Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa
File:                     3230342e31302e3139342e302f32342d3234203d3e203631303033.roa (raw, json)
Hash identifier:          NOqVJ06BqrVMIfjordNPa98jWqnPgq3H0cu4HoMGf9Y=
Subject key identifier:   7B:65:1A:3D:B1:50:F1:C1:D9:CF:E5:17:F1:C5:C0:03:B3:3C:CB:52
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       698C91CB09818E6EA052F9A657CE7D4FBD23EA59
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa
Signing time:             Sun 17 Mar 2024 10:27:23 +0000
ROA not before:           Sun 17 Mar 2024 10:22:23 +0000
ROA not after:            Sun 16 Mar 2025 10:27:23 +0000
asID:                     61003
IP address blocks:        204.10.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 05:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:8c:91:cb:09:81:8e:6e:a0:52:f9:a6:57:ce:7d:4f:bd:23:ea:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:23 2024 GMT
            Not After : Mar 16 10:27:23 2025 GMT
        Subject: CN=7B651A3DB150F1C1D9CFE517F1C5C003B33CCB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:3b:ca:3e:47:dc:57:da:6d:61:8c:8c:88:
                    36:40:1b:bd:91:e3:d9:bf:8f:a1:26:a0:b3:12:8c:
                    62:ba:db:67:20:69:db:5d:63:7e:52:cd:b9:71:09:
                    cd:3e:a1:e4:3e:40:a5:22:95:c2:cb:f4:b2:02:44:
                    aa:e6:65:3d:ac:37:37:54:8f:e1:40:ce:ed:36:14:
                    ed:0b:77:bf:7a:8f:33:63:06:8c:48:63:64:dc:40:
                    c5:d5:1b:11:d8:84:cd:d0:10:28:ae:8f:5d:c0:de:
                    56:dd:20:4a:f9:68:43:28:2b:9b:5b:96:7a:43:98:
                    97:cd:df:e2:0e:c3:34:7d:53:13:d7:e9:0a:14:1d:
                    f0:dd:45:a2:0f:ea:21:f7:2f:18:62:a4:28:45:5d:
                    18:6a:5a:47:97:77:39:e5:c2:97:eb:e0:cf:a9:af:
                    15:1c:8d:20:d0:99:27:07:48:1d:cc:bd:1f:66:82:
                    16:f4:9b:3b:70:65:f9:29:b8:da:8d:4d:fd:0f:02:
                    6c:32:5f:5b:5b:ba:ef:ac:e8:ef:c7:04:17:e6:f3:
                    34:98:10:b0:87:b5:28:a3:cc:ca:86:bf:14:af:d0:
                    cc:6c:4e:55:76:04:51:79:86:e7:1a:7d:9a:f4:80:
                    e7:99:5c:73:de:1b:c2:4c:47:fb:ea:94:27:02:ff:
                    b4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:65:1A:3D:B1:50:F1:C1:D9:CF:E5:17:F1:C5:C0:03:B3:3C:CB:52
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/3230342e31302e3139342e302f32342d3234203d3e203631303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:48:91:ad:f8:b4:5c:6d:e8:73:cf:29:98:01:27:e9:6a:eb:
         cd:90:f0:eb:13:c8:4e:1c:14:2a:26:ea:31:32:db:53:88:ab:
         61:3c:91:6a:32:4b:63:ea:e1:ba:e1:65:f0:e0:1b:ef:bb:4f:
         6d:db:2e:3c:23:f6:ca:48:33:0f:f2:d6:d0:a1:8b:ae:a6:75:
         58:23:5d:0d:5f:dc:6f:75:70:cf:e3:35:e7:6d:03:60:a0:00:
         12:c7:fd:26:ce:45:df:87:92:43:6a:59:5f:d7:f4:25:65:a4:
         3d:aa:66:b6:40:1e:40:98:17:a3:76:02:ab:30:7d:e7:22:7b:
         f6:5d:34:74:28:cd:16:5e:9e:8f:f2:0d:77:8f:67:e7:5f:b8:
         80:c5:e2:dc:c7:85:1a:fe:00:8a:ef:b9:43:0c:ce:39:2f:67:
         20:03:fc:f5:d1:2b:ef:7d:18:24:14:32:97:15:66:14:9e:50:
         c2:78:11:82:2c:62:6d:f0:fe:43:1a:29:69:cd:66:a2:22:af:
         1f:c0:6d:49:eb:d0:bc:b6:ac:6c:2f:87:78:0f:f0:ae:01:8a:
         1f:f5:73:2a:27:7e:16:30:0f:37:8f:ad:1a:6f:e0:7f:8d:83:
         5c:7f:57:a0:54:46:12:68:97:55:4d:a8:65:78:7a:73:25:34:
         03:bc:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:31 2024 by rpki-client on console-fra.rpki-client.org