Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
File:                     326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa (raw, json)
Hash identifier:          EH/Y7Vy3j6UXYT/2Z+xrAE09d5TnCdyr+j3VkYhRvuc=
Subject key identifier:   50:C0:93:46:9B:D4:99:35:FB:07:81:D4:E2:C9:76:68:AB:FB:F1:40
Certificate issuer:       /CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
Certificate serial:       7E6BC9B0809FE9376A3458A2830A681ED3B439E9
Authority key identifier: 38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
Signing time:             Sun 05 Nov 2023 04:09:58 +0000
ROA not before:           Sun 05 Nov 2023 04:04:58 +0000
ROA not after:            Sun 03 Nov 2024 04:09:58 +0000
asID:                     52210
IP address blocks:        2a0a:6040:c500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6b:c9:b0:80:9f:e9:37:6a:34:58:a2:83:0a:68:1e:d3:b4:39:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
        Validity
            Not Before: Nov  5 04:04:58 2023 GMT
            Not After : Nov  3 04:09:58 2024 GMT
        Subject: CN=50C093469BD49935FB0781D4E2C97668ABFBF140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:51:e2:b8:3c:f4:b1:79:d4:45:79:08:e5:
                    19:45:c1:03:bc:e4:0e:e3:e9:d1:85:2d:1e:c3:33:
                    ef:5d:a3:60:33:d4:3f:b9:8b:61:d4:92:73:33:93:
                    1c:2d:d3:1c:88:7f:8a:d8:54:87:65:f4:fd:17:76:
                    09:9e:ee:7d:7a:fb:98:19:fe:e2:57:18:4b:e4:5b:
                    f3:f9:6e:63:16:37:87:fb:30:74:a4:07:cd:f2:15:
                    e7:16:12:67:0b:15:e2:3a:7f:cf:83:4a:8f:76:30:
                    5d:d8:b7:31:27:da:dc:92:6e:bc:e9:70:4a:8c:f3:
                    42:97:6d:6c:a8:bd:58:dc:04:52:da:a8:5e:8a:99:
                    39:f4:02:ae:7f:61:1c:17:bb:20:8f:c8:75:ef:ef:
                    4a:c9:f9:b2:38:53:c6:9c:64:6e:42:fe:31:d5:2d:
                    66:0c:35:e7:f9:5a:43:4d:e7:14:42:33:7a:32:70:
                    ff:bb:c0:fd:23:63:74:4b:1d:3c:32:1c:46:37:46:
                    de:bb:ee:07:92:35:d7:2e:44:0f:bb:7e:f3:c7:4a:
                    b0:9f:34:14:89:34:bc:18:f9:c4:e2:d8:d2:22:fc:
                    19:36:e0:36:ec:79:62:2f:df:c3:7a:bc:b7:32:0c:
                    31:08:68:29:cf:f4:e0:5f:4c:2f:05:4e:68:45:4d:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C0:93:46:9B:D4:99:35:FB:07:81:D4:E2:C9:76:68:AB:FB:F1:40
            X509v3 Authority Key Identifier:
                keyid:38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:cc:7a:e0:32:d9:de:c2:78:2c:cd:88:c3:46:56:60:fa:
         b9:55:06:84:99:0b:9c:82:15:f2:61:2e:68:55:f4:77:27:51:
         b7:a4:c8:12:b9:e3:1e:92:ef:55:8f:4d:f9:3f:8e:60:1c:1b:
         64:f4:7c:fd:51:21:c0:be:ce:a5:a0:d1:42:d4:06:d8:97:40:
         9b:41:f6:f8:38:84:ef:a4:20:e1:7b:c8:c4:60:6f:a8:51:1c:
         a8:f6:a7:cd:7f:ba:3f:02:a0:df:af:78:b6:99:23:07:bc:b0:
         6b:b4:9b:45:ba:2f:0a:fc:50:50:b9:f9:90:e0:32:39:08:b9:
         ce:c9:96:ca:24:95:1a:f1:db:a1:24:fd:6d:c6:33:17:9e:be:
         e6:b3:05:f0:dd:50:e9:c3:46:ac:17:0e:ba:0d:76:1f:eb:50:
         23:aa:70:f7:02:be:20:b7:1c:21:56:5f:b4:25:a0:b6:3c:c4:
         10:60:b0:69:61:a3:a2:06:6d:a1:01:f3:39:e0:17:34:37:bf:
         1d:2e:d7:44:01:5b:49:45:b6:fb:c9:0e:db:22:2d:7d:7f:8d:
         68:3b:00:fe:00:e0:cd:1a:68:60:88:a8:03:46:c6:f7:8d:4c:
         d9:db:8f:75:d0:06:ba:20:d9:2a:fc:ba:99:1f:df:c7:85:ff:
         4a:a5:e3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:23:42 2024 by rpki-client on console-fra.rpki-client.org