Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a323a3a2f34382d3438203d3e203532323130.roa
File:                     323630323a666364333a323a3a2f34382d3438203d3e203532323130.roa (raw, json)
Hash identifier:          NYOUsPIzosMImAzP+X6LuII0lH50tGEQ1rxIJAm65d4=
Subject key identifier:   FC:6F:B2:A4:2B:44:91:0C:3F:E7:86:EB:F7:10:96:92:EB:1D:44:27
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       27D8BC385B7EDB864C5D15D4F77DA4BC8171FCDE
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a323a3a2f34382d3438203d3e203532323130.roa
Signing time:             Sun 17 Mar 2024 10:27:22 +0000
ROA not before:           Sun 17 Mar 2024 10:22:22 +0000
ROA not after:            Sun 16 Mar 2025 10:27:22 +0000
asID:                     52210
IP address blocks:        2602:fcd3:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 05:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d8:bc:38:5b:7e:db:86:4c:5d:15:d4:f7:7d:a4:bc:81:71:fc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:22 2024 GMT
            Not After : Mar 16 10:27:22 2025 GMT
        Subject: CN=FC6FB2A42B44910C3FE786EBF7109692EB1D4427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:d7:b1:4d:01:f4:d5:dc:d9:90:86:23:21:
                    21:13:93:99:e7:61:16:5b:b9:3d:9f:9d:b8:99:0c:
                    6e:99:cb:c5:23:e9:f2:14:75:d9:46:df:84:61:e8:
                    67:71:45:f8:ae:c2:fa:40:f0:b5:2e:ba:8f:ed:cc:
                    51:af:43:5c:5d:7c:28:ca:cb:46:e6:13:7f:0a:d8:
                    8b:cd:72:1e:69:c8:c6:f9:75:2a:3c:fe:98:88:f1:
                    e0:49:97:f2:36:d6:5d:00:54:97:d9:31:15:4e:6b:
                    af:8b:26:b8:21:a9:66:2e:0b:fe:b7:9a:9e:52:7d:
                    5c:1a:09:7b:6f:aa:3e:83:aa:0e:24:a3:5d:76:83:
                    f3:53:2a:09:e0:f2:d6:a3:9c:eb:36:d3:98:bc:2c:
                    be:c6:f8:16:9a:d1:40:05:ac:c0:73:bd:40:65:66:
                    ae:b8:fe:1c:5b:3b:2b:39:94:d9:7f:a7:58:c7:d0:
                    c8:76:1e:9d:8a:4b:4b:11:8b:88:64:7b:34:aa:c4:
                    e0:ad:cb:9c:32:ea:13:ab:a3:1a:f1:bb:df:5e:bc:
                    fa:c9:06:e0:ce:d0:13:ef:5d:27:cb:8d:79:8c:96:
                    58:91:2c:af:c7:ca:96:2f:0f:3d:ed:8c:02:9a:bd:
                    fe:fc:8f:21:34:a4:a6:d9:e2:0f:44:3f:a7:99:f9:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6F:B2:A4:2B:44:91:0C:3F:E7:86:EB:F7:10:96:92:EB:1D:44:27
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a323a3a2f34382d3438203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:80:c3:d7:7e:4f:3a:49:5b:51:85:ae:0c:be:a4:71:77:92:
         8f:c2:23:94:e2:6a:85:dd:5f:40:dc:50:1a:bb:ac:57:5b:b0:
         14:4d:28:af:f5:6d:2b:6a:8b:d2:fe:91:e3:3b:1b:73:c2:d6:
         c0:28:cf:22:ff:d7:53:5a:ef:e9:a2:0b:67:17:8f:61:59:b5:
         84:1c:1d:57:da:8c:01:d7:31:b3:36:bf:ed:d6:0d:37:20:77:
         23:31:f9:cc:6b:ba:94:fd:e7:5a:8e:5d:97:47:5d:41:e8:73:
         10:c5:74:1e:f8:8d:34:5a:72:69:05:02:57:07:af:01:05:29:
         5e:ba:f6:68:83:37:4a:b1:54:d4:92:41:14:3f:bb:76:9a:e1:
         e9:60:25:4c:4a:82:95:32:5a:8d:92:17:b8:f2:6c:4c:b6:b0:
         3d:03:3b:13:31:2e:d4:fe:af:40:e2:39:81:19:9b:b0:34:06:
         bb:48:5f:34:6a:7a:1e:dc:c7:cb:87:92:e3:c2:9a:06:1a:91:
         e0:fc:e7:3d:04:dd:2b:83:14:5f:0b:75:6c:61:71:c0:fa:e9:
         c0:50:e5:80:de:2e:03:d0:b6:31:07:d3:35:2d:4d:b7:e4:c4:
         2d:b3:32:8d:58:47:c8:6e:45:60:57:14:7e:be:f1:8e:d2:4a:
         1a:fc:46:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:31 2024 by rpki-client on console-fra.rpki-client.org