Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa
File:                     326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (raw, json)
Hash identifier:          vL1deW40wo8pcYsREoOIq3gzs7RyvFvmmro5dlKeegY=
Subject key identifier:   E3:74:07:3E:74:4F:15:CB:8F:6E:03:C2:74:11:34:4B:86:20:D5:AD
Certificate issuer:       /CN=31586760843F668A816117EA02F6F30FE8F9C359
Certificate serial:       57D49B64BC8BB2F442DFCD6E4AC1877D6ABE5283
Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa
Signing time:             Sun 07 Jul 2024 19:08:08 +0000
ROA not before:           Sun 07 Jul 2024 19:03:08 +0000
ROA not after:            Sun 06 Jul 2025 19:08:08 +0000
asID:                     214578
IP address blocks:        2a11:f2c0:ff80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 05:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d4:9b:64:bc:8b:b2:f4:42:df:cd:6e:4a:c1:87:7d:6a:be:52:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359
        Validity
            Not Before: Jul  7 19:03:08 2024 GMT
            Not After : Jul  6 19:08:08 2025 GMT
        Subject: CN=E374073E744F15CB8F6E03C27411344B8620D5AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:55:53:64:8a:b2:24:66:75:25:55:8b:84:29:
                    55:34:85:a7:c8:08:b8:65:e0:a5:c1:8f:ea:86:6e:
                    dd:ac:79:ee:fe:75:aa:c7:0a:7e:1a:b7:87:cc:45:
                    fd:f5:da:f7:4a:2e:39:f2:7a:73:04:f0:cd:20:96:
                    6e:fa:93:8e:cc:ee:ff:74:2c:d2:d1:47:33:d4:53:
                    bf:ec:b1:61:5e:66:c5:93:ca:07:5d:40:fb:65:c3:
                    36:2b:0b:6b:92:e4:22:6e:9f:cd:c6:d8:5c:4b:ce:
                    6c:41:5c:01:2e:2a:94:fa:2d:05:81:6d:b9:bb:1e:
                    58:f1:93:6f:dd:5c:27:72:e3:57:b5:f1:29:40:1a:
                    33:8e:f3:1d:88:58:fc:76:ff:b0:36:d8:98:ee:fe:
                    1d:80:93:ea:a7:c5:a7:14:af:4d:fc:6d:ad:27:ad:
                    0b:05:36:5e:db:19:cf:b3:6a:b8:80:9d:f0:0e:46:
                    9d:40:ab:52:e8:d9:ee:48:83:d1:21:ba:de:71:92:
                    08:4f:54:fa:f7:c6:e2:a5:4e:9e:6d:ca:f4:de:e8:
                    53:66:36:6c:df:db:fb:f8:4a:bf:80:8a:11:1f:38:
                    49:e3:7c:6b:45:32:da:14:a2:79:11:72:59:36:06:
                    7b:4e:80:9c:d2:78:e1:5c:e7:31:99:61:d7:34:1e:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:74:07:3E:74:4F:15:CB:8F:6E:03:C2:74:11:34:4B:86:20:D5:AD
            X509v3 Authority Key Identifier:
                keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ff80::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:af:eb:3f:64:2c:80:f5:2e:cb:d0:ed:88:c4:00:1f:33:
         7f:07:d9:59:35:13:4a:b0:1d:87:e4:74:1d:2b:56:5c:59:7a:
         f7:34:a7:63:a7:03:85:9e:ab:7c:a6:f6:f9:a5:e0:66:cf:8c:
         44:24:fc:17:f8:61:5f:d4:f3:c5:19:91:1e:f3:9e:e1:3c:9d:
         ee:52:09:d7:88:3b:a3:20:2d:8b:e4:4b:b7:4d:89:50:ce:9d:
         ec:41:bb:ad:b0:1f:a6:c9:96:b0:d5:05:7c:19:38:30:f7:ec:
         2b:b9:71:de:65:69:9e:e6:bb:69:08:fe:fc:cf:41:52:17:4f:
         88:cd:87:ec:4e:36:ee:0e:33:1d:29:6f:4e:f9:87:2b:3f:54:
         63:06:ba:57:89:6b:65:cc:b3:49:75:0e:00:ba:b0:3a:18:4a:
         30:f9:ca:67:dd:b2:af:8f:f3:60:40:5c:da:16:75:d3:67:8e:
         9c:78:9f:6e:cb:43:9d:57:8c:24:3e:1c:44:c1:3b:0c:ed:69:
         f4:55:e4:51:33:1d:87:d7:02:43:44:c5:10:31:f2:1f:d5:20:
         0e:df:10:2a:87:68:1a:5e:25:64:53:2b:04:12:f1:3b:31:44:
         19:03:b4:76:3b:39:63:cd:4d:00:22:6e:c9:1e:1a:56:34:34:
         36:79:79:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:06 2024 by rpki-client on console-fra.rpki-client.org