Route Origin Authorization

$ rpki-client -vvf krill.uta.ng/repo/pongery/3/326130613a363034353a643030303a3a2f33362d3438203d3e20323030313630.roa
File:                     326130613a363034353a643030303a3a2f33362d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          MCFgyPEHvQo3IZeypmk96xmaZRZ8a0x+ZDrZ/327Wts=
Subject key identifier:   E5:8C:46:63:12:CA:CC:75:26:C7:50:4B:F3:A8:40:95:31:9F:9A:A3
Certificate issuer:       /CN=7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C
Certificate serial:       41630F6FB955E1E28C9A00A31C89F9892C30C9A2
Authority key identifier: 7C:9E:E2:0E:59:DE:F5:F8:B5:FE:68:58:5E:DE:90:6D:17:D3:04:0C
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.cer
Subject info access:      rsync://krill.uta.ng/repo/pongery/3/326130613a363034353a643030303a3a2f33362d3438203d3e20323030313630.roa
Signing time:             Fri 16 Aug 2024 11:55:46 +0000
ROA not before:           Fri 16 Aug 2024 11:50:46 +0000
ROA not after:            Fri 15 Aug 2025 11:55:46 +0000
asID:                     200160
IP address blocks:        2a0a:6045:d000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://krill.uta.ng/repo/pongery/3/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.crl
                          rsync://krill.uta.ng/repo/pongery/3/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:63:0f:6f:b9:55:e1:e2:8c:9a:00:a3:1c:89:f9:89:2c:30:c9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C
        Validity
            Not Before: Aug 16 11:50:46 2024 GMT
            Not After : Aug 15 11:55:46 2025 GMT
        Subject: CN=E58C466312CACC7526C7504BF3A84095319F9AA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:0f:13:9c:f9:d0:41:36:3a:da:a4:4d:5e:
                    75:27:a2:ef:a3:da:59:53:b7:99:e3:e3:90:2a:20:
                    21:77:3d:05:92:a5:eb:74:5e:b9:81:3a:bb:38:62:
                    fc:40:7d:1d:e1:0c:08:17:3d:b1:a6:d8:bc:51:4b:
                    b0:9d:6e:8a:e6:94:47:77:e8:81:1c:82:b0:56:49:
                    6d:e3:19:75:73:38:0f:77:2d:a5:a5:39:38:fb:de:
                    ee:ce:c1:31:7b:7b:c1:89:55:af:9a:c6:87:27:0d:
                    dd:67:e0:f5:58:21:31:5c:6a:19:9c:d4:c5:03:2f:
                    dc:e4:43:fe:fb:97:62:f3:5c:1d:b8:8e:97:73:25:
                    2c:38:42:fa:de:4b:8f:41:32:41:b4:94:2f:b0:43:
                    4d:13:3b:ec:a7:33:51:bc:ae:2d:dd:49:4e:b0:eb:
                    01:9b:d3:a4:ee:51:8c:22:8b:96:0c:9c:41:0f:46:
                    f9:7f:b9:06:50:e8:f9:4d:b5:f2:62:37:2a:9a:81:
                    c3:f4:17:85:15:ba:8b:08:2e:22:d6:98:0c:1a:a8:
                    48:ef:d9:f6:f6:ae:c9:b0:e3:9f:a8:49:d1:08:92:
                    4d:d5:21:12:ed:92:11:1a:94:6c:fe:76:11:14:a6:
                    9a:05:5e:af:0e:73:c3:65:8e:8f:80:ff:6c:60:ab:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8C:46:63:12:CA:CC:75:26:C7:50:4B:F3:A8:40:95:31:9F:9A:A3
            X509v3 Authority Key Identifier:
