Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          rC7Nzp4GoiHioeiQy7YNDmiy6i31ZBBboZWqqXskO7g=
Subject key identifier:   51:BA:03:C1:F6:DB:FC:95:25:9F:FA:9E:EB:16:27:8A:BF:C7:20:E4
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       27FE8DB2C298B93E56F720653FEBFE87AA63C9EB
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Thu 18 Apr 2024 23:17:39 +0000
ROA not before:           Thu 18 Apr 2024 23:12:39 +0000
ROA not after:            Thu 17 Apr 2025 23:17:39 +0000
asID:                     199518
IP address blocks:        2a0a:6040:bade::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:fe:8d:b2:c2:98:b9:3e:56:f7:20:65:3f:eb:fe:87:aa:63:c9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Apr 18 23:12:39 2024 GMT
            Not After : Apr 17 23:17:39 2025 GMT
        Subject: CN=51BA03C1F6DBFC95259FFA9EEB16278ABFC720E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f0:42:11:a6:fd:0a:c0:d4:a9:39:17:11:8d:
                    dc:21:19:a6:a9:b7:2a:3a:20:97:d9:4c:f4:90:71:
                    38:f6:5a:19:0e:9e:84:6d:a6:61:35:b3:5f:5c:15:
                    42:fd:7b:99:63:36:e2:b8:f0:55:09:af:be:fd:e5:
                    15:52:05:e6:4c:0a:26:3b:d3:1e:ac:47:4d:5e:e9:
                    5d:4f:82:0c:65:7a:5e:df:1b:9f:5b:02:5b:fc:d3:
                    fb:95:8b:5d:e4:a6:f1:0f:2d:66:98:99:e5:4f:b3:
                    d1:2f:a7:8b:dc:1e:56:b3:d4:cd:3d:db:61:14:11:
                    48:f0:50:55:da:de:be:79:a9:9b:c0:f9:78:e2:f2:
                    1a:3d:33:6c:0e:15:14:87:88:fe:0a:5d:6f:26:c7:
                    fe:73:7f:30:c3:57:17:44:92:09:6e:4f:1a:2f:0b:
                    36:78:4f:1a:f5:dc:89:d7:15:d6:37:18:06:a6:b9:
                    ca:dc:cb:35:8f:9c:b2:97:50:c3:f8:92:6b:ec:04:
                    5a:a9:89:bc:43:7d:27:69:f0:ec:4f:2e:07:28:d3:
                    77:59:5f:2a:db:8f:e3:4a:a1:47:0b:88:88:18:e1:
                    50:31:eb:ee:ed:a5:53:27:9f:11:21:ab:38:d9:fd:
                    3d:45:1c:91:03:e0:f0:6f:7c:e4:a2:18:52:5f:1b:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BA:03:C1:F6:DB:FC:95:25:9F:FA:9E:EB:16:27:8A:BF:C7:20:E4
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626164653a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:bade::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:f3:00:ff:e5:b7:f4:4e:be:df:e1:92:8a:07:74:bf:ba:f7:
         9e:16:40:9f:59:54:f2:cc:fc:0b:bf:a8:f6:7f:3d:31:77:ec:
         d6:77:36:b8:7f:c9:96:9d:98:45:4f:43:41:c9:c0:67:9b:04:
         6d:4e:7a:41:b8:e1:d6:26:91:10:60:85:5f:90:f4:d6:c8:f0:
         3e:60:90:23:8c:3c:7c:fe:2f:95:ab:db:86:6d:44:76:7a:1e:
         ab:1f:64:c8:f6:a1:3f:ae:da:9c:5a:2d:06:d8:b9:d2:d4:55:
         ec:c8:bc:a0:6e:fd:c1:81:f4:53:a7:d7:27:7f:95:4e:87:fe:
         8e:21:a0:e6:2d:44:20:61:77:7c:0c:c7:5d:b1:16:95:68:58:
         33:dc:8d:7b:66:b7:4f:af:dc:56:46:e4:fd:d9:65:76:1c:c0:
         cc:81:13:2b:ca:30:a0:be:ba:44:c3:18:eb:4a:66:6c:88:50:
         29:76:01:08:a6:5c:99:fa:81:63:66:4f:e3:ce:4e:05:17:8f:
         af:55:96:ab:cd:97:b7:72:bb:00:2a:7b:9a:77:95:94:11:4a:
         fe:88:01:0d:ad:0c:5f:bd:3f:ad:8a:3b:98:63:c2:80:af:4c:
         ed:fe:68:d4:76:b9:27:96:4f:a9:31:88:a0:e5:c6:97:c6:85:
         a3:49:a3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:24 2024 by rpki-client on console-ams.rpki-client.org