Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/2/326131343a3763303a333830303a3a2f34302d3438203d3e20323135353830.roa
File:                     326131343a3763303a333830303a3a2f34302d3438203d3e20323135353830.roa (raw, json)
Hash identifier:          OiIXAtns3uXFvVWOl31TEqksY0fuCEYEgxh1kGMMPqM=
Subject key identifier:   EC:E3:D6:2E:1B:01:BF:53:C7:7D:A6:D6:78:35:30:39:78:05:26:7F
Certificate issuer:       /CN=67D62A55D09A0E54797A7BAD5C400454D5529546
Certificate serial:       3CBD2332BE3864142BCB7CCD1F1111552E91F558
Authority key identifier: 67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/2/326131343a3763303a333830303a3a2f34302d3438203d3e20323135353830.roa
Signing time:             Wed 29 May 2024 14:15:43 +0000
ROA not before:           Wed 29 May 2024 14:10:43 +0000
ROA not after:            Wed 28 May 2025 14:15:43 +0000
asID:                     215580
IP address blocks:        2a14:7c0:3800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl
                          rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jul 2024 13:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bd:23:32:be:38:64:14:2b:cb:7c:cd:1f:11:11:55:2e:91:f5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D62A55D09A0E54797A7BAD5C400454D5529546
        Validity
            Not Before: May 29 14:10:43 2024 GMT
            Not After : May 28 14:15:43 2025 GMT
        Subject: CN=ECE3D62E1B01BF53C77DA6D6783530397805267F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:ec:1d:73:05:35:34:9c:6f:f2:ab:0f:8b:
                    41:8b:89:ca:b0:5a:bd:61:14:e0:b1:d4:4b:29:06:
                    dd:8d:0d:fb:7d:72:d3:77:ec:c4:d8:e2:e8:12:26:
                    cb:ba:88:26:91:ca:e9:a5:7a:b5:a4:b8:34:c2:8d:
                    51:6c:1b:35:ba:f0:cd:99:f2:8f:1c:fe:ef:94:ba:
                    67:96:eb:30:87:ee:a0:d7:39:12:64:6b:75:eb:ac:
                    52:72:c3:8f:e1:b3:c4:c3:41:98:c4:db:e1:bf:a1:
                    81:12:ef:88:51:e8:29:a6:1f:ef:b1:b0:69:73:a6:
                    cc:6b:70:8c:6b:4b:69:8e:8e:5f:c6:2e:fc:d5:d3:
                    45:7a:12:43:5f:d1:cc:e1:c6:66:10:24:61:d3:37:
                    7f:35:7f:5d:04:aa:c0:99:09:3d:6c:8c:f1:69:ef:
                    70:a8:e4:5e:eb:f9:f8:fc:c5:94:76:1c:86:1e:44:
                    45:74:4c:0c:bd:f7:83:12:48:71:2e:37:d5:ec:3d:
                    43:38:5d:74:61:68:14:76:e1:a8:15:e3:9b:fb:ab:
                    0b:e0:bf:3e:3d:a4:7f:22:e2:e3:a9:cc:2c:c4:31:
                    cf:ec:66:a3:19:fa:fb:7e:32:7e:24:33:fe:ef:95:
                    7e:8f:8d:4b:3f:b4:95:26:01:af:24:68:82:d0:41:
                    ba:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:E3:D6:2E:1B:01:BF:53:C7:7D:A6:D6:78:35:30:39:78:05:26:7F
            X509v3 Authority Key Identifier:
                keyid:67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/2/326131343a3763303a333830303a3a2f34302d3438203d3e20323135353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a9:2d:ce:13:9d:50:e6:26:86:4b:66:1f:ce:45:fa:b7:5f:23:
         65:aa:82:83:2d:87:1a:e8:85:f1:c7:aa:1c:5d:de:4a:0c:4a:
         64:19:49:93:b7:bb:a6:0b:cf:50:6f:28:73:77:cd:42:8f:f8:
         87:2c:10:22:16:3b:36:64:1e:7e:06:ea:bf:d3:ba:17:b4:2d:
         8f:bc:fe:fa:e6:d9:b9:b1:e2:e4:a5:89:a4:7c:22:bd:c2:61:
         d5:b2:e2:b7:c3:77:40:5e:4f:dd:32:be:25:71:af:c4:94:27:
         4c:87:f4:0d:b3:a2:a1:b7:84:e5:59:a7:6c:0c:89:f6:44:30:
         2c:a6:7c:e8:1c:56:77:fb:b8:24:d2:70:56:60:42:57:04:e9:
         33:1e:0d:11:61:60:e5:c8:f7:6d:20:ac:51:6d:8f:11:66:28:
         91:9c:9a:a3:6e:80:e7:83:b3:2a:bc:47:32:fd:56:88:9e:ba:
         e1:93:a7:68:9a:bc:c7:d6:50:fd:06:8c:12:ce:a4:c2:c3:52:
         66:df:73:17:de:62:c7:a0:53:88:70:31:6c:cf:cd:3c:73:e1:
         4f:dc:2f:fc:6c:cc:9f:33:22:85:99:ff:d1:d1:6a:d0:71:75:
         14:18:a8:92:b8:c1:51:df:50:42:34:2a:62:40:9b:12:0a:7f:
         51:5f:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 17:35:13 2024 by rpki-client on console-fra.rpki-client.org