Route Origin Authorization

$ rpki-client -vvf krill.uta.ng/repo/pongery/3/326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa
File:                     326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          L2YgjI7+8OhQSTleApLP0BSy/KTBYjMj5kGDhn9v1r8=
Subject key identifier:   04:50:DA:13:8D:36:93:61:E6:D1:DB:95:67:F3:09:7D:1E:48:23:B3
Certificate issuer:       /CN=7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C
Certificate serial:       738C0A12958748035813A75C7284F5BD6D839B24
Authority key identifier: 7C:9E:E2:0E:59:DE:F5:F8:B5:FE:68:58:5E:DE:90:6D:17:D3:04:0C
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.cer
Subject info access:      rsync://krill.uta.ng/repo/pongery/3/326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa
Signing time:             Fri 16 Aug 2024 11:49:09 +0000
ROA not before:           Fri 16 Aug 2024 11:44:09 +0000
ROA not after:            Fri 15 Aug 2025 11:49:09 +0000
asID:                     200160
IP address blocks:        2a0a:6045:c000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.uta.ng/repo/pongery/3/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.crl
                          rsync://krill.uta.ng/repo/pongery/3/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 22:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8c:0a:12:95:87:48:03:58:13:a7:5c:72:84:f5:bd:6d:83:9b:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C
        Validity
            Not Before: Aug 16 11:44:09 2024 GMT
            Not After : Aug 15 11:49:09 2025 GMT
        Subject: CN=0450DA138D369361E6D1DB9567F3097D1E4823B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ad:30:75:43:6e:fc:72:76:84:32:cf:f6:89:
                    dc:13:b2:2d:c7:49:47:3c:f9:ba:4b:43:07:04:be:
                    d4:9a:1a:4a:39:af:9f:61:df:c6:97:ec:9b:3a:6f:
                    91:1e:5b:59:28:18:5f:a6:b0:f5:88:20:ef:61:e9:
                    2d:f4:b8:30:81:aa:60:25:06:38:d8:93:22:be:fd:
                    7c:51:7b:ce:d9:54:23:7a:41:65:d0:35:95:55:33:
                    01:9b:44:68:88:60:9b:a3:97:3b:9e:72:37:eb:ff:
                    de:2e:37:ac:a8:38:1b:c7:ee:f1:32:af:fe:45:8b:
                    54:34:c7:86:81:c4:e9:57:4f:65:3f:fd:66:ef:69:
                    3f:a6:a4:48:e5:dd:d5:30:42:9c:4b:41:6b:dc:e6:
                    71:b3:ba:8f:84:4f:12:bc:e2:ec:49:43:f5:82:86:
                    12:92:49:49:c5:48:a2:41:4a:eb:5b:85:27:29:dc:
                    9e:30:af:dd:0a:c7:f0:af:a4:40:60:cc:68:fa:3a:
                    2a:0e:21:60:1c:40:ce:a6:70:b2:24:d7:7f:ff:75:
                    61:50:74:57:3f:d8:3c:12:3a:5e:9e:4b:82:e9:83:
                    ee:c1:0c:d9:2b:62:d7:da:5b:3f:83:83:3b:44:8a:
                    7c:19:d3:e0:57:58:51:07:e3:1c:68:69:45:d6:32:
                    77:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:50:DA:13:8D:36:93:61:E6:D1:DB:95:67:F3:09:7D:1E:48:23:B3
            X509v3 Authority Key Identifier:
                keyid:7C:9E:E2:0E:59:DE:F5:F8:B5:FE:68:58:5E:DE:90:6D:17:D3:04:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.uta.ng/repo/pongery/3/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.uta.ng/repo/pongery/3/326130613a363034353a633030303a3a2f33362d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         40:08:46:a0:36:57:d5:e7:38:db:75:6a:57:59:fb:b0:28:ec:
         7f:57:96:fd:09:3a:3c:e9:43:bc:b5:c3:69:b0:6c:55:b2:8d:
         9a:b3:8c:c8:79:52:03:bc:86:a4:ff:35:b7:7d:d0:45:99:72:
         c3:0e:18:f3:f0:40:32:2c:dd:56:b5:2f:48:93:6f:e1:db:e4:
         83:d5:08:39:a7:0c:55:99:7a:84:f7:de:88:ac:97:16:b1:61:
         72:3e:60:53:f8:77:6c:d0:a9:53:57:6b:95:90:1a:13:12:6b:
         f1:bb:9a:bd:bc:99:26:23:58:1e:bb:04:f9:d0:13:c3:fd:1d:
         9f:46:ff:53:9e:fc:7c:68:4a:87:8f:62:3c:b2:8c:c2:c3:4b:
         3a:2d:ca:c2:44:c3:1b:e5:65:50:8f:4c:6b:95:90:5a:f8:49:
         33:27:cb:04:77:d9:8f:75:2b:35:5b:d2:a0:5a:6e:6d:23:71:
         d0:db:7f:dc:c8:1d:76:c8:b3:dc:1a:f7:48:02:27:c2:3f:87:
         d9:1c:98:f9:0b:a3:9b:cd:bd:2d:7b:2e:98:ec:4e:0e:10:33:
         f1:fa:c7:f7:72:35:19:8e:c0:6f:b5:7a:c0:2e:a5:65:ce:9a:
         a7:7b:e5:d9:81:bc:99:ac:2e:29:50:3c:1f:9b:eb:12:f8:07:
         1b:ea:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:31 2024 by rpki-client on console-fra.rpki-client.org