Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a383a3a2f34382d3438203d3e20323132393334.roa
File:                     323630323a666364333a383a3a2f34382d3438203d3e20323132393334.roa (raw, json)
Hash identifier:          XjmL11cNzgHhJ1/nmiMQTL6HknxZGIEToVSKUVgcMYQ=
Subject key identifier:   EF:46:C3:64:BC:1F:42:D9:72:43:D9:F7:DE:E2:0C:18:FC:6D:94:61
Certificate issuer:       /CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
Certificate serial:       1F9E40AC9E61DF42A205C6DF21F01CE7CA6D48B2
Authority key identifier: 8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a383a3a2f34382d3438203d3e20323132393334.roa
Signing time:             Sun 17 Mar 2024 10:27:23 +0000
ROA not before:           Sun 17 Mar 2024 10:22:23 +0000
ROA not after:            Sun 16 Mar 2025 10:27:23 +0000
asID:                     212934
IP address blocks:        2602:fcd3:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 13:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9e:40:ac:9e:61:df:42:a2:05:c6:df:21:f0:1c:e7:ca:6d:48:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9
        Validity
            Not Before: Mar 17 10:22:23 2024 GMT
            Not After : Mar 16 10:27:23 2025 GMT
        Subject: CN=EF46C364BC1F42D97243D9F7DEE20C18FC6D9461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:63:67:d0:99:f0:a4:c6:6b:30:b3:ae:8c:
                    1f:f0:0c:0f:a2:08:15:7a:a8:fa:49:dc:b9:ed:bd:
                    96:62:10:d5:06:62:89:75:6a:88:0c:a7:41:6c:c6:
                    ad:50:80:7d:84:ba:09:c8:17:0d:92:72:cd:58:6a:
                    02:aa:00:28:95:99:ad:40:90:10:76:ea:d9:d8:0d:
                    b2:50:01:cd:fe:d7:95:f0:3e:ce:08:74:6c:3f:c4:
                    69:e8:70:d9:05:60:aa:dd:39:4e:8a:56:37:bc:4e:
                    84:7d:5c:57:e2:84:0a:b1:1a:11:94:5d:f3:b5:12:
                    b5:42:d1:01:eb:82:d4:7c:92:bf:9e:b9:38:fe:fa:
                    74:31:a3:01:2c:bc:4d:df:b2:d4:38:c5:08:38:e0:
                    cb:db:2d:4f:07:f4:a4:d5:48:9f:c8:df:72:d7:e3:
                    75:55:f9:a6:19:69:9d:70:dd:b9:13:7c:43:c5:fb:
                    d4:cc:49:54:08:aa:32:a5:0d:79:8e:d8:5a:70:b1:
                    57:e1:51:54:a9:6c:0d:db:06:90:ff:90:9c:08:ac:
                    56:06:43:a1:12:4d:99:cb:7c:3f:ae:65:33:a7:e2:
                    f8:56:8b:3a:c0:ad:d8:9a:d7:b0:86:68:e9:b1:5a:
                    a0:d0:f6:31:d7:7b:6a:f9:ac:1f:f2:4b:7e:2f:1b:
                    45:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:46:C3:64:BC:1F:42:D9:72:43:D9:F7:DE:E2:0C:18:FC:6D:94:61
            X509v3 Authority Key Identifier:
                keyid:8B:83:C5:DA:03:B3:CC:02:9D:95:21:5A:01:32:05:97:81:4B:38:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/323630323a666364333a383a3a2f34382d3438203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:b8:01:93:29:0c:1b:5f:e1:b4:4d:1d:04:8f:b3:8c:89:64:
         e7:65:99:37:f2:38:8f:cd:d8:94:98:87:0c:bb:11:36:77:de:
         11:82:47:61:71:53:ea:b6:65:4f:ca:d3:42:b3:c1:9d:c0:c1:
         e1:a6:18:45:63:4d:f2:49:eb:7a:19:69:41:c1:9d:4a:65:27:
         c2:3d:e5:98:a8:0b:a4:1c:b1:f6:a7:15:27:3c:bc:5f:1e:eb:
         c9:01:9f:7d:1c:ee:78:03:f8:96:03:06:6f:42:40:c2:52:20:
         8e:d7:2e:21:48:2a:28:7b:09:8d:69:db:c8:fe:cf:91:46:7f:
         17:dd:6e:f9:b5:d5:99:0d:8e:7b:45:e5:35:5f:5b:ef:5a:58:
         23:0f:e5:92:fa:4e:90:a3:db:36:ac:ab:38:4f:56:4d:58:0c:
         28:69:bb:f7:23:b9:ce:40:13:18:fe:3e:b2:b4:f2:72:19:b1:
         a6:45:66:cb:29:19:fd:19:60:bc:e7:03:1e:50:44:67:94:b9:
         07:f2:9a:a3:48:33:e9:ca:92:2f:f5:fa:cc:24:2a:ac:b9:e4:
         35:90:dc:b6:54:c1:d5:92:c7:1d:39:aa:2a:19:79:7c:14:3f:
         b2:35:ae:37:4f:dd:08:c3:41:a5:73:f6:75:77:5a:8d:56:6e:
         03:ae:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 10:33:29 2024 by rpki-client on console-fra.rpki-client.org