Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          xLKVYaxEkZFQUXjwVLll4XOe4MGPaqYal0dhCBtye1Q=
Subject key identifier:   06:4E:5D:40:9F:D7:13:C8:F4:AC:05:80:1A:4D:2C:51:53:EB:1F:0F
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       5D35282D2DDAE2027BB3216F9CFF332D96D07B49
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Wed 09 Aug 2023 00:51:52 +0000
ROA not before:           Wed 09 Aug 2023 00:46:52 +0000
ROA not after:            Wed 07 Aug 2024 00:51:52 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 19:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:35:28:2d:2d:da:e2:02:7b:b3:21:6f:9c:ff:33:2d:96:d0:7b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Aug  9 00:46:52 2023 GMT
            Not After : Aug  7 00:51:52 2024 GMT
        Subject: CN=064E5D409FD713C8F4AC05801A4D2C5153EB1F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:82:d4:01:f8:a6:ad:34:8a:ae:62:b4:d3:
                    3b:d4:b9:3e:c7:55:c0:b4:1a:a6:df:04:a2:d2:cf:
                    1e:fd:30:1f:c0:5b:1f:fc:2a:54:95:10:16:fb:2d:
                    32:8a:32:7b:78:bf:b3:db:51:92:2f:49:d0:e3:b2:
                    c6:13:8d:c0:9d:a1:dd:e2:19:6c:be:a0:61:e8:10:
                    15:a2:78:c7:09:0a:bb:c0:41:e5:a3:e2:ba:5a:66:
                    cf:87:31:87:90:1d:50:52:44:52:f6:19:ab:02:4c:
                    60:71:7c:11:da:41:a3:70:e0:9c:d0:72:2f:2e:09:
                    ab:3a:36:74:dd:81:2c:8b:aa:76:62:83:ca:f2:87:
                    9a:df:48:b3:7b:62:e0:2b:28:06:fb:56:52:57:9c:
                    e2:b1:3a:a7:3c:77:53:10:0a:43:76:fa:d4:16:83:
                    ff:f7:ef:d1:fc:9f:09:8f:88:49:05:f3:57:99:13:
                    ba:24:d4:b5:2d:7f:4d:25:ff:3a:4f:14:37:7a:ba:
                    c2:48:ad:a5:49:11:57:2e:1a:14:3b:f4:8a:cc:e8:
                    e4:02:a7:de:a0:a0:c8:05:b3:f9:c9:66:35:02:5d:
                    cf:8a:31:95:27:ed:47:34:86:9e:64:c0:54:43:1b:
                    88:28:94:7d:37:17:19:01:bf:c2:67:85:67:e3:58:
                    7d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4E:5D:40:9F:D7:13:C8:F4:AC:05:80:1A:4D:2C:51:53:EB:1F:0F
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131643a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:3e:ea:9c:b4:8e:d3:3d:90:2e:13:20:ab:13:2e:ab:8c:0f:
         22:e7:3c:76:d3:87:45:8f:1e:a2:7b:3d:9b:15:3f:8f:17:fc:
         6b:f0:f5:c4:29:83:e5:ca:69:36:5a:ca:73:98:de:08:8e:ec:
         b8:e4:6c:6e:60:4c:92:10:e6:56:1c:61:c1:2e:1e:f1:05:d6:
         c9:4a:42:f4:18:87:b0:63:88:e0:15:71:80:ea:a6:2d:ed:86:
         d8:ba:a1:56:b1:cb:fd:02:f9:09:90:47:8f:bf:86:14:06:b2:
         ad:70:c8:af:50:06:02:04:6c:ad:81:af:31:32:2b:66:82:6d:
         73:07:65:80:50:9f:05:ff:2b:9b:f9:2f:34:62:9b:7f:3a:1b:
         dd:4a:34:13:a8:61:31:c0:56:fa:0a:f6:49:3d:41:39:92:aa:
         86:ca:eb:f0:9a:6b:43:a9:b6:6f:bc:20:d0:76:4f:9f:19:b5:
         2c:42:ea:1d:5b:c9:64:c4:6a:b0:92:49:7f:03:45:7f:e1:55:
         a6:ea:79:ab:ed:62:3a:45:50:66:5b:9d:6f:80:20:a4:f1:d4:
         38:77:f0:26:b1:3a:a1:b0:0d:be:18:02:20:0f:17:4c:af:f8:
         50:ed:2f:16:b8:fe:32:58:2d:ba:50:16:88:f4:7c:df:b1:08:
         d7:04:94:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 05:39:35 2024 by rpki-client on console-fra.rpki-client.org