Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          4J/aCbGGWG2H/F/KYGrBmi5IbGAFB17qHc9ytLEGkdk=
Subject key identifier:   49:AA:05:41:2D:FE:84:4D:E5:E6:12:50:E8:54:C4:97:18:34:87:4B
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       5AA1A065036B4CF3E27839BCA98979BA89654182
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Fri 01 Dec 2023 03:20:26 +0000
ROA not before:           Fri 01 Dec 2023 03:15:26 +0000
ROA not after:            Fri 29 Nov 2024 03:20:26 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 19:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a1:a0:65:03:6b:4c:f3:e2:78:39:bc:a9:89:79:ba:89:65:41:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Dec  1 03:15:26 2023 GMT
            Not After : Nov 29 03:20:26 2024 GMT
        Subject: CN=49AA05412DFE844DE5E61250E854C4971834874B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:8a:2c:d8:e9:5d:55:b3:04:7d:eb:b1:73:
                    57:23:36:10:82:6a:fa:af:3b:9e:ea:21:50:a7:f0:
                    fe:5c:eb:02:49:0c:ec:46:d8:d3:b5:8f:f3:97:15:
                    b7:1c:ee:64:8b:3d:b8:39:4c:fa:0a:34:3d:26:e9:
                    a3:14:ea:d3:ff:bf:a3:85:b3:7d:2d:73:eb:69:4f:
                    cb:ae:19:82:1f:3e:07:bc:6a:3c:62:cb:84:a7:51:
                    02:cd:e9:71:6c:da:64:fa:28:81:c0:cf:2c:5e:e4:
                    67:f2:a1:f6:d2:36:17:c0:ea:8c:ba:72:b2:ef:81:
                    76:f8:21:3b:47:1b:82:24:6d:4f:16:bb:4f:a1:6e:
                    df:e6:a7:30:95:fd:23:a3:d7:0b:a8:6c:dc:7f:92:
                    98:30:3f:5e:a7:5c:4c:d1:ac:57:68:d6:7b:72:2f:
                    9b:93:6a:bd:23:81:1b:8b:a8:b2:f1:ed:40:96:05:
                    14:2f:77:ca:d5:91:c4:e0:c2:c6:ab:45:b1:d3:6c:
                    36:03:58:3e:86:6d:33:61:af:d7:9f:14:e3:51:02:
                    20:62:e8:bc:3a:92:1e:c2:f8:26:ee:23:16:5e:b1:
                    e7:4b:a0:28:4f:2e:83:9d:5b:95:5f:9f:5e:7e:f6:
                    ee:9c:f9:9a:c7:ef:b9:12:96:5f:13:05:ba:cf:54:
                    2f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AA:05:41:2D:FE:84:4D:E5:E6:12:50:E8:54:C4:97:18:34:87:4B
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba17::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:81:d7:25:bc:c7:c7:0d:db:b1:62:f2:30:c1:43:3d:4d:06:
         54:5b:a7:d3:6a:ed:17:00:34:9b:85:7f:68:5f:2a:ac:e9:49:
         d6:5f:23:e0:04:f2:5d:18:6d:26:73:9c:52:fa:1f:aa:cd:42:
         fa:ec:a0:e5:3a:ff:9d:50:53:ce:8a:01:2d:7b:59:7f:06:d2:
         6f:ff:46:4a:33:29:08:a8:c0:13:7c:dd:7d:80:f0:0f:fa:e1:
         dd:74:df:22:ff:26:6b:d8:fc:60:c3:1b:d1:4b:a2:8e:de:83:
         bd:4d:04:7f:6e:ee:6a:b5:20:24:cb:cc:fd:5f:14:0e:25:23:
         af:2f:e6:c4:06:fb:2a:35:c4:7d:03:03:de:c2:b0:4f:f7:f1:
         69:c0:d6:ca:b0:f2:80:0b:79:4f:05:aa:4a:fb:0e:21:4c:c7:
         b4:6f:c0:dc:e1:36:e7:b4:6e:1b:e8:27:45:cd:ad:98:fd:21:
         69:dc:cf:88:48:7e:bf:3e:98:5f:a8:c8:d3:33:55:3c:32:2d:
         76:a7:7f:87:a8:30:42:62:96:84:82:f0:dc:d3:60:8e:1b:1b:
         88:2c:37:cb:45:7e:a4:ef:d0:95:7e:5b:18:27:21:33:09:72:
         59:12:37:a5:91:89:d2:ca:32:63:cb:40:38:8a:99:1d:6c:45:
         31:03:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 05:39:35 2024 by rpki-client on console-fra.rpki-client.org