Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa
File:                     323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa (raw, json)
Hash identifier:          cSRfrN4Msr8fmJIMWgK4GYdBu1amhYgNI80sG4VqEqY=
Subject key identifier:   39:FB:B5:50:FF:3E:54:4A:88:32:B2:6A:91:9E:26:0E:3D:4C:79:DF
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       63F45966CBD1E2D88522188249E37C7A46EA181B
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa
Signing time:             Sun 07 Jul 2024 07:48:10 +0000
ROA not before:           Sun 07 Jul 2024 07:43:10 +0000
ROA not after:            Sun 06 Jul 2025 07:48:10 +0000
asID:                     54197
IP address blocks:        2602:fcd3:200::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 05:28:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f4:59:66:cb:d1:e2:d8:85:22:18:82:49:e3:7c:7a:46:ea:18:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Jul  7 07:43:10 2024 GMT
            Not After : Jul  6 07:48:10 2025 GMT
        Subject: CN=39FBB550FF3E544A8832B26A919E260E3D4C79DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:9e:08:39:55:61:19:a2:a6:3f:1d:c0:99:
                    a5:38:1f:65:bd:15:86:46:d2:3f:f6:bf:78:2f:f5:
                    4d:72:42:11:b0:97:75:d2:00:4f:fb:fa:af:f1:0c:
                    dd:77:a8:3f:e5:c6:be:71:54:19:2e:5e:60:04:23:
                    a2:d2:00:d3:d2:27:7b:ee:d2:02:9b:4f:c3:33:f2:
                    07:80:dc:7b:4d:62:a7:a0:7d:fc:88:d8:46:a6:3d:
                    99:1a:55:5f:c7:f7:68:ab:87:fa:21:2d:12:05:05:
                    65:88:58:3c:ac:b0:31:a8:f0:28:e8:f1:3d:aa:06:
                    23:70:14:46:91:22:e7:76:14:65:b3:88:4c:ce:44:
                    fa:e2:5e:e3:16:e8:16:8c:82:f9:ef:62:da:20:ff:
                    de:09:3e:37:85:28:cc:4a:46:f0:eb:33:97:0c:cc:
                    a8:c7:bb:17:00:54:cf:b8:29:39:3f:0f:a9:a0:6d:
                    3f:d4:f2:17:4d:f6:85:04:79:97:96:20:c8:9b:5c:
                    ac:66:37:54:2f:b0:37:8f:83:35:db:da:20:e6:7a:
                    8c:14:76:37:f5:7c:61:29:51:3f:84:93:fe:5b:f5:
                    51:3e:94:1c:5e:64:52:2d:c1:a5:0f:5f:82:12:a0:
                    14:e0:ac:95:af:79:c9:40:9b:a7:6d:7a:9b:21:47:
                    f4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:B5:50:FF:3E:54:4A:88:32:B2:6A:91:9E:26:0E:3D:4C:79:DF
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a3230303a3a2f34342d3438203d3e203534313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:200::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:83:4c:57:f0:09:6c:c5:ec:94:85:71:a3:4c:43:ed:e9:27:
         15:24:8e:53:ed:39:73:cd:8a:06:d4:db:35:0b:9a:c0:03:7e:
         3b:1d:c1:d1:c6:1e:81:e9:81:04:ba:d4:0b:6c:f9:5f:68:9a:
         f1:32:83:bf:57:4c:49:31:ef:05:5d:1c:4f:bf:31:b6:51:4b:
         d6:b3:7f:8b:bb:95:01:bd:08:c5:23:28:2b:a8:af:b7:a6:c5:
         2d:62:85:8c:60:17:a4:e7:9a:82:21:b3:29:d6:7c:a5:63:90:
         aa:a9:dd:3c:30:17:8d:15:4b:ec:41:2a:a9:8a:5c:9a:89:f3:
         9a:d4:93:25:bb:ee:e2:ec:8c:c5:30:2f:bf:90:80:38:51:d2:
         c5:4f:b8:6d:b3:e7:2d:29:df:81:30:fc:ff:68:4a:a3:04:88:
         39:93:59:78:6c:d7:af:8a:37:a4:af:f3:8c:dc:a1:1e:1d:56:
         5e:36:d9:d2:c6:86:13:34:b5:65:ea:f7:0a:10:c1:d8:36:87:
         f1:61:5e:d8:55:60:34:4b:79:76:92:cb:d9:ef:7f:db:1c:fa:
         a2:18:06:13:63:55:7f:e3:55:7b:b0:ab:e3:d0:46:7e:40:0b:
         ac:d1:03:06:bf:8a:c2:fc:9c:f0:60:b4:38:46:a4:17:fd:57:
         c0:f6:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:50 2024 by rpki-client on console-fra.rpki-client.org