Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa
File:                     326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa (raw, json)
Hash identifier:          K9EknQecR357zyEbt4Ik18qSt5faBYxt5/KQfQFvBXQ=
Subject key identifier:   38:E3:7A:13:96:53:73:50:9C:5B:22:E5:60:C6:A9:71:38:2D:51:3E
Certificate issuer:       /CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
Certificate serial:       3AECD37464D831D9A628F1ED72210A0DCD82741B
Authority key identifier: 3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa
Signing time:             Sun 07 Jul 2024 19:25:38 +0000
ROA not before:           Sun 07 Jul 2024 19:20:38 +0000
ROA not after:            Sun 06 Jul 2025 19:25:38 +0000
asID:                     215069
IP address blocks:        2a11:f2c0:ffdc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ec:d3:74:64:d8:31:d9:a6:28:f1:ed:72:21:0a:0d:cd:82:74:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B86A4A45380C6D455CDE580DED1BC5612D0A578
        Validity
            Not Before: Jul  7 19:20:38 2024 GMT
            Not After : Jul  6 19:25:38 2025 GMT
        Subject: CN=38E37A13965373509C5B22E560C6A971382D513E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ed:05:49:d8:63:b4:f7:7b:45:d3:33:74:27:
                    1c:dd:55:21:1d:b2:f5:a2:a5:9b:e2:4a:86:12:78:
                    75:4d:43:11:8b:11:87:10:27:e6:e2:81:ce:58:ed:
                    1f:f4:8d:a6:1f:51:df:be:39:e5:4d:7e:cd:09:0f:
                    df:e7:aa:b6:79:f2:ba:4b:9b:31:eb:d1:eb:6a:aa:
                    ef:3f:de:44:1e:22:dd:41:12:1d:af:40:b8:70:37:
                    c4:45:4f:c0:e0:8e:d2:fc:17:69:48:9d:2a:09:c1:
                    70:8c:04:ca:0d:d2:59:79:3b:09:0d:1c:94:93:84:
                    c4:da:df:1d:75:15:06:ad:01:c4:cf:2d:33:df:f1:
                    54:7a:92:c0:5d:17:d3:44:a6:50:c9:3f:20:41:38:
                    64:e0:cc:c6:4d:6f:67:21:f7:c0:c4:ec:e8:8c:10:
                    85:3d:15:f2:ce:5c:e2:61:bd:1b:e9:02:f9:9f:ad:
                    7c:8d:c7:ee:36:33:09:72:97:bc:74:19:ad:7e:bb:
                    c8:e6:d2:2d:4c:ce:a6:df:13:f3:11:18:cc:4c:2c:
                    9a:93:61:82:0c:0b:31:3c:55:b1:47:98:49:b4:6d:
                    7b:eb:3c:c7:d2:b5:66:df:be:33:2a:4d:4c:e2:ec:
                    46:d1:da:4c:15:dd:fb:11:73:b7:51:55:16:e8:ca:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E3:7A:13:96:53:73:50:9C:5B:22:E5:60:C6:A9:71:38:2D:51:3E
            X509v3 Authority Key Identifier:
                keyid:3B:86:A4:A4:53:80:C6:D4:55:CD:E5:80:DE:D1:BC:56:12:D0:A5:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/3B86A4A45380C6D455CDE580DED1BC5612D0A578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/3B86A4A45380C6D455CDE580DED1BC5612D0A578.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_25405c76c7a043c89ace167e9d2cf79c/0/326131313a663263303a666664633a3a2f34382d3438203d3e20323135303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffdc::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:80:79:6e:aa:f2:7b:6d:47:79:32:37:74:f5:28:76:fd:2a:
         b4:27:5b:48:d1:a6:10:f0:de:64:d0:fa:9c:a5:85:31:cf:08:
         67:f1:dc:2b:16:98:9a:a8:0f:bc:29:72:fa:d1:1f:d1:63:c6:
         e4:f5:04:ca:1f:5d:93:14:f3:e1:69:76:b6:e9:51:14:4d:43:
         6d:34:a2:0d:8c:3c:69:ac:db:12:88:1a:b1:bb:30:f8:47:47:
         4b:e1:6f:b5:4e:a1:56:b3:63:18:1e:07:16:6b:71:a3:e4:60:
         e0:0d:da:81:df:9f:61:7b:e0:3c:99:8f:d7:c0:40:5b:ce:79:
         85:d3:06:97:44:95:c9:1f:a8:33:23:d9:b8:fa:ef:d6:ec:e7:
         f5:aa:00:a8:d9:30:4d:45:09:18:5d:a8:f4:10:5f:79:60:a8:
         71:75:0c:c5:5b:6f:6a:96:21:ff:4c:74:86:4a:7e:5f:31:8b:
         4a:58:c0:08:4e:f2:83:3c:5f:6d:3a:26:79:4c:12:ba:cf:28:
         83:03:43:de:f9:5d:98:ff:7d:90:4e:7b:e1:a4:59:a3:48:57:
         fe:5a:61:04:00:61:ba:92:a1:d0:2c:fe:de:23:0a:c7:81:34:
         4d:51:09:04:dd:b8:bf:7f:49:d5:37:77:20:73:3b:34:80:e5:
         03:c3:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:28 2024 by rpki-client on console-ams.rpki-client.org