Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa
File:                     326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (raw, json)
Hash identifier:          Ztcy96Dwg3pSnqetqIfIOjkBLuGr93fCAYjtGhQ+ZSI=
Subject key identifier:   64:4A:CC:2A:37:2D:66:2B:C3:59:81:84:03:EA:E3:A7:A2:D8:C7:DB
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       1FC8F2ACF161C154DB3B553FB18745C683F8066A
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa
Signing time:             Tue 06 May 2025 08:50:49 +0000
ROA not before:           Tue 06 May 2025 08:45:49 +0000
ROA not after:            Tue 05 May 2026 08:50:49 +0000
asID:                     58339
IP address blocks:        2a05:dfc1:5f25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c8:f2:ac:f1:61:c1:54:db:3b:55:3f:b1:87:45:c6:83:f8:06:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: May  6 08:45:49 2025 GMT
            Not After : May  5 08:50:49 2026 GMT
        Subject: CN=644ACC2A372D662BC359818403EAE3A7A2D8C7DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9a:de:21:2c:79:7d:db:b2:88:35:3e:1c:53:
                    8a:f9:fb:da:67:58:a2:a9:b7:6d:c1:5e:12:92:d2:
                    a2:85:41:4a:ba:b5:17:40:b5:4b:2d:d7:12:99:de:
                    78:a8:c4:c4:97:ca:be:b5:5b:74:02:bc:33:5c:38:
                    ef:ef:97:53:64:cb:c7:b5:a4:e1:e7:4b:f6:9a:be:
                    5d:86:f9:e0:00:50:86:0b:af:84:eb:15:8b:c3:96:
                    8f:c5:0d:ed:6d:59:8c:64:9d:eb:3a:8c:b9:7c:9c:
                    e9:5c:42:5a:a5:ca:6b:b3:b6:95:02:37:41:49:ae:
                    0f:c8:b5:ad:0d:ce:fe:57:22:6e:ba:ed:3d:59:98:
                    6e:e0:6a:13:72:3a:aa:a9:ce:16:07:86:a3:61:b9:
                    ea:e4:4f:1d:27:8c:a1:0d:28:a4:10:9d:a0:77:24:
                    6a:c1:f8:f2:21:9a:54:ad:fd:d9:83:a1:70:25:7e:
                    e6:a1:9a:16:ae:38:74:57:fd:5a:b6:89:0e:d8:d1:
                    a8:cd:87:04:c8:e7:3b:9b:9d:5a:98:49:c5:ab:60:
                    f1:73:a4:74:90:33:2a:65:f2:e4:6d:93:99:a0:06:
                    c1:78:ca:a5:3d:46:b8:9a:d7:27:0c:74:d5:7e:2f:
                    b2:76:20:8f:67:4e:93:e2:84:ba:31:90:64:8d:10:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:CC:2A:37:2D:66:2B:C3:59:81:84:03:EA:E3:A7:A2:D8:C7:DB
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:5f25::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:a8:d6:55:1d:1c:14:62:c9:73:d4:64:54:2f:e8:19:2d:02:
         ad:dd:47:52:30:3b:b2:6c:70:8b:0b:75:0c:bc:b2:1a:b7:83:
         c6:07:d2:b0:f1:89:b0:8d:d4:3f:2f:fd:6e:4f:db:34:8f:07:
         ab:57:d4:15:6d:97:cd:05:35:b0:b5:98:17:22:54:44:dc:8d:
         56:4c:d2:54:4c:d6:82:5f:af:eb:d9:40:a3:6d:92:2e:50:61:
         15:75:29:90:7b:1d:91:91:bd:e2:13:b2:9a:d0:93:5a:d1:a7:
         15:5e:28:0d:f1:96:51:32:30:a6:ea:94:33:41:8c:fd:29:cd:
         3c:3d:90:29:eb:af:4f:19:c5:f0:f1:c7:2e:58:f6:da:9e:06:
         0f:c5:6a:a8:6d:e1:a5:52:a6:c8:b9:c7:26:e9:fa:60:a2:a9:
         30:ac:d4:01:65:b2:ae:99:08:e1:86:fa:ff:3b:7b:4a:f3:36:
         2f:8e:d1:79:aa:29:9e:37:cb:76:04:31:53:ef:f1:cb:4d:17:
         a0:3d:71:39:29:48:f9:5f:60:0b:4a:7b:d7:da:eb:b6:00:53:
         6d:28:d8:08:cb:78:61:8e:e0:fd:f8:3c:64:85:e2:6b:fe:04:
         9e:d2:1d:02:ef:51:3f:e0:c4:75:fa:34:77:87:e2:12:e2:93:
         aa:5c:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:51:11 2025 by rpki-client