Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233322e302f32342d3234203d3e20333934343839.roa
File:                     3137322e39392e3233322e302f32342d3234203d3e20333934343839.roa (raw, json)
Hash identifier:          VdhHr9gwcpcZ+i72rrPblruPhSg7txux0MtA4+huQes=
Subject key identifier:   AE:27:16:73:3B:00:9B:AB:00:CD:C5:87:81:65:38:F7:ED:AE:0C:0F
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       6A530C717D572CB3D82DC962B597F464783B8250
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233322e302f32342d3234203d3e20333934343839.roa
Signing time:             Sun 28 Jan 2024 22:22:51 +0000
ROA not before:           Sun 28 Jan 2024 22:17:51 +0000
ROA not after:            Sun 26 Jan 2025 22:22:51 +0000
asID:                     394489
IP address blocks:        172.99.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 07:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:53:0c:71:7d:57:2c:b3:d8:2d:c9:62:b5:97:f4:64:78:3b:82:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jan 28 22:17:51 2024 GMT
            Not After : Jan 26 22:22:51 2025 GMT
        Subject: CN=AE2716733B009BAB00CDC587816538F7EDAE0C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:da:cd:a6:c4:ec:5f:92:87:e7:36:d2:aa:
                    19:25:f7:cd:87:30:6e:91:06:70:6d:22:c8:05:8e:
                    5c:b9:48:a2:af:21:2a:77:4b:01:91:a7:2f:b9:e5:
                    96:2e:b1:42:a4:45:81:ce:3e:10:b9:54:4a:7f:87:
                    4b:fc:1e:ea:db:7b:db:8a:fb:3f:a8:44:dc:f7:89:
                    cd:5d:fa:38:44:ef:6c:e7:d9:58:a1:62:c2:85:f7:
                    bc:d2:f1:17:b9:4b:b5:0f:ed:c1:dd:33:21:c0:5f:
                    52:a6:7a:26:fb:47:7b:98:0c:31:58:8e:85:28:6d:
                    5c:5e:57:4d:2f:59:ec:95:95:36:13:28:12:37:a5:
                    75:3b:5d:ae:7b:49:e8:fa:c2:61:2b:42:ac:0a:08:
                    50:b6:2f:ba:16:36:4d:de:b3:f7:05:90:1b:e3:86:
                    1c:20:ca:2f:01:65:ba:df:da:b3:6c:b3:b4:93:f9:
                    38:fc:78:2e:0b:81:52:f9:8d:e4:68:1b:b4:37:f2:
                    1f:00:ea:96:93:0c:ee:f6:5f:69:d1:ef:2a:74:d3:
                    77:e2:57:a4:fa:7e:60:1b:31:a3:54:db:89:6a:b2:
                    92:c7:ba:eb:be:14:40:86:4d:2f:f0:10:da:16:40:
                    d6:dd:6f:91:a2:59:0e:7d:11:1e:4e:13:57:a5:0e:
                    5e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:27:16:73:3B:00:9B:AB:00:CD:C5:87:81:65:38:F7:ED:AE:0C:0F
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3137322e39392e3233322e302f32342d3234203d3e20333934343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:d0:3e:8e:04:cc:90:32:e1:bf:2e:13:7c:be:a1:fd:ca:65:
         e2:29:b8:20:04:6f:25:bf:a7:ce:c5:35:03:fc:7f:f2:65:4d:
         8e:7a:10:08:a8:fc:50:8a:eb:8b:12:32:4b:ac:74:a6:27:cb:
         41:6b:b7:e8:9c:16:3d:30:0e:56:2a:f3:99:a1:e7:dd:51:1b:
         ef:fb:c6:e4:93:2b:e9:d1:5e:c1:40:0b:36:2d:5d:30:e9:e1:
         0f:e4:4a:b0:be:ed:28:ee:f8:70:39:bd:2b:20:b7:a7:db:e7:
         f4:1e:87:d8:89:65:b9:27:13:f1:27:b1:97:a4:e5:13:42:34:
         5b:fe:79:aa:62:31:5e:23:1e:49:e3:ea:10:c6:16:e5:05:17:
         4f:97:c8:e2:da:bf:94:90:75:7a:d7:78:ef:c8:4f:13:72:98:
         db:1e:15:b1:b9:c5:45:d7:80:88:bf:58:c2:6a:5d:1f:c0:4b:
         75:ed:f6:ac:36:15:33:1f:4f:8a:b7:b3:96:4e:0e:87:0a:35:
         77:64:c0:a2:e4:bd:ad:58:08:78:33:57:77:c8:62:b0:06:b0:
         08:f3:c1:0f:8f:09:e6:d1:5a:40:7a:b9:09:c0:79:9b:d8:31:
         9a:ea:81:a0:b4:09:21:38:ea:86:b7:a8:49:f1:1b:4d:28:39:
         5a:1b:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 06:56:52 2024 by rpki-client on console-fra.rpki-client.org