Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa
File:                     326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier:          9y00w6cwXJQxOVcC+hWes6m35jsrIAutWCWZ9sJrWuQ=
Subject key identifier:   4C:2F:5E:B2:BA:3E:5F:7D:14:B6:25:96:00:5D:5E:46:40:8A:61:48
Certificate issuer:       /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
Certificate serial:       39EB29A4E0DB0FE50AE302FB98B7037914ABBEFF
Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa
Signing time:             Sun 07 Jul 2024 19:05:34 +0000
ROA not before:           Sun 07 Jul 2024 19:00:34 +0000
ROA not after:            Sun 06 Jul 2025 19:05:34 +0000
asID:                     205789
IP address blocks:        2a11:f2c0:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:eb:29:a4:e0:db:0f:e5:0a:e3:02:fb:98:b7:03:79:14:ab:be:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
        Validity
            Not Before: Jul  7 19:00:34 2024 GMT
            Not After : Jul  6 19:05:34 2025 GMT
        Subject: CN=4C2F5EB2BA3E5F7D14B62596005D5E46408A6148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:cf:be:76:14:d3:41:03:31:a8:3a:b8:5b:
                    98:69:f8:12:4d:bd:58:8c:c0:8b:7e:26:9c:28:4c:
                    02:3b:10:6e:c1:ea:b8:57:ed:1a:fe:3b:0f:5a:c8:
                    23:e6:77:0d:ee:7f:f3:99:13:b9:ec:93:b0:3a:2a:
                    43:42:5b:e7:80:df:03:f2:0d:cc:98:5c:46:09:4c:
                    eb:83:f1:43:b7:cb:49:bf:b0:72:48:f2:a5:e1:2d:
                    72:a7:a6:69:66:6f:f6:ee:b9:0b:5c:ed:59:23:c1:
                    65:04:80:b3:a1:f1:86:cc:40:4d:ec:99:c0:d5:79:
                    b8:7b:01:a1:38:f5:63:6e:ae:91:74:ad:68:7b:eb:
                    56:0f:24:25:8d:07:09:30:6a:7b:8a:23:97:ec:91:
                    86:e9:d8:be:31:5c:ad:21:13:48:6e:94:28:85:36:
                    6f:34:e1:d7:c7:e7:c1:61:e9:70:a2:a8:34:2a:05:
                    76:b5:b1:f6:fb:68:0a:27:ac:27:cf:14:68:83:93:
                    a4:99:2b:34:17:79:bf:bc:5f:9a:98:20:dd:c8:70:
                    b4:7e:5f:01:5c:08:4c:70:dc:03:c1:bd:90:39:59:
                    94:e9:7f:62:ad:87:4b:2b:e2:4e:84:b4:3a:12:52:
                    84:b1:93:f7:6d:ed:2f:3f:48:3c:47:94:13:b8:28:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2F:5E:B2:BA:3E:5F:7D:14:B6:25:96:00:5D:5E:46:40:8A:61:48
            X509v3 Authority Key Identifier:
                keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a623030623a3a2f34382d3438203d3e20323035373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:50:1b:52:f1:92:28:4d:3a:8e:e0:42:48:70:e3:89:57:d3:
         aa:be:e4:7b:c1:0b:0f:4f:27:b8:8a:c1:c2:1b:d4:d5:98:8e:
         9f:e0:08:96:d7:78:82:0e:99:f4:de:47:c6:84:76:5c:8b:65:
         08:c7:72:2f:30:14:e1:59:f0:06:16:ab:81:ab:4d:70:b7:f4:
         51:1f:ff:df:c4:d3:7d:ff:0d:a2:38:ee:d4:db:13:7a:56:30:
         34:a4:4c:af:0a:18:78:61:35:72:4d:28:51:96:85:60:af:d2:
         1c:7f:db:54:3b:12:8a:6b:5f:70:20:06:64:a2:a5:e8:30:a2:
         b5:56:86:09:e4:38:7a:23:ac:ae:2f:f9:66:d7:65:6d:ac:ff:
         59:bf:72:e8:a8:4c:3e:d9:ac:60:5b:97:e9:56:84:71:32:b2:
         55:41:96:31:92:3f:a4:45:0a:c5:b6:3e:6d:32:25:37:c7:9d:
         f2:8f:83:85:d4:dc:de:0e:36:c3:86:10:05:c6:9c:82:48:13:
         03:a5:1d:90:ca:59:82:8b:c0:38:4f:8e:94:f3:26:42:4c:b9:
         74:08:73:d7:ca:74:0c:57:c4:84:b8:31:26:55:4e:e6:25:21:
         0c:3f:4a:ed:1c:f0:1c:94:b3:83:9e:5c:0f:cf:45:35:cc:39:
         6d:48:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:44 2024 by rpki-client on console-fra.rpki-client.org