Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
File:                     326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa (raw, json)
Hash identifier:          5HFWm8xugyXTyjN9m4my9j/oYej7EFq2tz037rsY2go=
Subject key identifier:   98:8E:25:6C:04:E3:B4:10:BB:EE:41:8F:C1:F3:4C:EC:0D:1B:27:FC
Certificate issuer:       /CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
Certificate serial:       4DD1F13D0051038FBD8044275A5D359BFF764BD6
Authority key identifier: 38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa
Signing time:             Sun 05 Nov 2023 04:09:58 +0000
ROA not before:           Sun 05 Nov 2023 04:04:58 +0000
ROA not after:            Sun 03 Nov 2024 04:09:58 +0000
asID:                     49975
IP address blocks:        2a0a:6040:6d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d1:f1:3d:00:51:03:8f:bd:80:44:27:5a:5d:35:9b:ff:76:4b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
        Validity
            Not Before: Nov  5 04:04:58 2023 GMT
            Not After : Nov  3 04:09:58 2024 GMT
        Subject: CN=988E256C04E3B410BBEE418FC1F34CEC0D1B27FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:01:1b:ca:73:7c:09:48:b1:98:a3:dc:00:4a:
                    e9:a7:fb:2f:49:3c:72:61:07:84:3c:99:db:63:8a:
                    8c:cb:c4:21:45:4b:90:48:86:b8:d6:75:3a:01:0d:
                    25:8c:ea:7e:9b:6f:30:8e:88:6e:b3:f1:5c:d6:91:
                    85:81:d8:b6:ce:76:7a:e0:9d:df:d0:a0:5f:33:d3:
                    5a:29:b2:0a:ba:07:c9:4b:33:84:0b:3e:f2:1d:bb:
                    f4:36:f8:6a:e5:f4:a0:24:f4:bc:35:68:a0:50:52:
                    40:59:f6:8e:f2:06:89:51:ed:39:aa:8a:65:04:33:
                    0f:07:f0:da:3a:51:f1:bd:fc:6b:bc:13:7b:31:73:
                    fd:03:bc:a6:65:6e:13:16:78:75:07:94:77:f2:13:
                    d0:37:7c:5b:e7:f2:15:bb:b8:84:80:1d:3d:2a:10:
                    aa:8c:07:74:08:d5:f9:5c:04:94:6f:6b:24:6b:61:
                    76:44:8b:86:61:ed:e2:4b:5c:4a:a6:1f:57:61:1b:
                    c2:8b:d4:3c:36:b1:1d:2a:92:1a:41:26:ae:f6:2a:
                    34:be:23:6f:db:31:9e:05:94:a5:aa:3f:be:52:81:
                    2d:5d:08:42:9d:d1:f3:94:a4:96:b6:6b:56:f5:ca:
                    45:ee:98:c7:ee:cd:67:4c:77:5f:74:40:16:34:39:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8E:25:6C:04:E3:B4:10:BB:EE:41:8F:C1:F3:4C:EC:0D:1B:27:FC
            X509v3 Authority Key Identifier:
                keyid:38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:16:0c:4f:4b:20:bb:2c:32:51:fa:6d:20:96:8a:f4:4b:4e:
         e1:a6:e5:86:f1:60:a5:b4:b9:ed:18:24:bf:75:5b:3b:63:b4:
         98:f2:92:96:54:c3:ec:52:fe:bf:02:0c:31:e9:32:38:b0:26:
         1a:81:83:ec:b8:62:7e:3a:d3:6f:7c:2f:a9:a5:63:d9:2f:bd:
         20:93:84:10:81:71:8d:25:01:05:0c:c2:56:d2:d9:1d:00:4a:
         50:a7:20:27:14:91:f3:0a:3c:ba:22:f5:e6:6a:7c:bb:de:3d:
         8c:ee:08:70:2c:26:b9:7a:f5:fb:14:10:bb:90:56:5d:2f:d8:
         e7:01:54:01:ff:e1:89:31:d1:bf:94:36:42:49:7c:39:e7:c3:
         12:d9:f0:6b:47:42:e8:3a:c4:06:12:07:6a:ad:0b:e8:f6:ab:
         be:38:7c:c5:2c:69:3f:ab:73:ff:5d:2f:fc:c3:64:c2:a8:b6:
         b8:3a:f8:b0:66:57:4e:22:a1:dd:52:8a:23:32:0a:e7:75:1b:
         f2:35:79:3b:c2:d7:75:78:80:bc:8c:ff:94:83:63:39:25:bc:
         d5:5a:bf:b6:63:3b:1b:7a:67:b1:52:ee:67:05:1d:05:5b:6f:
         c8:0b:ab:e0:b5:3a:a8:75:d5:6c:80:37:f1:bc:9c:4a:5f:ab:
         54:cf:d0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 04:32:36 2024 by rpki-client on console-ams.rpki-client.org