                keyid:7C:9E:E2:0E:59:DE:F5:F8:B5:FE:68:58:5E:DE:90:6D:17:D3:04:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.uta.ng/repo/pongery/3/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/7C9EE20E59DEF5F8B5FE68585EDE906D17D3040C.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.uta.ng/repo/pongery/3/326130613a363034353a643030303a3a2f33362d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:3b:84:0b:01:c8:81:45:9a:86:c9:50:13:78:31:c1:af:54:
         98:f9:5b:16:db:c2:02:3f:be:ec:5c:fe:66:98:e0:9f:ab:4b:
         46:c1:24:8b:46:9c:93:95:0c:4c:bb:eb:66:9b:17:ea:16:71:
         d9:07:cf:bd:e4:5c:88:a6:29:94:eb:b6:35:90:8a:42:5b:9b:
         98:c1:51:b9:95:5c:01:27:8c:2d:6e:2b:94:87:be:fe:c4:ba:
         f4:a0:f4:9c:d9:90:aa:c9:f8:3a:a4:45:20:05:a0:70:2e:35:
         71:ed:3c:86:04:17:96:03:af:2c:2c:bc:ab:54:92:65:43:e5:
         a7:65:6e:15:66:3e:92:92:fd:9a:c9:06:fa:6a:a7:17:3b:3e:
         8e:7d:08:a8:a5:7a:94:ab:c6:1a:23:9a:32:b5:82:ce:aa:1a:
         8f:ee:15:ef:53:dd:4c:bc:58:dd:85:cf:d2:13:bf:07:12:94:
         58:11:a9:61:78:0e:91:77:a8:e3:1d:4c:26:9e:f5:45:3d:d4:
         37:0e:e5:1a:fd:0e:94:71:2a:4c:43:f6:3e:48:5c:f5:14:9f:
         48:fd:12:dc:3f:b7:33:54:6e:e5:2a:64:57:bc:75:25:f7:9c:
         46:f3:25:9c:bb:fd:cc:94:8b:a0:4c:a1:56:10:89:53:db:25:
         f2:66:47:f6
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgIUQWMPb7lV4eKMmgCjHIn5iSwwyaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M5RUUyMEU1OURFRjVGOEI1RkU2ODU4NUVERTkwNkQx
N0QzMDQwQzAeFw0yNDA4MTYxMTUwNDZaFw0yNTA4MTUxMTU1NDZaMDMxMTAvBgNV
BAMTKEU1OEM0NjYzMTJDQUNDNzUyNkM3NTA0QkYzQTg0MDk1MzE5RjlBQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Ew8TnPnQQTY62qRNXnUnou+j
2llTt5nj45AqICF3PQWSpet0XrmBOrs4YvxAfR3hDAgXPbGm2LxRS7CdbormlEd3
6IEcgrBWSW3jGXVzOA93LaWlOTj73u7OwTF7e8GJVa+axocnDd1n4PVYITFcahmc
1MUDL9zkQ/77l2LzXB24jpdzJSw4QvreS49BMkG0lC+wQ00TO+ynM1G8ri3dSU6w
6wGb06TuUYwii5YMnEEPRvl/uQZQ6PlNtfJiNyqagcP0F4UVuosILiLWmAwaqEjv
2fb2rsmw45+oSdEIkk3VIRLtkhEalGz+dhEUppoFXq8Oc8Nljo+A/2xgqz2BAgMB
AAGjggHzMIIB7zAdBgNVHQ4EFgQU5YxGYxLKzHUmx1BL86hAlTGfmqMwHwYDVR0j
BBgwFoAUfJ7iDlne9fi1/mhYXt6QbRfTBAwwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8va3JpbGwudXRhLm5nL3JlcG8vcG9uZ2VyeS8z
LzdDOUVFMjBFNTlERUY1RjhCNUZFNjg1ODVFREU5MDZEMTdEMzA0MEMuY3JsMHYG
CCsGAQUFBwEBBGowaDBmBggrBgEFBQcwAoZacnN5bmM6Ly9ycGtpLmtvbW9yZWJp
Lm5ldHdvcmsvcmVwby9rb21vcmViaS8xLzdDOUVFMjBFNTlERUY1RjhCNUZFNjg1
ODVFREU5MDZEMTdEMzA0MEMuY2VyMIGEBggrBgEFBQcBCwR4MHYwdAYIKwYBBQUH
MAuGaHJzeW5jOi8va3JpbGwudXRhLm5nL3JlcG8vcG9uZ2VyeS8zLzMyNjEzMDYx
M2EzNjMwMzQzNTNhNjQzMDMwMzAzYTNhMmYzMzM2MmQzNDM4MjAzZDNlMjAzMjMw
MzAzMTM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUH
AQcBAf8EEjAQMA4EAgACMAgDBgQqCmBF0DANBgkqhkiG9w0BAQsFAAOCAQEALzuE
CwHIgUWahslQE3gxwa9UmPlbFtvCAj++7Fz+Zpjgn6tLRsEki0ack5UMTLvrZpsX
6hZx2QfPveRciKYplOu2NZCKQlubmMFRuZVcASeMLW4rlIe+/sS69KD0nNmQqsn4
OqRFIAWgcC41ce08hgQXlgOvLCy8q1SSZUPlp2VuFWY+kpL9mskG+mqnFzs+jn0I
qKV6lKvGGiOaMrWCzqoaj+4V71PdTLxY3YXP0hO/BxKUWBGpYXgOkXeo4x1MJp71
RT3UNw7lGv0OlHEqTEP2Pkhc9RSfSP0S3D+3M1Ru5SpkV7x1JfecRvMlnLv9zJSL
oEyhVhCJU9sl8mZH9g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:18 2024 by rpki-client on console-fra.rpki-client.org