Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa
File:                     326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          BOd7syI7Ok+X0bWXsAhUkQkLasuEqHr2z2T8LqCxrws=
Subject key identifier:   C5:6B:69:E9:CB:A3:FA:3E:E1:D2:DF:44:91:EC:A4:C2:90:77:DC:6B
Certificate issuer:       /CN=756560C5B960222CE81AF47A8B758E1741461E7F
Certificate serial:       3D8753CD2E13ABC35844B80BCB5EDF5D34F247B9
Authority key identifier: 75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Thu 18 Apr 2024 23:24:26 +0000
ROA not before:           Thu 18 Apr 2024 23:19:26 +0000
ROA not after:            Thu 17 Apr 2025 23:24:26 +0000
asID:                     199518
IP address blocks:        2a0a:6040:baff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:87:53:cd:2e:13:ab:c3:58:44:b8:0b:cb:5e:df:5d:34:f2:47:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756560C5B960222CE81AF47A8B758E1741461E7F
        Validity
            Not Before: Apr 18 23:19:26 2024 GMT
            Not After : Apr 17 23:24:26 2025 GMT
        Subject: CN=C56B69E9CBA3FA3EE1D2DF4491ECA4C29077DC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:a6:8a:86:a0:ac:20:ec:7b:84:fb:ad:b3:
                    df:ef:b2:6b:ac:89:d9:8c:63:e1:95:49:1e:53:7b:
                    a1:22:85:b0:33:cf:11:35:f2:ac:87:76:78:a9:3e:
                    07:55:fa:b8:33:ec:2f:e8:2e:14:b2:55:47:f5:14:
                    66:a3:fd:aa:f9:8e:9e:10:a5:f4:bd:d6:2d:e5:f5:
                    f1:74:7e:d3:28:bf:a1:e7:c0:88:e7:60:27:ff:0d:
                    f0:54:8e:59:88:9b:82:af:4d:3e:a5:ef:ea:5c:3e:
                    c1:38:24:4f:13:f7:74:23:88:df:52:c5:09:2e:e6:
                    a4:6f:95:ea:a2:4a:9a:34:0e:ff:f4:aa:1f:25:8b:
                    1c:3b:fc:e0:62:c6:20:69:c6:6d:e5:ba:1d:aa:30:
                    46:45:fc:c1:5c:05:86:45:ae:cb:22:f7:cc:c0:84:
                    53:84:e5:64:19:0e:12:80:d6:44:50:5d:cb:be:04:
                    20:dc:f2:72:16:00:73:89:bb:08:b8:6a:d8:3f:95:
                    05:61:f5:94:55:ff:d2:fa:01:c6:de:b6:d2:c5:17:
                    fb:e0:be:c1:41:ad:8a:89:42:a4:d5:cf:64:01:ab:
                    54:b1:bb:4c:f6:55:69:bd:16:fa:4f:b1:7d:fd:0b:
                    36:8c:42:a4:85:27:26:2b:aa:b1:9f:66:2f:1d:68:
                    9c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6B:69:E9:CB:A3:FA:3E:E1:D2:DF:44:91:EC:A4:C2:90:77:DC:6B
            X509v3 Authority Key Identifier:
                keyid:75:65:60:C5:B9:60:22:2C:E8:1A:F4:7A:8B:75:8E:17:41:46:1E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/756560C5B960222CE81AF47A8B758E1741461E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/756560C5B960222CE81AF47A8B758E1741461E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/1/326130613a363034303a626166663a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:baff::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:e9:04:67:23:63:a5:eb:b1:4c:df:fd:e8:5c:e1:86:b6:
         c6:e7:5b:59:68:4c:a3:72:26:20:89:04:53:0f:8d:40:07:4d:
         b3:11:24:8e:0d:0d:fd:3e:9b:93:cc:6f:aa:9e:67:cf:e1:54:
         1b:a4:28:ed:3b:29:39:2e:8d:45:a9:8e:52:6b:40:7c:a5:97:
         a7:85:bd:59:f6:5d:1c:c7:02:88:c3:18:e6:55:33:06:8b:36:
         40:7a:1e:98:74:28:52:71:ce:97:3b:5f:61:b4:74:57:2d:23:
         94:22:dd:f7:cf:a9:f2:df:cd:9b:4f:05:68:88:df:6c:eb:c5:
         8a:f1:af:80:05:4b:1f:d2:35:fe:4f:c4:c1:3c:36:10:c1:34:
         a1:af:53:1b:3f:65:c8:dd:88:95:f1:7a:b7:d0:fe:8d:58:8c:
         2a:64:62:72:1b:f0:b2:f7:b6:58:09:97:19:d5:69:bc:dc:bb:
         e7:4c:68:87:27:aa:71:45:0e:a5:87:dd:ab:42:43:07:9e:40:
         ca:86:57:64:18:32:6c:88:42:69:23:2a:e7:22:9b:9e:98:cb:
         f4:71:c5:1c:ad:78:dd:72:07:01:d9:09:1e:e9:28:39:48:bd:
         d3:bd:dc:bd:4a:b0:23:7b:e9:48:b0:b2:cf:b7:ab:37:2e:f0:
         f7:87:46:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:20 2024 by rpki-client on console-fra.rpki-client.org