Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa
File:                     326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa (raw, json)
Hash identifier:          tMVO+Hc1tj5AW5StgOS15iIM9wSkQFoop+twU5PxB1Q=
Subject key identifier:   F0:5E:85:3E:E7:35:05:6F:BB:AB:C9:19:80:4A:2D:D3:5A:67:F0:13
Certificate issuer:       /CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
Certificate serial:       09F48245607199D33C997583D011591363A70970
Authority key identifier: 5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa
Signing time:             Sun 07 Jul 2024 19:36:11 +0000
ROA not before:           Sun 07 Jul 2024 19:31:11 +0000
ROA not after:            Sun 06 Jul 2025 19:36:11 +0000
asID:                     209245
IP address blocks:        2a11:f2c0:fff7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 03:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f4:82:45:60:71:99:d3:3c:99:75:83:d0:11:59:13:63:a7:09:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ABE2F609996476AAFE146BC5A72429B0B205FC0
        Validity
            Not Before: Jul  7 19:31:11 2024 GMT
            Not After : Jul  6 19:36:11 2025 GMT
        Subject: CN=F05E853EE735056FBBABC919804A2DD35A67F013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:09:f6:7f:50:24:49:47:bb:d3:7d:c4:28:20:
                    f2:ce:17:1b:f4:fc:2f:1a:1f:6c:30:67:f6:68:8a:
                    15:6e:56:34:a3:94:39:0a:95:be:24:b7:2d:84:fe:
                    61:46:a6:fe:b2:22:14:da:2b:5e:ee:45:62:55:5c:
                    39:c0:aa:26:8b:0b:ac:68:ac:95:ab:fe:f6:61:25:
                    7a:03:01:02:80:1f:74:e6:1d:df:61:c5:0a:83:08:
                    e6:5e:e2:27:b0:93:a9:ee:00:2d:45:c6:e0:01:39:
                    9a:79:e5:5a:18:cd:d4:0d:bc:7c:8e:84:02:38:e6:
                    c6:32:20:be:6a:ae:5e:11:7e:61:da:4a:3a:b7:5e:
                    c3:94:1e:ae:53:09:bf:16:cf:55:d7:86:ae:6b:d2:
                    4f:bd:cf:c8:67:45:0c:6a:ec:77:17:e0:af:be:ac:
                    c7:bd:a2:7f:94:8a:11:d5:a0:f5:07:b5:a4:96:a6:
                    43:99:3a:fa:d8:08:6b:eb:43:b7:3b:af:2d:fb:d5:
                    5e:ea:50:5d:b4:c3:3b:17:d8:12:1b:f7:4e:98:af:
                    d3:98:c1:74:4a:c4:ca:b2:96:f1:4e:e4:87:a3:33:
                    90:ff:7a:df:98:33:34:bc:37:5a:11:23:71:37:12:
                    78:79:50:f0:d6:62:4e:ff:5e:dc:02:62:9e:d3:80:
                    61:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5E:85:3E:E7:35:05:6F:BB:AB:C9:19:80:4A:2D:D3:5A:67:F0:13
            X509v3 Authority Key Identifier:
                keyid:5A:BE:2F:60:99:96:47:6A:AF:E1:46:BC:5A:72:42:9B:0B:20:5F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/5ABE2F609996476AAFE146BC5A72429B0B205FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/5ABE2F609996476AAFE146BC5A72429B0B205FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_64832611ba064d6b8f9c2b7c73fbd84b/0/326131313a663263303a666666373a3a2f34382d3438203d3e20323039323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fff7::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:5c:3f:f4:0a:28:a8:14:d2:5e:25:8e:e3:ea:97:d7:f3:69:
         18:85:1a:a2:2e:c7:6a:9b:66:cf:3e:66:13:42:0d:1a:11:fa:
         46:3f:81:42:21:62:5f:cb:a9:28:f8:66:f7:46:a9:4a:6b:29:
         b0:59:67:ff:cd:ce:9b:8e:00:f2:b2:a0:14:a4:6b:a1:70:22:
         aa:97:a3:a5:19:90:99:f3:fe:6f:4e:bf:5d:e3:3a:38:8f:6b:
         f0:2a:4b:62:0a:35:2e:c7:02:de:ad:50:ac:e4:93:7e:69:cb:
         46:9a:70:a8:9d:bb:11:16:f3:e7:75:87:96:ca:e2:f7:aa:4d:
         3b:03:46:37:3d:34:b0:28:63:c6:09:51:a2:db:9d:e9:07:ca:
         0f:d7:f7:45:99:dc:fa:b6:bc:dc:ac:9a:7d:1a:39:82:2f:b9:
         23:8c:6d:00:ce:c5:f0:b8:aa:32:02:a5:7e:7b:ed:f9:1e:f2:
         e1:9a:f0:8a:0a:be:72:76:ba:21:77:ba:2a:d2:0c:4f:76:aa:
         da:e0:b5:19:14:57:44:fd:49:5b:5a:23:56:31:6a:43:cd:b1:
         f8:d2:97:d5:ec:f8:f8:8e:85:57:82:80:5a:8b:43:54:99:a1:
         7f:16:5b:5b:45:c1:b3:bf:16:9d:78:29:46:13:77:a9:b8:fd:
         61:8b:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:17:12 2024 by rpki-client on console-fra.rpki-client.org