b:f2:2d:c8:20:b3:
         30:89:10:a6:c0:ea:03:cb:9d:57:03:f0:0d:63:29:1f:71:82:
         c7:fa:6e:14:02:2a:03:49:e5:39:f4:d0:6a:89:25:53:10:9c:
         73:5c:df:2b:42:02:92:53:eb:58:80:93:cd:56:95:1a:79:b9:
         58:d6:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 06:45:20 2024 by rpki-client on console-ams.rpki-client.org