Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa
File:                     326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa (raw, json)
Hash identifier:          smPOZG6iiBqt8JsoMk/NvNKFumAlEDzMaUrGBGXd7Xs=
Subject key identifier:   6C:E3:BD:3B:75:AB:AE:FB:B0:66:16:47:14:DC:26:A2:8E:76:40:11
Certificate issuer:       /CN=6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F
Certificate serial:       35E4C8CB20EE3820D1E79018CD7AED8B5804CF1D
Authority key identifier: 6D:0E:F2:AC:1D:23:5D:1B:50:ED:77:6E:6C:E4:C3:CB:36:AF:06:2F
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa
Signing time:             Sun 07 Jul 2024 19:17:00 +0000
ROA not before:           Sun 07 Jul 2024 19:12:00 +0000
ROA not after:            Sun 06 Jul 2025 19:17:00 +0000
asID:                     216254
IP address blocks:        2a11:f2c0:ffc5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e4:c8:cb:20:ee:38:20:d1:e7:90:18:cd:7a:ed:8b:58:04:cf:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F
        Validity
            Not Before: Jul  7 19:12:00 2024 GMT
            Not After : Jul  6 19:17:00 2025 GMT
        Subject: CN=6CE3BD3B75ABAEFBB066164714DC26A28E764011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:71:c7:a9:7b:9d:28:f9:ea:8e:de:0f:8b:
                    95:02:17:2c:aa:5f:0e:00:9d:f5:c3:3a:fc:0e:ec:
                    3e:b5:53:8c:49:47:5b:91:ff:a9:d9:12:cb:e7:7a:
                    0b:7a:32:94:29:24:95:14:71:72:be:4b:cd:dd:f9:
                    47:80:93:4a:07:eb:08:13:e0:ae:f1:7d:e3:29:12:
                    c7:40:f2:37:cc:02:b9:49:b0:df:80:10:9a:c7:93:
                    8c:3a:00:ae:2d:70:2d:dd:8c:d3:f3:cd:eb:af:f5:
                    72:e1:e4:2f:97:65:a7:e0:04:0a:49:5c:3d:eb:45:
                    c4:88:03:85:d5:ef:3e:00:26:87:86:da:6e:3f:60:
                    68:36:12:2d:45:5b:94:c5:47:00:a2:2a:ba:19:51:
                    68:27:7a:e5:88:70:f6:f1:3e:15:53:4b:51:84:11:
                    13:2d:8b:be:37:01:aa:5b:81:48:1b:cb:4e:9c:17:
                    ea:6c:72:ae:ff:35:6d:e7:95:90:80:28:bb:2b:1d:
                    10:b2:5f:39:34:a9:b0:f5:ac:f4:28:5f:bb:f4:87:
                    80:50:db:db:fe:a8:3b:15:8a:c9:99:fd:a2:d3:3e:
                    96:b0:ec:50:bf:96:f7:c5:4c:82:3a:79:b1:a9:77:
                    5d:c8:53:b6:f7:62:92:ad:41:6c:93:9c:4e:99:d4:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E3:BD:3B:75:AB:AE:FB:B0:66:16:47:14:DC:26:A2:8E:76:40:11
            X509v3 Authority Key Identifier:
                keyid:6D:0E:F2:AC:1D:23:5D:1B:50:ED:77:6E:6C:E4:C3:CB:36:AF:06:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6D0EF2AC1D235D1B50ED776E6CE4C3CB36AF062F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_13609edb63034be0bcf539f2deefbf29/0/326131313a663263303a666663353a3a2f34382d3438203d3e20323136323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc5::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:59:af:4d:6d:fc:e9:9a:24:fa:e1:7c:5a:ba:21:77:fc:88:
         8a:76:ac:e5:e7:9d:b5:2d:1d:c6:56:f4:de:5b:c7:ee:a8:c8:
         ae:6d:76:2b:45:a4:ac:72:f5:a5:09:0e:13:d1:e7:89:dd:66:
         c2:a1:3c:84:ce:16:93:a2:fc:9f:22:42:92:34:8f:2f:a4:ed:
         c2:62:aa:bf:f9:09:7a:44:e5:a8:ca:e0:50:37:75:84:fb:c1:
         ee:af:d5:39:ef:42:16:01:de:ea:9d:07:e7:68:a8:a9:fd:78:
         46:c4:38:2e:55:5b:11:c5:6e:03:49:0d:c6:29:e6:c8:ad:ea:
         a0:bf:fe:55:6e:c0:0c:6c:07:5b:e2:95:32:83:97:c1:86:07:
         e8:d7:ad:cd:b2:a7:a9:65:69:1e:76:c2:31:18:cb:a2:b1:96:
         d2:ee:ef:31:47:fb:de:c2:65:a3:4b:e3:4a:45:ce:1e:d1:e3:
         d4:a4:8b:79:05:b6:db:7c:b0:f5:8f:de:6a:a7:4c:25:88:4b:
         7f:f1:43:14:a6:fa:ab:1e:cf:30:58:cd:55:7d:31:d3:69:c2:
         68:4a:b2:c8:c3:0b:57:37:af:f6:6c:11:48:c3:fa:a2:2d:7c:
         80:4e:7f:f8:89:21:fe:94:a1:07:21:79:75:ba:f1:bb:54:0c:
         45:d2:77:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:06 2024 by rpki-client on console-fra.rpki-client.org