Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          0+qW8LVtRoEXu5/l67ghsUH9J6gv6CBY0VOVOJDX8jM=
Subject key identifier:   83:11:B1:ED:4B:8B:C8:66:C1:A9:B6:49:83:3C:2E:7E:29:79:F2:1E
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       1B147EDE15DC7E164E18B4CEAA72546281F3E315
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Fri 01 Nov 2024 04:02:59 +0000
ROA not before:           Fri 01 Nov 2024 03:57:59 +0000
ROA not after:            Fri 31 Oct 2025 04:02:59 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:14:7e:de:15:dc:7e:16:4e:18:b4:ce:aa:72:54:62:81:f3:e3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Nov  1 03:57:59 2024 GMT
            Not After : Oct 31 04:02:59 2025 GMT
        Subject: CN=8311B1ED4B8BC866C1A9B649833C2E7E2979F21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:1b:be:22:ec:cc:9e:7f:ec:27:17:d3:ba:
                    0a:3d:91:ab:f2:9d:d4:21:74:74:0d:ff:25:ab:0e:
                    5c:ca:07:eb:22:7a:5d:ad:88:62:38:b1:0f:ee:ff:
                    bd:54:b3:a0:4a:69:88:6b:fe:0c:44:10:4f:5d:3b:
                    55:c5:24:5b:04:d6:16:51:8a:cd:32:a0:1e:e3:f4:
                    ab:78:86:fd:69:88:a3:cd:45:1a:c6:8c:36:64:30:
                    bd:07:d9:49:bd:a4:78:0a:5c:ed:77:b6:fd:aa:23:
                    12:0f:40:e3:83:49:b4:6d:fd:8d:d8:5c:85:69:4c:
                    9f:0c:99:42:2e:94:60:47:13:44:ab:c5:4e:70:2b:
                    bb:1a:4f:13:29:f8:fa:17:ef:f6:5f:28:cc:45:05:
                    6d:85:19:ae:73:3f:a7:6f:ca:0a:ed:fb:4c:7e:c6:
                    e1:37:4d:83:a5:f0:e6:a9:4b:59:12:37:16:1e:69:
                    66:a4:a8:bf:66:81:c4:83:61:67:c4:39:0f:04:ff:
                    75:1f:ab:09:1f:89:cc:35:e6:5b:96:32:41:57:17:
                    2b:1f:e5:7b:5c:ad:b4:11:c5:96:eb:da:59:b9:c1:
                    58:07:31:d1:1f:7b:1e:1a:8a:97:0b:2f:47:ac:22:
                    40:8a:4d:2c:7c:d2:79:04:ba:6e:3f:09:bc:87:de:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:11:B1:ED:4B:8B:C8:66:C1:A9:B6:49:83:3C:2E:7E:29:79:F2:1E
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131373a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba17::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:e6:d8:ab:35:2a:10:c1:b0:9b:de:96:ad:24:9e:b0:8e:cb:
         df:ad:87:9b:08:8b:81:2a:3f:95:cc:a0:8c:22:2a:da:e3:aa:
         bb:0e:7e:cd:09:b2:bd:d4:2a:6b:13:2b:26:b0:be:41:5e:d2:
         20:9a:58:67:a1:cc:44:38:4d:cf:36:c6:68:b5:57:44:cc:d8:
         32:61:33:a8:f1:07:20:a4:0c:ca:56:f1:d2:5a:58:50:fa:55:
         27:98:ce:50:cf:10:61:27:c1:60:7a:9a:52:c5:40:7f:bb:17:
         b3:76:a7:1f:54:5a:c0:54:fa:39:28:89:5c:f4:c6:20:fd:8b:
         ae:ed:0f:08:2b:37:ec:4b:69:c2:e3:49:d7:7f:4c:82:e7:5f:
         b7:2c:05:97:e8:a2:b1:b0:21:43:2c:ef:80:3b:ee:76:89:a8:
         60:b2:48:5a:3e:8c:c0:05:df:aa:a1:42:0e:56:bf:ef:27:88:
         f3:49:e1:45:f5:4f:05:77:3e:6e:27:7b:06:81:a8:f0:fc:e0:
         a5:f5:b0:df:a8:7a:06:82:8f:3d:ff:2c:5c:c4:fe:45:ed:86:
         eb:0d:ae:28:df:18:1e:17:05:ce:9c:14:a2:9c:04:ec:9f:65:
         fd:7d:be:23:be:bb:e0:84:cd:04:d3:f8:3d:f2:c9:8c:24:40:
         e7:f1:8a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:24 2024 by rpki-client on console-ams.rpki-client.org