Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          X9QPgd1Wsk3PXdq6j2W8oESVVTwYX7/iM34VCrJd78E=
Subject key identifier:   5A:76:03:DA:B7:AF:42:52:63:F9:4E:8A:17:D8:46:0C:3B:41:57:83
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       2D430FF476783DCC8B50165711BA5E4B91C68496
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Thu 18 Apr 2024 23:17:37 +0000
ROA not before:           Thu 18 Apr 2024 23:12:37 +0000
ROA not after:            Thu 17 Apr 2025 23:17:37 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba55::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:43:0f:f4:76:78:3d:cc:8b:50:16:57:11:ba:5e:4b:91:c6:84:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Apr 18 23:12:37 2024 GMT
            Not After : Apr 17 23:17:37 2025 GMT
        Subject: CN=5A7603DAB7AF425263F94E8A17D8460C3B415783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:92:19:be:9e:b4:19:d7:b0:ed:c8:b4:ab:
                    b8:4a:ee:37:b0:40:f2:80:f6:80:a8:a0:71:8c:24:
                    a9:ee:23:f2:80:f9:6d:62:6e:09:f9:17:f9:02:d9:
                    34:c3:cc:f6:a4:77:73:cd:f5:0f:5c:68:2d:93:28:
                    83:78:e6:40:50:10:25:74:a3:19:01:a9:ee:24:d1:
                    7c:4a:47:fe:73:27:29:94:c3:9e:4e:15:f3:c4:bb:
                    96:34:56:39:6a:61:2c:92:ea:81:5e:20:94:7c:06:
                    1d:eb:eb:79:9d:07:fa:99:50:40:5c:a3:f1:5c:68:
                    ae:5b:e2:3f:1f:c5:15:30:2b:26:7c:b9:9d:0e:f5:
                    58:11:46:33:3e:ed:47:47:ff:e5:ca:c9:a7:34:17:
                    cc:a8:02:50:b4:fd:33:13:d3:77:c9:77:ee:6e:72:
                    a7:ca:4d:6d:1f:f5:ba:75:f5:3a:4c:b4:4d:2e:8b:
                    95:03:88:60:d9:62:c3:46:6c:59:69:aa:a7:2c:61:
                    0c:52:7c:5d:3b:42:6e:46:c0:dc:18:d9:0a:45:17:
                    ae:60:cd:41:ba:d4:00:14:25:70:00:9d:fc:a4:41:
                    16:21:b3:d1:49:bb:0d:42:df:b7:dd:7b:b3:0e:e6:
                    e1:d7:74:64:4a:54:31:f7:17:ec:da:e3:fe:ec:7e:
                    02:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:76:03:DA:B7:AF:42:52:63:F9:4E:8A:17:D8:46:0C:3B:41:57:83
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135353a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba55::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:0a:0c:57:2b:90:6b:55:c0:4c:9b:3e:01:84:b5:a6:7b:68:
         b5:ce:1e:32:80:d0:7e:16:1b:5e:4b:d6:a3:d2:e2:6d:a3:7d:
         aa:14:4e:f6:73:10:d9:0a:48:5b:2a:b1:a3:08:58:eb:d6:bf:
         58:e4:28:c5:c4:20:72:fd:1b:9e:be:c0:c6:f6:f6:c5:d3:49:
         fd:87:a4:ce:6a:08:63:ff:ac:da:e0:a1:01:d7:20:a3:bc:46:
         d5:23:fc:cc:57:6b:1a:79:ec:ef:90:6b:d6:7a:c5:2a:ae:1d:
         99:15:5d:0e:bc:4b:9c:0e:68:64:42:52:f9:b4:40:52:17:ac:
         47:2c:eb:e1:3a:6b:97:be:92:26:3f:19:34:bf:20:42:bb:0e:
         e2:3c:7a:62:79:6d:9d:54:85:b3:b5:a3:6c:ad:6c:73:c5:4b:
         ba:0f:af:c1:cf:35:5d:10:a4:73:4b:42:1a:33:f9:45:0e:90:
         b7:2b:03:a9:cf:54:92:ee:ba:94:e3:43:13:19:6c:be:db:23:
         b5:1c:85:ca:a2:84:e4:20:dd:95:41:0f:59:d6:7d:4b:37:69:
         a1:ad:96:bc:a6:cc:99:8d:c1:2a:36:18:2d:cb:27:ff:b8:78:
         05:ff:ce:9f:1e:91:36:80:b5:5d:72:56:77:8b:85:2e:d8:0e:
         9d:3f:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:20 2024 by rpki-client on console-fra.rpki-client.org