Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/infiniroute-ratatoskr/0/326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa
File:                     326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa (raw, json)
Hash identifier:          981xl2BomJLl36SJukEckykAxskw9CtDY9+lcbTKGVI=
Subject key identifier:   3A:12:B0:1D:07:34:69:03:43:F8:4E:60:61:A3:CE:91:2E:E0:B0:3B
Certificate issuer:       /CN=6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1
Certificate serial:       322AE1A1085C539AEE549DA3776929930FC8BEF6
Authority key identifier: 6B:27:5D:9A:12:3F:3D:56:01:2C:5A:06:7E:2B:A2:B5:FE:34:FA:A1
Authority info access:    rsync://repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer
Subject info access:      rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa
Signing time:             Mon 24 Jun 2024 17:57:42 +0000
ROA not before:           Mon 24 Jun 2024 17:52:42 +0000
ROA not after:            Mon 23 Jun 2025 17:57:42 +0000
asID:                     214732
IP address blocks:        2a14:7c0:5300::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.crl
                          rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.mft
                          rsync://repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
                          rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:2a:e1:a1:08:5c:53:9a:ee:54:9d:a3:77:69:29:93:0f:c8:be:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1
        Validity
            Not Before: Jun 24 17:52:42 2024 GMT
            Not After : Jun 23 17:57:42 2025 GMT
        Subject: CN=3A12B01D0734690343F84E6061A3CE912EE0B03B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:2f:36:da:9b:bd:36:91:b8:21:5e:7a:06:
                    93:dd:2a:39:c6:78:0f:97:cc:7c:77:3d:8a:6d:59:
                    b1:b2:86:9f:c5:f0:1e:0e:66:8a:53:4b:01:4b:93:
                    11:34:60:97:76:3a:e4:84:5c:2c:1a:77:9b:11:6f:
                    95:46:7a:a3:f9:b2:e6:7a:93:5b:0b:c1:5d:13:66:
                    e4:03:69:cf:b4:57:aa:cb:71:3a:39:76:28:dd:de:
                    1b:2f:70:84:13:c1:17:ab:7f:00:ac:e4:1e:4f:74:
                    9a:ef:41:48:0c:ce:02:5c:57:ff:72:db:cc:1f:d8:
                    60:66:f6:30:bd:cc:81:0a:d5:0e:46:dc:c8:bd:b5:
                    ca:67:5b:cd:d2:36:55:b0:39:af:b8:be:96:d4:e9:
                    2d:c2:71:27:66:99:7e:ca:89:27:b8:d6:bc:ce:2e:
                    5f:a6:6a:29:a5:62:af:2c:1b:27:37:2b:16:3b:6d:
                    b6:91:e7:28:b4:74:f8:d8:fb:8c:ca:55:6b:9c:88:
                    67:d7:e7:fc:75:e8:38:0f:99:d9:89:02:02:e0:07:
                    13:04:cf:f6:81:ab:05:ed:ba:0f:ef:d9:0b:ab:19:
                    e8:d1:15:8c:fc:8c:e8:a3:38:46:01:0d:57:04:b1:
                    ab:62:14:7f:25:7d:8c:0f:aa:5b:68:60:6b:df:2a:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:12:B0:1D:07:34:69:03:43:F8:4E:60:61:A3:CE:91:2E:E0:B0:3B
            X509v3 Authority Key Identifier:
