Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa
File:                     326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa (raw, json)
Hash identifier:          LPWbZ3H8T5V0b99tYsqi2Q8p59nJ3k5emLiXVD018lg=
Subject key identifier:   8A:DC:D1:52:E7:64:D5:8C:DB:A0:23:33:26:FD:30:45:EF:88:75:6F
Certificate issuer:       /CN=C2724A29EF989A4340933B8130B402DD4627A501
Certificate serial:       17803C784593FC7059C0969A9DDF8ABB208A9865
Authority key identifier: C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa
Signing time:             Sun 07 Jul 2024 19:13:26 +0000
ROA not before:           Sun 07 Jul 2024 19:08:26 +0000
ROA not after:            Sun 06 Jul 2025 19:13:26 +0000
asID:                     198805
IP address blocks:        2a11:f2c0:ffc3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 13:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:80:3c:78:45:93:fc:70:59:c0:96:9a:9d:df:8a:bb:20:8a:98:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2724A29EF989A4340933B8130B402DD4627A501
        Validity
            Not Before: Jul  7 19:08:26 2024 GMT
            Not After : Jul  6 19:13:26 2025 GMT
        Subject: CN=8ADCD152E764D58CDBA0233326FD3045EF88756F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8b:0d:e9:22:be:ba:8e:9d:e7:cb:92:f7:09:
                    4e:a4:97:ea:29:05:c6:10:8f:f3:b6:77:25:fe:a3:
                    33:9f:54:a1:e6:66:d2:08:58:9e:55:f3:06:26:7e:
                    0f:9b:7f:49:b8:95:f2:30:98:46:0b:cd:ee:ff:e1:
                    8e:89:b8:1c:23:ba:89:aa:7c:f6:06:0b:c6:c3:99:
                    8f:50:6a:6a:e5:5d:10:15:f9:f9:e8:a1:34:78:6e:
                    19:f2:21:03:e1:ed:67:a2:52:ba:cc:9e:91:ee:af:
                    26:ef:38:4f:63:8d:f9:8e:81:1d:83:45:51:9b:ba:
                    6f:a3:d5:8c:7d:c3:24:40:09:7c:c5:35:a8:40:e3:
                    80:0f:e6:3d:a3:50:e1:f7:0e:68:92:37:bb:0c:c0:
                    29:30:ed:8d:2b:15:fa:72:3c:78:ce:c1:35:fa:42:
                    1e:47:81:ae:d7:46:37:38:26:86:a5:9e:79:9c:32:
                    a5:b3:6b:16:56:66:8c:32:0b:bb:85:7e:1a:e3:de:
                    da:cd:cb:1d:67:b0:21:f8:11:d5:c0:ad:bb:13:24:
                    b5:7e:58:ec:e8:ff:c6:b6:ca:85:3c:d4:63:14:5f:
                    e2:b1:47:ec:aa:68:3e:20:85:72:c5:5a:9b:21:b8:
                    93:8f:4b:5f:c4:32:97:7e:46:11:51:9e:6f:46:1f:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DC:D1:52:E7:64:D5:8C:DB:A0:23:33:26:FD:30:45:EF:88:75:6F
            X509v3 Authority Key Identifier:
                keyid:C2:72:4A:29:EF:98:9A:43:40:93:3B:81:30:B4:02:DD:46:27:A5:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/C2724A29EF989A4340933B8130B402DD4627A501.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/C2724A29EF989A4340933B8130B402DD4627A501.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8b83e631279f4c69a53fab250bbe69db/0/326131313a663263303a666663333a3a2f34382d3438203d3e20313938383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc3::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:d0:f7:80:cc:ca:33:e7:cb:b8:92:3f:a9:2c:e4:d3:8b:
         2c:84:43:74:3b:b5:cb:4a:ec:72:6e:94:a9:97:f0:58:2e:01:
         bb:c6:a9:55:cb:2a:68:75:52:d1:91:97:c9:c6:bd:89:1a:68:
         c4:82:52:4e:6b:ce:e8:11:2c:8c:e2:11:04:b3:19:5e:5d:65:
         8c:1a:f3:bb:8b:b3:ac:6a:7c:e7:89:6b:96:8b:0e:9a:ea:d5:
         a3:1b:fb:56:5f:da:73:e9:2c:8c:14:20:5c:4f:58:41:2d:bc:
         de:a3:c6:a9:5a:22:31:cb:38:59:26:0b:64:47:3d:87:59:89:
         53:2e:e4:35:fb:78:e2:7c:44:66:6f:cb:81:ff:4b:3a:74:8b:
         26:80:31:ee:7c:51:94:8b:b8:69:4f:18:a9:c1:fb:3f:4d:57:
         0e:7e:d7:cf:37:88:c6:ca:a9:eb:22:4e:46:85:19:89:ed:0d:
         a4:67:d4:5a:97:a9:6c:3d:5e:13:d8:b0:12:34:a1:7f:86:81:
         01:1e:ef:81:97:c1:18:f5:a7:78:72:1a:33:6b:1f:94:63:64:
         8f:e8:9a:17:9d:e0:3e:33:51:54:b2:12:92:fa:99:ee:e1:f5:
         21:15:d6:84:1f:29:91:82:48:71:9f:47:64:e5:b3:90:86:4d:
         9f:71:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 19:55:59 2024 by rpki-client on console-fra.rpki-client.org