Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa
File:                     326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa (raw, json)
Hash identifier:          CRdzdHWSYcmiZSUenz1Z8qs+SDNJcoSUoxr755stLH4=
Subject key identifier:   99:D6:C0:73:74:8F:09:6C:EE:B7:2A:EB:8B:83:54:EE:24:99:36:37
Certificate issuer:       /CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
Certificate serial:       659E3D8BD8C5897128CA92576CEB40030E0EA731
Authority key identifier: 16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa
Signing time:             Sun 07 Jul 2024 19:34:13 +0000
ROA not before:           Sun 07 Jul 2024 19:29:13 +0000
ROA not after:            Sun 06 Jul 2025 19:34:13 +0000
asID:                     203105
IP address blocks:        2a11:f2c0:fffb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 03:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9e:3d:8b:d8:c5:89:71:28:ca:92:57:6c:eb:40:03:0e:0e:a7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16589CDE5DC3339CE7BBD4BB1C7C14647497C956
        Validity
            Not Before: Jul  7 19:29:13 2024 GMT
            Not After : Jul  6 19:34:13 2025 GMT
        Subject: CN=99D6C073748F096CEEB72AEB8B8354EE24993637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:77:3c:a8:c9:c0:41:2e:e6:3e:07:69:8e:ba:
                    82:7a:67:de:80:1c:9d:21:b6:fd:dd:18:7b:9e:dc:
                    5a:02:e3:bb:1b:06:f1:9f:e0:ea:46:c9:67:a0:3d:
                    d8:80:4f:e5:2f:48:b1:20:6b:2b:b9:5d:af:6e:bb:
                    45:ea:18:00:59:d2:f5:cc:25:10:1f:cf:78:47:08:
                    c9:bc:2a:20:da:46:86:5c:4b:65:ec:c7:73:65:5d:
                    3b:2c:bb:50:cb:5f:26:e4:aa:3f:e8:a3:8e:65:17:
                    91:63:a0:1d:48:5d:07:3e:bd:98:ad:26:a7:07:d3:
                    81:b4:9f:26:9b:cb:b9:26:bc:a3:5e:61:d4:ff:58:
                    05:1d:bb:1c:e3:bb:9b:4b:ea:de:06:92:b8:f7:36:
                    a1:35:0f:d4:59:ef:7a:6e:de:e3:89:ea:ed:34:e2:
                    b4:17:7e:ef:ec:cd:46:3d:89:65:ed:a3:f6:78:8b:
                    87:70:16:8a:47:3a:a1:65:4d:52:44:02:3f:f9:73:
                    e9:8c:d7:ac:18:5e:89:74:d4:4c:ed:51:51:ef:6d:
                    7e:c4:b8:71:44:0f:1d:e2:53:f2:a3:43:4d:d5:8a:
                    b3:2e:46:f5:df:44:82:ed:95:41:e7:ce:53:e3:39:
                    c5:34:49:47:7b:a0:5f:48:7d:45:e1:27:30:ff:09:
                    5b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D6:C0:73:74:8F:09:6C:EE:B7:2A:EB:8B:83:54:EE:24:99:36:37
            X509v3 Authority Key Identifier:
                keyid:16:58:9C:DE:5D:C3:33:9C:E7:BB:D4:BB:1C:7C:14:64:74:97:C9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16589CDE5DC3339CE7BBD4BB1C7C14647497C956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_3db8163f69224798ac2c463c0bca4d6b/0/326131313a663263303a666666623a3a2f34382d3438203d3e20323033313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fffb::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:34:3a:71:9b:9a:da:bb:9f:79:78:26:47:99:75:1a:1b:62:
         c8:bf:d2:c7:a7:02:7c:53:74:70:fe:9e:ca:ef:4d:87:c0:4c:
         99:89:2c:e3:c4:d7:7d:6a:99:16:62:7e:f2:c0:a4:3c:49:28:
         45:52:01:2b:f2:c0:67:f2:2d:cf:da:d0:0b:51:78:b8:be:11:
         c3:49:59:34:74:71:cd:ef:ae:ea:bf:da:61:3e:b5:60:be:43:
         ef:4f:46:d5:01:14:d8:87:7b:61:6d:2c:ed:b0:08:e5:f9:1d:
         19:9f:1e:4c:0b:3d:bd:1a:b3:24:97:b8:74:09:30:57:55:09:
         6a:82:29:3b:73:8d:dc:c6:36:4f:20:17:5e:2d:f7:c4:ed:df:
         8d:65:91:31:1d:67:75:c4:07:4f:2f:d6:a7:2a:30:03:d6:f8:
         9b:e2:56:5c:33:1e:6e:f3:8b:77:62:02:92:a1:70:10:21:8c:
         cd:fe:78:5b:ea:07:3c:ff:45:1e:5e:0b:e2:0d:48:c8:e2:74:
         1d:d2:17:ba:86:fc:f1:c2:c3:4c:e8:ca:c2:6e:e3:cf:d9:f7:
         bc:99:35:27:9c:ea:b0:95:3e:e8:15:d9:f3:a5:30:a9:8c:5c:
         71:66:fb:b1:0b:d0:07:82:6b:8b:43:1d:97:d7:d5:79:61:ee:
         28:60:2f:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIUZZ49i9jFiXEoypJXbOtAAw4OpzEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3
NDk3Qzk1NjAeFw0yNDA3MDcxOTI5MTNaFw0yNTA3MDYxOTM0MTNaMDMxMTAvBgNV
BAMTKDk5RDZDMDczNzQ4RjA5NkNFRUI3MkFFQjhCODM1NEVFMjQ5OTM2MzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdzyoycBBLuY+B2mOuoJ6Z96A
HJ0htv3dGHue3FoC47sbBvGf4OpGyWegPdiAT+UvSLEgayu5Xa9uu0XqGABZ0vXM
JRAfz3hHCMm8KiDaRoZcS2Xsx3NlXTssu1DLXybkqj/oo45lF5FjoB1IXQc+vZit
JqcH04G0nyaby7kmvKNeYdT/WAUduxzju5tL6t4Gkrj3NqE1D9RZ73pu3uOJ6u00
4rQXfu/szUY9iWXto/Z4i4dwFopHOqFlTVJEAj/5c+mM16wYXol01EztUVHvbX7E
uHFEDx3iU/KjQ03VirMuRvXfRILtlUHnzlPjOcU0SUd7oF9IfUXhJzD/CVulAgMB
AAGjggJ7MIICdzAdBgNVHQ4EFgQUmdbAc3SPCWzutyrri4NU7iSZNjcwHwYDVR0j
BBgwFoAUFlic3l3DM5znu9S7HHwUZHSXyVYwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhXzNkYjgxNjNmNjkyMjQ3OThhYzJjNDYzYzBiY2E0ZDZiLzAv
MTY1ODlDREU1REMzMzM5Q0U3QkJENEJCMUM3QzE0NjQ3NDk3Qzk1Ni5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8xNjU4OUNERTVEQzMzMzlDRTdCQkQ0QkIxQzdDMTQ2
NDc0OTdDOTU2LmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT
cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV8zZGI4
MTYzZjY5MjI0Nzk4YWMyYzQ2M2MwYmNhNGQ2Yi8wLzMyNjEzMTMxM2E2NjMyNjMz
MDNhNjY2NjY2NjIzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzMzMTMwMzUu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA//swDQYJKoZIhvcNAQELBQADggEBACI0OnGbmtq7n3l4
JkeZdRobYsi/0senAnxTdHD+nsrvTYfATJmJLOPE131qmRZifvLApDxJKEVSASvy
wGfyLc/a0AtReLi+EcNJWTR0cc3vruq/2mE+tWC+Q+9PRtUBFNiHe2FtLO2wCOX5
HRmfHkwLPb0asySXuHQJMFdVCWqCKTtzjdzGNk8gF14t98Tt341lkTEdZ3XEB08v
1qcqMAPW+JviVlwzHm7zi3diApKhcBAhjM3+eFvqBzz/RR5eC+INSMjidB3SF7qG
/PHCw0zoysJu48/Z97yZNSec6rCVPugV2fOlMKmMXHFm+7EL0AeCa4tDHZfX1Xlh
7ihgL64=
-----END CERTIFICATE-----
Generated at Thu Sep 19 11:53:47 2024 by rpki-client on console-fra.rpki-client.org