Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323030313a3530343a3133323a3a2f34382d3438203d3e2030.roa
File:                     323030313a3530343a3133323a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          cxl0m4ZBPjXhfkMfjoqSCH4ZpyLJdOXQ0ULdTQjtUK4=
Subject key identifier:   20:64:1E:71:F9:B8:12:2A:20:5C:D3:01:F9:7E:8D:16:E9:01:96:50
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       6C868A13960BB895B33342BAE70FBBA0D4A25CBA
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323030313a3530343a3133323a3a2f34382d3438203d3e2030.roa
Signing time:             Tue 12 Dec 2023 09:19:11 +0000
ROA not before:           Tue 12 Dec 2023 09:14:11 +0000
ROA not after:            Tue 10 Dec 2024 09:19:11 +0000
asID:                     0
IP address blocks:        2001:504:132::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 08:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:86:8a:13:96:0b:b8:95:b3:33:42:ba:e7:0f:bb:a0:d4:a2:5c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Dec 12 09:14:11 2023 GMT
            Not After : Dec 10 09:19:11 2024 GMT
        Subject: CN=20641E71F9B8122A205CD301F97E8D16E9019650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e8:29:ff:3f:09:74:bd:02:9e:38:26:44:b2:
                    40:38:60:58:a9:f7:d5:6e:ee:72:72:12:54:f9:fd:
                    e9:3e:2c:3b:1e:c0:8c:93:e1:9b:0b:c2:dd:b9:e1:
                    d4:32:63:d3:76:b1:76:42:f3:b7:ef:78:2b:4b:b9:
                    43:15:35:00:fa:e1:92:d8:29:db:e8:53:9d:71:39:
                    94:3e:d5:14:4f:c6:63:39:b3:77:68:f2:19:eb:a0:
                    3d:96:26:37:f0:c8:bf:c7:32:a7:00:4d:f0:de:88:
                    ab:7f:7c:30:24:90:6f:1b:53:95:8a:3c:f2:61:90:
                    b5:54:78:93:8c:8d:5d:0a:f4:e1:07:12:b2:d6:c5:
                    80:c4:8e:39:0b:f8:81:82:80:d0:83:72:80:cd:52:
                    59:9e:b1:5c:12:05:cb:c6:01:0a:e7:1d:ed:49:a7:
                    90:20:d0:0a:d6:15:94:0d:ad:e0:ee:4d:58:1b:fe:
                    e3:5e:66:e4:56:90:5e:7a:25:02:4c:88:4d:00:be:
                    c4:50:16:7b:98:03:b1:14:80:b0:dc:ac:fd:83:c0:
                    af:a8:31:5c:c4:24:b9:e2:e2:f2:89:23:88:21:98:
                    07:f3:1d:ec:d3:2a:20:25:16:f0:89:9d:d2:1c:bd:
                    87:b1:93:da:5f:82:a2:9f:be:4a:02:b7:76:68:06:
                    4c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:64:1E:71:F9:B8:12:2A:20:5C:D3:01:F9:7E:8D:16:E9:01:96:50
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323030313a3530343a3133323a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:132::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:e2:d1:b0:34:8f:aa:70:fd:0d:76:64:54:c9:84:8f:36:70:
         f3:5b:3d:d1:95:71:43:ac:30:23:e4:76:f8:f5:5e:6b:0d:43:
         8d:0c:09:3a:0e:89:6d:21:81:29:78:a5:26:27:d8:20:75:e7:
         64:9b:4d:f4:0d:bc:24:5c:47:92:91:3b:88:37:70:12:31:b5:
         c3:35:c6:d7:63:09:70:18:9b:75:6b:a5:e4:c8:38:86:84:ac:
         89:43:11:8d:37:47:e9:98:a5:70:15:2d:ae:b6:87:6b:4d:49:
         a3:3a:4f:02:fc:90:61:8b:bc:d3:01:e3:59:15:08:7b:d8:5f:
         53:5a:63:be:bc:91:ae:eb:11:01:3b:68:fd:3d:71:d5:bd:54:
         8b:0f:d0:a0:1f:ca:68:00:a4:8e:54:71:fc:b8:42:63:f4:16:
         e3:f9:58:e7:dd:0d:e3:c3:49:c5:9b:33:86:3c:99:e4:b9:6f:
         45:1a:ab:8c:76:d6:93:d7:11:22:83:c5:5c:7b:37:af:b2:3a:
         f3:93:32:c5:b7:58:6a:7a:d2:e6:ae:88:56:ab:56:2f:07:0e:
         24:bc:42:98:b2:c6:4f:30:7f:53:49:f2:91:05:e1:62:cc:bb:
         08:78:63:51:6d:28:96:ca:92:67:87:47:6b:e5:84:e8:79:ec:
         0b:2b:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 08:30:39 2024 by rpki-client on console-fra.rpki-client.org