Route Origin Authorization

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
File:                     326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa (raw, json)
Hash identifier:          54fon/ssZvB0rhQWZzP6x9TZikP23Yg1XZ0xzqa7Seg=
Subject key identifier:   46:EA:48:32:D7:46:67:43:06:53:A3:A2:29:2C:A5:DC:9D:4D:01:7B
Certificate issuer:       /CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
Certificate serial:       57252724DECC9EFA4515D35431CE6D9C9ACF0C1E
Authority key identifier: 38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
Signing time:             Sun 06 Oct 2024 05:02:37 +0000
ROA not before:           Sun 06 Oct 2024 04:57:37 +0000
ROA not after:            Sun 05 Oct 2025 05:02:37 +0000
asID:                     52210
IP address blocks:        2a0a:6040:c500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:25:27:24:de:cc:9e:fa:45:15:d3:54:31:ce:6d:9c:9a:cf:0c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF
        Validity
            Not Before: Oct  6 04:57:37 2024 GMT
            Not After : Oct  5 05:02:37 2025 GMT
        Subject: CN=46EA4832D74667430653A3A2292CA5DC9D4D017B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3b:9b:f6:a9:67:38:29:70:f9:2f:53:24:f3:
                    5c:7c:b8:dd:ba:c6:54:f9:d6:c6:b3:5b:17:5d:53:
                    0f:7f:d2:4c:8b:8a:62:f4:03:6f:8c:75:b5:4d:75:
                    e9:7f:90:ea:69:0c:bf:f3:01:64:c2:7f:d6:6a:f7:
                    df:9e:f8:e4:06:d5:11:fd:c6:70:7c:08:26:21:49:
                    40:0a:12:04:e1:41:fd:a3:37:bd:8d:70:f0:34:44:
                    be:5d:fc:67:b8:72:01:57:0a:ad:ba:66:fa:e6:70:
                    8a:19:27:c7:3e:f9:79:57:93:38:ac:29:36:c2:d0:
                    cb:81:70:23:bd:ca:b3:a5:16:8d:91:ef:01:03:b6:
                    a6:42:72:93:e6:5b:85:2a:e8:a0:bc:e5:7f:2b:12:
                    8e:54:3d:5d:d2:27:2d:d6:68:98:2d:e6:24:3d:05:
                    2b:6e:5c:c0:fe:3f:79:16:fa:00:1a:94:ac:ed:0c:
                    e2:8f:37:13:9c:2c:43:7f:1b:65:29:dc:32:32:f4:
                    1a:f0:6b:7c:78:6e:b9:58:e3:73:86:c6:39:e0:db:
                    b5:69:b4:f0:f1:44:b3:a6:d1:07:32:8a:36:eb:dc:
                    79:1a:52:7f:eb:9d:2a:ab:93:49:b1:44:6a:f1:34:
                    ab:d3:a6:06:50:07:fd:96:e0:c5:cc:2c:50:ad:16:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EA:48:32:D7:46:67:43:06:53:A3:A2:29:2C:A5:DC:9D:4D:01:7B
            X509v3 Authority Key Identifier:
                keyid:38:EC:8E:47:63:66:BF:5E:AF:F8:39:AF:E7:8D:AF:0B:3A:6C:D6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/38EC8E476366BF5EAFF839AFE78DAF0B3A6CD6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/4/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:92:40:eb:6a:ad:ea:66:97:af:e5:6a:fa:30:6a:dc:e4:f4:
         d3:6e:3b:f0:ec:82:64:06:da:16:73:a5:27:4f:4f:b3:6b:f4:
         49:17:8e:67:fd:72:75:81:c0:4c:a0:4e:6b:0b:2a:38:81:a6:
         11:84:38:58:db:fc:4c:76:5c:ea:34:a9:9f:3a:05:62:86:aa:
         be:9a:61:db:53:82:83:c6:5a:4e:a3:94:9a:99:87:4e:05:56:
         a6:9c:5c:60:91:b3:81:9f:e9:93:12:d8:51:4b:33:72:2d:bd:
         7f:55:2f:51:90:41:18:29:65:dd:92:7f:1b:b7:cb:9f:1f:b8:
         cb:f3:2e:7a:cf:7f:4d:b1:33:29:2e:03:ba:d6:e5:1b:f9:6d:
         50:5a:90:56:5e:b7:0d:20:d0:60:05:27:d6:b0:4d:e2:02:50:
         5a:3d:93:77:3e:39:e0:c0:25:a6:9e:3b:4b:e4:01:46:55:dc:
         8a:ba:78:3c:e3:82:c7:f7:35:ee:06:f3:7d:25:ed:be:da:a5:
         fb:e6:ac:49:09:9d:6b:3c:db:37:2a:ae:11:fe:a2:07:78:ec:
         c8:88:3e:7d:aa:b0:d2:45:be:40:72:dd:3b:05:46:8a:4b:c9:
         51:8f:00:ef:6e:ec:15:13:b8:0e:a0:bd:ef:61:d6:97:03:d1:
         62:c5:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:20:40 2024 by rpki-client on console-fra.rpki-client.org