Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa
File:                     326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (raw, json)
Hash identifier:          f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=
Subject key identifier:   41:7C:67:56:8E:C9:E2:4D:C2:2B:00:CB:DF:46:10:81:07:AD:4E:95
Certificate issuer:       /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial:       2E52FEE5D54E84B1DC4F993BD0EF4BA0BBA98294
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access:      rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa
Signing time:             Tue 17 Feb 2026 17:44:30 +0000
ROA not before:           Tue 17 Feb 2026 17:39:30 +0000
ROA not after:            Tue 16 Feb 2027 17:44:30 +0000
asID:                     201687
IP address blocks:        2a14:7c0:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
                          rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:52:fe:e5:d5:4e:84:b1:dc:4f:99:3b:d0:ef:4b:a0:bb:a9:82:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
        Validity
            Not Before: Feb 17 17:39:30 2026 GMT
            Not After : Feb 16 17:44:30 2027 GMT
        Subject: CN=417C67568EC9E24DC22B00CBDF46108107AD4E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4b:c7:46:a3:d8:0f:70:11:94:fb:f8:04:9a:
                    93:66:44:c2:70:94:8e:fb:3a:c3:59:67:1c:68:b3:
                    cd:ec:01:ae:95:68:5c:42:b5:fd:b8:d1:9a:67:db:
                    df:b2:e3:dc:a8:83:ed:95:61:35:6c:fa:4c:79:ca:
                    82:a9:e8:ce:7b:ab:bc:93:26:b5:8f:af:fd:b8:a1:
                    50:35:e3:8f:3b:f4:45:73:86:77:a5:a2:f0:f3:ea:
                    a3:f7:cc:9e:2f:a5:6b:b5:5a:f8:7e:14:a0:2f:5e:
                    aa:11:72:7a:5d:70:37:21:e2:e7:52:02:94:e8:53:
                    7c:fa:4d:e8:99:73:0f:b1:73:22:b0:54:bb:c7:4f:
                    7c:2f:83:e8:78:7f:4f:a7:2d:07:b8:eb:d6:d1:ba:
                    bc:ff:c2:b7:a5:54:a6:c4:f0:a6:2f:f6:f7:54:36:
                    43:d1:c1:7e:e0:9d:0f:81:4a:8d:46:77:38:6c:1f:
                    0a:61:fc:11:52:0e:6e:fe:d7:6d:4c:68:58:2e:c4:
                    b4:ef:4a:a4:c1:eb:a9:01:22:fc:23:8a:25:f9:79:
                    df:d3:ae:0b:93:d1:06:ea:91:81:11:20:f6:c0:9f:
                    54:92:33:e7:9d:f1:5d:2e:75:a7:ba:c5:f8:2e:e6:
                    01:0e:35:aa:c5:09:6d:8d:e5:f9:a5:dc:75:55:e3:
                    de:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7C:67:56:8E:C9:E2:4D:C2:2B:00:CB:DF:46:10:81:07:AD:4E:95
            X509v3 Authority Key Identifier:
                keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:b3:16:cf:69:b5:81:a2:20:b5:cb:3a:eb:d2:58:97:42:fb:
         98:86:15:75:bb:f6:1d:01:d7:1d:d2:05:26:2b:7a:e6:d4:02:
         1a:0e:44:7b:b5:5c:e2:42:17:c8:d2:e9:17:f6:c1:58:eb:53:
         50:63:01:2c:46:7d:74:30:0d:ae:95:aa:3e:d9:99:6d:ab:63:
         d2:ee:37:a4:a2:99:17:f7:ae:62:4c:96:ca:9c:99:b2:81:42:
         52:e1:2d:d8:9b:e4:9d:30:f0:bc:02:1d:78:49:3a:1d:25:eb:
         3b:e9:ac:ee:8b:7c:b3:79:1b:0a:3a:d5:be:d7:d5:76:bf:74:
         f6:3c:2e:c5:7d:8b:ed:cb:c5:a7:b3:15:37:1f:00:a8:27:56:
         0a:63:c7:56:4e:3d:0a:6e:d9:30:53:a8:c7:96:77:2a:83:1d:
         a9:90:f8:ec:31:c4:4b:f8:0c:17:9a:94:db:bf:91:fc:43:21:
         34:2a:4f:25:6d:b8:8f:49:d0:bb:ce:3f:8a:18:f5:ab:4e:24:
         fa:5d:eb:10:2a:8e:3b:72:0d:da:fa:05:f8:ed:f5:8a:54:c0:
         d4:ca:70:a8:a9:96:90:c0:a0:f6:a3:aa:4a:96:48:bc:3b:1d:
         50:18:b7:7c:93:67:4b:cf:a2:88:69:11:90:10:e9:63:bf:98:
         b7:db:df:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:31:25 2026 by rpki-client