Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          D7y+jsJuySjplju2TgaUmD/fVbLe7pXBDuTbsHEHl8M=
Subject key identifier:   6C:00:4F:64:68:14:60:EE:76:3F:DE:15:CF:DC:B5:D4:E0:31:CD:E0
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       66DDF3C647F099A497A9A6FAB6728CAF2C8E3F03
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Wed 10 Jul 2024 01:01:19 +0000
ROA not before:           Wed 10 Jul 2024 00:56:19 +0000
ROA not after:            Wed 09 Jul 2025 01:01:19 +0000
asID:                     199518
IP address blocks:        2a0a:6040:ba57::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:dd:f3:c6:47:f0:99:a4:97:a9:a6:fa:b6:72:8c:af:2c:8e:3f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Jul 10 00:56:19 2024 GMT
            Not After : Jul  9 01:01:19 2025 GMT
        Subject: CN=6C004F64681460EE763FDE15CFDCB5D4E031CDE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:07:37:3f:79:af:07:93:76:6b:cd:21:fb:a5:
                    b7:cc:13:91:ba:05:88:58:45:b5:d0:9e:62:9b:56:
                    76:70:70:15:b4:58:0e:22:5e:a5:fc:67:53:57:7e:
                    9c:73:e1:bb:53:70:48:19:6f:a6:66:ec:ad:4e:c0:
                    53:c1:4a:2b:e5:ab:5e:ae:49:61:5b:73:8c:92:6f:
                    2e:20:94:8f:a6:0f:f1:4c:f4:40:0d:10:8b:f5:47:
                    25:77:ee:01:c4:3c:e2:d3:49:ad:94:36:0d:42:12:
                    1a:72:ea:71:5e:b9:56:7e:9d:25:61:6a:3b:81:da:
                    40:44:d0:98:35:f9:92:f7:71:ed:93:d6:dd:7f:a2:
                    76:39:cb:11:aa:ee:1d:1d:62:a6:a6:2c:b2:05:2e:
                    52:61:c0:6b:02:c8:29:6d:5e:f4:a4:26:5e:09:45:
                    2c:32:9a:86:3d:e2:fb:a6:63:bb:07:cb:11:92:ed:
                    a1:d3:e7:d5:b3:68:9f:01:9a:d0:62:e4:7b:ab:28:
                    a4:7c:91:52:59:82:7e:d8:74:21:3f:09:f8:d3:99:
                    c5:55:c6:ee:f9:73:a5:21:38:5e:53:a1:48:69:f8:
                    35:e0:61:43:4b:7a:62:06:8d:9f:c8:44:b7:e1:c9:
                    f2:00:37:16:8e:e0:9e:09:1c:dc:0f:d9:cc:96:ed:
                    6e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:00:4F:64:68:14:60:EE:76:3F:DE:15:CF:DC:B5:D4:E0:31:CD:E0
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626135373a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:ba57::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:55:ae:81:74:37:2f:61:78:05:cc:a8:9e:75:19:73:e3:61:
         92:d8:ed:02:21:8b:e1:ff:20:4d:8f:80:20:13:fd:7a:59:2b:
         4a:ba:18:49:85:28:34:7f:7c:9a:35:ad:bb:b3:cb:84:c7:9c:
         9a:1d:60:7f:d1:a1:f5:b3:9c:9e:5b:6c:d4:b2:d3:12:cb:67:
         61:d9:31:94:50:1e:f0:95:93:8b:b3:81:69:c5:13:eb:19:a1:
         8e:65:d7:26:ec:76:66:cc:2d:8e:f7:57:04:3c:69:d9:23:60:
         d9:1f:c8:d6:79:9c:43:17:41:59:ab:7d:e5:19:f4:f5:18:dd:
         e0:00:5d:47:ff:c0:fc:76:d4:c9:47:9d:a8:11:65:fa:ee:9e:
         aa:de:cc:d4:db:88:9d:e8:18:e1:67:c5:d1:5b:00:00:31:b2:
         68:50:f2:9a:67:ca:03:aa:1e:bb:db:e0:e4:7f:a4:ba:c2:94:
         f6:c9:8b:3c:fb:1e:1e:28:e4:f8:7d:41:34:94:7b:a4:e5:eb:
         5f:8d:73:a8:13:e1:04:c2:78:fb:a1:f9:ab:e3:c5:ab:78:51:
         fa:b2:d6:43:99:78:61:cf:9b:c6:6a:51:da:c5:46:54:b9:1a:
         60:84:e1:f7:49:ab:b7:7e:3b:48:98:1a:fb:55:00:2a:a9:96:
         f7:3b:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:24 2024 by rpki-client on console-ams.rpki-client.org