Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa
File:                     326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa (raw, json)
Hash identifier:          1GbcHccR0qrRnppaVrIADnqlOOEe/j64UrxuiomGG2o=
Subject key identifier:   94:F8:CD:05:FA:FB:2E:3E:A5:93:4F:8E:90:F2:2C:AD:14:58:BE:EC
Certificate issuer:       /CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
Certificate serial:       1216253B5533680B3A79A0ED481E34AB2FD6269D
Authority key identifier: B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa
Signing time:             Sun 07 Jul 2024 19:33:03 +0000
ROA not before:           Sun 07 Jul 2024 19:28:03 +0000
ROA not after:            Sun 06 Jul 2025 19:33:03 +0000
asID:                     205789
IP address blocks:        2a11:f2c0:fffd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:16:25:3b:55:33:68:0b:3a:79:a0:ed:48:1e:34:ab:2f:d6:26:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88A94DCA09E3A653C06F478434DC7C8F21E0518
        Validity
            Not Before: Jul  7 19:28:03 2024 GMT
            Not After : Jul  6 19:33:03 2025 GMT
        Subject: CN=94F8CD05FAFB2E3EA5934F8E90F22CAD1458BEEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:63:c0:bf:9f:ba:75:0c:0a:d9:2b:37:fa:
                    ca:46:a5:95:69:cf:7f:f8:a5:4e:55:b1:f7:dc:07:
                    35:ce:d1:64:7b:94:be:7d:9e:e7:d2:31:c4:0c:73:
                    69:f2:5d:db:e0:97:f2:d2:87:3b:6a:14:5c:aa:8b:
                    9c:dd:d9:d9:73:e2:1e:a7:6d:14:f6:98:3f:3f:ad:
                    d1:b8:b3:f1:86:76:10:d4:70:86:b8:50:ad:96:af:
                    52:b1:05:79:cd:f5:95:7c:91:2c:7c:39:21:33:91:
                    17:0b:8b:9e:08:e6:51:dd:9d:b2:cf:cf:a6:8c:4c:
                    55:ee:5d:e7:d3:d5:41:50:93:1d:9f:e0:2e:2a:92:
                    bb:9b:3e:7d:93:2e:35:94:7f:c6:3c:35:8b:18:da:
                    de:4b:6e:1f:aa:06:59:bc:a1:38:7b:0c:2b:ed:1c:
                    53:7c:ff:bc:5f:59:d6:d0:62:a5:e2:f2:79:bc:8a:
                    b5:98:6c:63:d5:80:db:f5:19:2e:11:14:57:f5:2a:
                    c4:b4:5c:3d:81:39:1a:82:a7:a4:48:3c:9e:7c:00:
                    d1:6c:b3:99:e7:72:be:a6:5e:22:16:b0:bf:1b:70:
                    ae:53:cf:e5:8b:94:22:09:c0:43:f0:8e:23:ae:b2:
                    9a:a0:d5:f3:4e:e7:15:38:aa:f4:1d:f5:fa:f7:98:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:CD:05:FA:FB:2E:3E:A5:93:4F:8E:90:F2:2C:AD:14:58:BE:EC
            X509v3 Authority Key Identifier:
                keyid:B8:8A:94:DC:A0:9E:3A:65:3C:06:F4:78:43:4D:C7:C8:F2:1E:05:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/B88A94DCA09E3A653C06F478434DC7C8F21E0518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B88A94DCA09E3A653C06F478434DC7C8F21E0518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0a4637df5ba743fea1b482be8235818f/0/326131313a663263303a666666643a3a2f34382d3438203d3e20323035373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:1c:ae:0a:0b:cb:10:9a:50:43:10:36:eb:e6:6e:bf:cb:
         d1:87:bf:30:bf:04:15:1b:33:68:73:0f:32:8a:83:ca:7b:a9:
         20:8a:53:e4:8c:83:f8:96:cb:af:fb:d0:e3:4c:d0:c9:c7:f2:
         a0:d0:b2:bf:93:10:f6:f3:27:3e:e5:7e:86:47:d7:93:c8:bb:
         9d:2c:bc:28:55:2d:fb:09:2e:d6:76:d0:40:4c:2c:38:9e:f8:
         06:de:cc:b6:86:47:e1:c8:fd:c7:3f:a9:b0:f1:f0:2a:6a:ec:
         0b:22:4c:49:c6:ce:85:1f:f4:eb:46:28:4e:a9:8f:5f:57:b2:
         db:bb:76:f4:cb:42:1b:2d:0f:70:fd:a8:06:6d:3e:8b:66:3b:
         21:4f:53:50:f4:ba:7d:35:e2:1e:dd:e3:cb:79:df:1a:c6:73:
         31:d8:02:d5:ac:70:b7:ad:0f:40:0d:3e:96:62:c9:a3:4a:55:
         c9:9b:f9:47:76:36:da:f9:40:26:08:91:f1:f1:3c:56:b1:48:
         9f:fe:60:c5:80:82:69:b3:38:f0:02:37:a6:a7:fa:c8:c0:1c:
         ef:cc:5c:fc:1e:55:b4:24:d7:94:32:08:e7:5a:53:14:37:d7:
         62:33:6a:f5:64:9c:9c:36:45:46:b5:d7:1b:96:14:ee:fe:90:
         82:10:ff:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 03:56:44 2024 by rpki-client on console-fra.rpki-client.org