                keyid:6B:27:5D:9A:12:3F:3D:56:01:2C:5A:06:7E:2B:A2:B5:FE:34:FA:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/6B275D9A123F3D56012C5A067E2BA2B5FE34FAA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/infiniroute-ratatoskr/0/326131343a3763303a353330303a3a2f34302d3438203d3e20323134373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7c0:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:98:7a:76:38:d3:c3:ee:53:db:c5:d8:63:36:38:ee:bd:8c:
         d0:54:9a:fd:7c:28:35:52:b8:bb:44:a1:e2:f5:55:2d:4e:c2:
         0d:23:d5:b4:53:5c:5b:ae:51:e9:4f:bf:28:df:b4:b7:4b:69:
         21:36:99:85:5a:48:df:e1:15:c2:7a:a4:94:90:2c:bd:f7:f8:
         60:64:cd:61:d7:25:8a:0a:26:c6:01:27:74:e9:90:da:b1:be:
         2b:34:2b:9f:f9:21:d6:ee:1b:53:54:aa:79:39:67:be:c3:84:
         a5:8a:20:2f:f8:36:a2:e8:a1:fb:4d:25:b7:74:aa:0c:fc:40:
         75:e5:d8:6c:ed:d2:fb:23:e3:4f:97:26:35:9a:65:a7:4b:ac:
         32:95:27:4b:0a:b8:ea:c5:4b:c7:ee:24:b6:78:37:a2:df:a2:
         86:df:91:d3:c6:36:2b:d6:58:6c:dc:79:5c:2e:2c:40:3a:4e:
         8a:45:e8:99:7c:22:fc:f1:bc:03:f0:74:58:96:63:8f:5b:25:
         6b:c7:c5:7f:35:0c:69:a9:13:25:08:dd:dd:94:ea:d6:4d:82:
         ad:fe:7c:aa:25:66:a1:2f:7e:6f:eb:d0:34:12:3f:d4:eb:f4:
         ca:35:a4:79:4c:0e:97:1e:4d:79:74:e7:46:c5:45:98:c6:7b:
         11:b8:a2:12
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIUMirhoQhcU5ruVJ2jd2kpkw/IvvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkIyNzVEOUExMjNGM0Q1NjAxMkM1QTA2N0UyQkEyQjVG
RTM0RkFBMTAeFw0yNDA2MjQxNzUyNDJaFw0yNTA2MjMxNzU3NDJaMDMxMTAvBgNV
BAMTKDNBMTJCMDFEMDczNDY5MDM0M0Y4NEU2MDYxQTNDRTkxMkVFMEIwM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXay822pu9NpG4IV56BpPdKjnG
eA+XzHx3PYptWbGyhp/F8B4OZopTSwFLkxE0YJd2OuSEXCwad5sRb5VGeqP5suZ6
k1sLwV0TZuQDac+0V6rLcTo5dijd3hsvcIQTwRerfwCs5B5PdJrvQUgMzgJcV/9y
28wf2GBm9jC9zIEK1Q5G3Mi9tcpnW83SNlWwOa+4vpbU6S3CcSdmmX7KiSe41rzO
Ll+maimlYq8sGyc3KxY7bbaR5yi0dPjY+4zKVWuciGfX5/x16DgPmdmJAgLgBxME
z/aBqwXtug/v2QurGejRFYz8jOijOEYBDVcEsatiFH8lfYwPqltoYGvfKg8RAgMB
AAGjggITMIICDzAdBgNVHQ4EFgQUOhKwHQc0aQND+E5gYaPOkS7gsDswHwYDVR0j
BBgwFoAUayddmhI/PVYBLFoGfiuitf40+qEwDgYDVR0PAQH/BAQDAgeAMHIGA1Ud
HwRrMGkwZ6BloGOGYXJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vaW5maW5p
cm91dGUtcmF0YXRvc2tyLzAvNkIyNzVEOUExMjNGM0Q1NjAxMkM1QTA2N0UyQkEy
QjVGRTM0RkFBMS5jcmwwcwYIKwYBBQUHAQEEZzBlMGMGCCsGAQUFBzAChldyc3lu
YzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL0luZmluaXJvdXRlLzEvNkIyNzVEOUEx
MjNGM0Q1NjAxMkM1QTA2N0UyQkEyQjVGRTM0RkFBMS5jZXIwgZYGCCsGAQUFBwEL
BIGJMIGGMIGDBggrBgEFBQcwC4Z3cnN5bmM6Ly9yZXBvLnJwa2kuc3BhY2UvcmVw
by9pbmZpbmlyb3V0ZS1yYXRhdG9za3IvMC8zMjYxMzEzNDNhMzc2MzMwM2EzNTMz
MzAzMDNhM2EyZjM0MzAyZDM0MzgyMDNkM2UyMDMyMzEzNDM3MzMzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGACoUB8BTMA0GCSqGSIb3DQEBCwUAA4IBAQBXmHp2ONPD7lPbxdhjNjjuvYzQ
VJr9fCg1Uri7RKHi9VUtTsINI9W0U1xbrlHpT78o37S3S2khNpmFWkjf4RXCeqSU
kCy99/hgZM1h1yWKCibGASd06ZDasb4rNCuf+SHW7htTVKp5OWe+w4SliiAv+Dai
6KH7TSW3dKoM/EB15dhs7dL7I+NPlyY1mmWnS6wylSdLCrjqxUvH7iS2eDei36KG
35HTxjYr1lhs3HlcLixAOk6KReiZfCL88bwD8HRYlmOPWyVrx8V/NQxpqRMlCN3d
lOrWTYKt/nyqJWahL35v69A0Ej/U6/TKNaR5TA6XHk15dOdGxUWYxnsRuKIS
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:22 2024 by rpki-client on console-fra.rpki-client.org