Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa
File:                     323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa (raw, json)
Hash identifier:          FEXy3QneomKOD6w9yOIGrRFN7L8ROtz0QX3Qy6qa07U=
Subject key identifier:   E1:C7:B1:A9:B8:AC:AB:9D:CF:7B:32:7F:F8:61:BC:24:84:1F:25:4B
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       0C439D173410D2069954EAFDBFFDF0EE1CE12107
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa
Signing time:             Mon 15 Jul 2024 08:50:06 +0000
ROA not before:           Mon 15 Jul 2024 08:45:06 +0000
ROA not after:            Mon 14 Jul 2025 08:50:06 +0000
asID:                     7721
IP address blocks:        2602:feda:be0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:43:9d:17:34:10:d2:06:99:54:ea:fd:bf:fd:f0:ee:1c:e1:21:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:06 2024 GMT
            Not After : Jul 14 08:50:06 2025 GMT
        Subject: CN=E1C7B1A9B8ACAB9DCF7B327FF861BC24841F254B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:72:65:29:1b:eb:ca:f3:91:f5:f0:75:8d:
                    e9:60:ef:13:9a:fb:29:59:85:f1:c0:29:44:21:b4:
                    3e:94:3a:b0:3e:5a:09:14:bb:8b:ae:8c:81:3c:6e:
                    75:fd:13:39:23:ad:b0:ad:17:dd:24:d4:00:70:ca:
                    6d:bb:be:02:b7:c6:09:98:c4:de:f5:a1:95:20:59:
                    a2:a2:79:e1:70:a8:f8:0d:92:19:aa:15:e6:5f:94:
                    be:18:6d:a9:f4:86:5a:4e:7b:95:b4:b4:b0:ac:39:
                    c9:d7:6b:db:2a:bf:c0:6b:0b:e8:ec:9c:16:fb:d1:
                    50:79:0f:82:36:02:9b:40:c5:99:cf:fc:05:e7:61:
                    81:14:47:02:20:e4:48:e2:ba:d5:88:db:08:cb:15:
                    34:17:6b:51:f1:e1:2e:e5:00:41:e7:9f:0d:77:ec:
                    85:b7:24:4d:b6:60:80:6e:fc:ec:c3:25:f7:74:dc:
                    41:0b:c8:e4:fe:87:a9:18:34:c2:0f:52:a3:36:8c:
                    bc:88:f4:da:93:fa:99:31:03:df:81:7c:54:cf:cf:
                    67:56:43:20:97:4a:db:94:ae:55:58:98:e6:db:40:
                    9f:89:1e:78:73:44:03:43:3e:20:fe:9b:01:e0:2d:
                    e5:a0:2b:fc:49:2a:b6:63:a9:fc:db:ed:ef:d5:9a:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C7:B1:A9:B8:AC:AB:9D:CF:7B:32:7F:F8:61:BC:24:84:1F:25:4B
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         39:b9:5d:c8:10:ce:e2:45:76:f1:77:64:ba:c4:46:6e:58:33:
         c4:83:1d:e9:17:f2:0a:cc:15:90:36:5f:8f:c4:4b:1f:bf:cd:
         c6:c2:3c:49:6c:c8:a6:66:62:28:cc:b0:e7:9c:f9:25:69:1d:
         c4:0c:ba:ab:96:2e:a4:ce:44:9e:af:ec:ef:12:01:75:b3:40:
         ec:99:a5:15:97:27:68:36:0d:bf:f3:76:90:7b:08:80:f9:c1:
         a1:f7:f0:c1:ef:f7:e2:3e:3f:78:27:60:28:c7:06:4f:cc:da:
         9a:b2:40:b7:b4:3e:dc:0a:1f:82:73:06:17:30:69:b1:35:c6:
         14:38:c7:8a:93:1f:28:c5:c9:02:d0:94:e2:b2:4d:24:04:08:
         58:64:86:bd:aa:d1:5d:55:d2:ee:f5:de:8c:ee:a0:97:13:4b:
         2a:12:91:79:12:4d:85:2a:cd:6a:0a:e8:8d:a4:d0:d1:a2:50:
         60:18:e1:65:71:7e:88:da:34:26:b4:d9:ed:9b:f2:3c:81:34:
         70:4c:43:56:4a:1b:03:2c:34:c2:51:33:df:8e:b9:ea:b4:d1:
         fb:87:f1:55:ec:46:8d:27:70:f0:ac:7b:7d:3c:16:08:de:e5:
         b6:a5:1f:5d:ee:7d:5f:50:30:62:f8:9a:aa:3a:9a:f3:63:28:
         94:4d:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:01:48 2024 by rpki-client on console-ams.rpki-client.org