Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          uZbJpIkosfUtMpTvZ72K0bGA4dBq+hE6cv/P3m9w3Dw=
Subject key identifier:   6D:47:7E:38:A3:7C:7E:02:B3:1C:E0:ED:5B:6E:DE:F2:6F:FD:FB:C7
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       435F5851FBC4086F713A4426AAC5B3BD34941806
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Thu 18 Apr 2024 23:17:38 +0000
ROA not before:           Thu 18 Apr 2024 23:12:38 +0000
ROA not after:            Thu 17 Apr 2025 23:17:38 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba1e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5f:58:51:fb:c4:08:6f:71:3a:44:26:aa:c5:b3:bd:34:94:18:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Apr 18 23:12:38 2024 GMT
            Not After : Apr 17 23:17:38 2025 GMT
        Subject: CN=6D477E38A37C7E02B31CE0ED5B6EDEF26FFDFBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:6f:0a:81:09:41:78:2b:b3:59:7d:5c:12:
                    a2:e9:42:63:7f:79:aa:86:2b:d9:68:33:ef:9d:d2:
                    14:d6:b0:2b:68:a5:87:ca:03:85:a9:21:ea:7e:77:
                    55:0b:44:6a:9e:a3:e5:b8:e4:31:ff:c0:94:6b:b2:
                    31:dd:4d:3b:0e:00:32:5a:f1:6c:1d:97:ed:53:b9:
                    3a:78:fe:c4:62:54:e4:71:33:11:20:05:77:1f:83:
                    ac:e6:f0:6e:90:58:76:f5:12:29:8f:55:ab:62:45:
                    5c:93:7c:83:ac:8a:9a:36:ad:b6:3d:e9:f6:c2:71:
                    92:82:3f:0c:98:5b:7c:96:c1:e9:68:bd:b3:45:87:
                    2b:37:42:c5:6d:ee:0b:23:bd:07:d4:22:4a:3c:f9:
                    ef:4c:16:c3:03:83:24:ac:1e:bd:b1:82:ff:4b:b3:
                    e4:81:8c:50:80:d3:8d:4e:40:ae:bd:05:27:c1:9f:
                    5f:48:89:6b:0c:1d:b6:08:79:2e:35:a9:ca:88:3c:
                    53:13:f8:6e:37:dc:a0:f3:22:ef:6d:47:ce:17:ad:
                    37:ea:1e:94:c9:ad:53:b9:7d:ce:a3:65:16:5f:97:
                    c3:ea:21:0b:23:9a:bf:21:a2:71:37:56:5a:86:78:
                    72:da:9a:6b:42:4f:17:3d:e8:33:52:46:c3:07:8b:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:47:7E:38:A3:7C:7E:02:B3:1C:E0:ED:5B:6E:DE:F2:6F:FD:FB:C7
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626131653a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:2f:fb:54:90:9f:e4:d7:a1:b1:d4:73:3e:01:15:29:cf:4f:
         d3:81:87:d8:18:30:4b:af:c5:1f:74:62:56:3a:c2:91:9a:6d:
         7a:8b:35:74:4f:c2:da:e7:1c:e2:0c:3d:bd:bf:00:d9:e3:8b:
         fa:4b:ef:91:61:ba:5c:1d:e8:e7:51:f2:d3:30:f8:68:2e:6d:
         88:b6:e7:a9:70:ee:1f:56:e0:67:32:54:8d:4d:1c:3a:75:99:
         84:4d:8c:47:3f:77:69:15:a3:de:40:8e:d8:86:6e:a0:8a:11:
         f7:1e:48:c5:94:0b:af:0a:f8:a6:36:c9:ee:d0:3b:c8:1e:5e:
         02:1e:31:30:72:ca:12:a7:91:4b:a0:e6:3c:a3:57:ef:df:97:
         42:fa:b8:d3:17:83:40:a5:1b:5f:c0:02:25:53:f4:83:09:8d:
         dd:31:3d:ce:56:69:a3:09:d1:7e:2b:3c:21:15:55:8f:e4:e2:
         58:97:99:45:92:d7:0d:70:3e:c2:eb:79:0f:5d:24:40:f7:cf:
         92:8c:a5:e3:41:0a:3a:63:71:aa:44:35:f3:2c:12:78:3f:31:
         ee:92:ec:29:94:ef:a4:54:13:85:42:5e:39:64:9d:66:bf:b4:
         5c:83:fb:1d:69:47:bb:a8:6f:fc:7d:2e:44:29:c1:bc:bb:53:
         06:fa:d1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:24 2024 by rpki-client on console-ams.rpki-client.org