Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
File:                     326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa (raw, json)
Hash identifier:          D0ROwoTKCiO0SHKC02McjK2f9xdxhPqW80gKE+eCaEY=
Subject key identifier:   33:A8:35:CC:47:E7:9E:B6:6A:26:4C:07:04:DF:E5:32:57:4F:F6:0D
Certificate issuer:       /CN=4742E76772F118A935D69FD40F69858085C80999
Certificate serial:       2248B602381546563A16AC8A52D2C374063E1660
Authority key identifier: 47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa
Signing time:             Mon 08 Jul 2024 09:30:24 +0000
ROA not before:           Mon 08 Jul 2024 09:25:24 +0000
ROA not after:            Mon 07 Jul 2025 09:30:24 +0000
asID:                     204017
IP address blocks:        2a11:f2c0:fffa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 13:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:48:b6:02:38:15:46:56:3a:16:ac:8a:52:d2:c3:74:06:3e:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4742E76772F118A935D69FD40F69858085C80999
        Validity
            Not Before: Jul  8 09:25:24 2024 GMT
            Not After : Jul  7 09:30:24 2025 GMT
        Subject: CN=33A835CC47E79EB66A264C0704DFE532574FF60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:a6:6a:5b:22:f4:b0:9c:75:3a:22:41:6f:
                    82:75:f9:d9:fd:e6:27:a0:d6:a5:2d:ed:b3:12:dd:
                    83:e9:de:df:30:f4:ed:85:a8:f4:90:ff:43:8a:cf:
                    29:f1:0b:1a:24:db:34:b3:86:e2:ea:51:fb:4f:9d:
                    80:e5:a6:14:2c:cd:4a:d6:0e:15:78:c2:d4:70:41:
                    d8:6b:77:74:ea:8d:ed:a8:4c:f4:39:e9:99:f6:df:
                    59:32:2e:b7:1e:ba:63:94:54:a0:2a:0e:7b:7d:bf:
                    77:d8:df:db:a8:5c:2e:f5:99:a8:b5:45:a1:73:14:
                    a9:e1:fd:a0:18:5b:14:81:10:25:36:2c:b7:15:cb:
                    de:6a:26:48:dd:b0:f4:3f:a4:34:40:e3:2d:9a:8a:
                    79:ba:72:39:e1:12:87:83:b5:29:a9:66:81:7a:0a:
                    3f:bb:a3:0a:35:70:09:90:77:ed:9c:7b:ad:4a:63:
                    3c:c6:1c:a2:26:bb:cd:18:25:ff:49:10:b3:1b:ed:
                    33:0c:c8:cf:ed:23:f7:4c:4a:9c:10:9c:1e:99:0e:
                    b9:8a:22:28:c7:b0:8e:f4:2f:a7:b4:54:b2:b5:e6:
                    8d:ea:7e:15:2c:eb:16:eb:81:bf:66:7b:00:88:cf:
                    83:3b:07:42:3d:e0:9c:32:e2:10:5a:75:9d:4f:35:
                    39:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A8:35:CC:47:E7:9E:B6:6A:26:4C:07:04:DF:E5:32:57:4F:F6:0D
            X509v3 Authority Key Identifier:
                keyid:47:42:E7:67:72:F1:18:A9:35:D6:9F:D4:0F:69:85:80:85:C8:09:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/4742E76772F118A935D69FD40F69858085C80999.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4742E76772F118A935D69FD40F69858085C80999.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_60a090c27c064e078a7f6e446a4fbf70/0/326131313a663263303a666666613a3a2f34382d3438203d3e20323034303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fffa::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:78:f3:43:85:03:29:3a:fd:29:f1:61:a5:68:dc:aa:96:33:
         96:9b:a3:84:29:de:c2:9b:7e:0c:67:9c:33:74:fa:f6:50:a0:
         e4:66:90:0b:69:a0:45:3d:9c:ca:07:ee:a7:9b:0a:1e:25:d4:
         7a:13:a3:9d:6d:96:73:44:ac:1a:e6:dc:44:9c:a7:fe:fe:0c:
         06:0d:88:89:25:3d:d0:05:dd:f4:b5:2f:b4:35:b5:a0:52:91:
         d9:1f:f3:b4:70:3b:99:d2:7b:87:34:b4:a4:51:f4:9f:fa:82:
         00:e7:fe:18:16:14:bd:71:78:d2:34:e3:60:3f:23:55:f5:df:
         fe:35:09:48:27:4c:61:d3:a4:15:34:02:5e:cc:f9:3e:8d:7c:
         00:74:de:18:e6:a7:68:f3:06:a2:32:53:fc:bc:a9:bd:10:d8:
         b5:d8:20:3d:25:cb:b5:ef:31:99:f0:04:06:8d:e0:ed:38:a6:
         60:5f:4d:14:dd:e0:29:b0:c4:05:b9:47:b1:ca:79:06:55:64:
         c6:b0:b2:cd:72:5f:af:ed:ba:e6:db:00:56:3f:21:59:35:29:
         c1:63:4e:44:15:d5:73:06:26:6f:c6:44:c3:d2:23:1e:46:3e:
         a0:5b:21:7a:cd:02:0b:e4:40:8b:06:27:1d:1c:9f:55:21:9b:
         b7:81:60:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 21:51:45 2024 by rpki-client on console-ams.rpki-client.org