Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa
File:                     326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa (raw, json)
Hash identifier:          nGPaoJsTa0iz1OKWgPTFsxZ5o789bs60P5bQmrEBxPY=
Subject key identifier:   85:82:09:98:E8:79:81:43:5D:2E:91:5F:66:F8:C1:0B:45:35:E9:D8
Certificate issuer:       /CN=970AD94C83244100A97F9186D53DADAB07995EE9
Certificate serial:       60597DC67B4F27391F31EC642B8682C27AB269B8
Authority key identifier: 97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa
Signing time:             Sun 07 Jul 2024 19:03:43 +0000
ROA not before:           Sun 07 Jul 2024 18:58:43 +0000
ROA not after:            Sun 06 Jul 2025 19:03:43 +0000
asID:                     212245
IP address blocks:        2a11:f2c0:aca0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Dec 2024 15:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:59:7d:c6:7b:4f:27:39:1f:31:ec:64:2b:86:82:c2:7a:b2:69:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970AD94C83244100A97F9186D53DADAB07995EE9
        Validity
            Not Before: Jul  7 18:58:43 2024 GMT
            Not After : Jul  6 19:03:43 2025 GMT
        Subject: CN=85820998E87981435D2E915F66F8C10B4535E9D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:81:8b:5e:a2:d5:11:a0:f7:67:78:38:d8:2a:
                    ad:7a:fa:2f:c9:a4:31:74:20:bb:31:ec:6c:50:6d:
                    87:5d:c4:e6:2d:73:db:f3:4b:7a:01:49:f8:7f:d6:
                    b8:d6:fb:aa:d3:84:12:3a:6a:52:06:8a:70:56:97:
                    7f:42:cd:2b:f9:cb:34:42:2b:49:a8:b8:cc:02:19:
                    2f:b9:44:23:0d:32:44:5d:36:1d:f2:cb:0b:d9:8d:
                    79:38:90:ea:e9:61:65:be:b4:68:9e:e5:0e:71:be:
                    9c:e8:15:5e:75:f0:1d:85:cb:15:8d:c9:44:a4:53:
                    9d:41:63:94:6f:37:86:4b:71:b7:93:1a:e1:13:f6:
                    25:a2:4c:93:7d:dc:87:e1:97:4d:22:be:38:12:b4:
                    f0:7a:f2:80:e5:04:40:ef:ab:9c:cf:bd:19:a7:bd:
                    6e:b1:cb:97:d8:72:15:ca:95:98:ce:ea:11:ff:8d:
                    e7:f4:3b:39:6c:e9:94:f6:24:e7:f3:6c:ec:8c:8e:
                    a3:b2:98:fd:94:6e:25:ac:b7:64:34:61:86:b6:c3:
                    07:e2:93:4e:9c:99:f7:64:b2:1d:32:65:eb:c9:a2:
                    8e:5a:a3:f3:dd:6d:69:9d:52:71:ae:48:90:ae:d6:
                    78:45:5a:de:5b:68:91:34:81:3a:3a:49:f1:e5:89:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:82:09:98:E8:79:81:43:5D:2E:91:5F:66:F8:C1:0B:45:35:E9:D8
            X509v3 Authority Key Identifier:
                keyid:97:0A:D9:4C:83:24:41:00:A9:7F:91:86:D5:3D:AD:AB:07:99:5E:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/970AD94C83244100A97F9186D53DADAB07995EE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/970AD94C83244100A97F9186D53DADAB07995EE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9d839ca0a55e42a49d10de071f46598b/0/326131313a663263303a616361303a3a2f34342d3438203d3e20323132323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:aca0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:e2:ab:2a:c7:df:54:d2:ef:20:c6:03:39:76:a9:c5:eb:
         86:ce:44:3b:3d:6b:b7:31:6a:b4:c6:58:14:1e:7c:d3:01:48:
         7b:79:16:d0:cb:b3:8b:fa:f1:36:c9:95:30:4e:14:af:a4:e3:
         f7:64:42:68:9e:bd:66:e9:d5:20:e6:77:85:46:85:8e:ba:a8:
         f4:22:ad:e0:00:90:a5:d6:f2:6a:f1:bd:68:a0:48:fa:16:83:
         73:b5:54:d9:5d:97:11:c4:05:9f:61:73:44:72:4a:f0:eb:5c:
         68:db:bc:ab:ab:d7:7f:98:5c:cc:b8:f5:10:79:8c:7c:88:8e:
         67:1a:3e:59:e6:30:e8:0f:b2:68:92:e9:e4:c6:ee:e4:b5:8c:
         6d:dc:09:7e:e1:bb:75:c7:8e:87:d2:72:49:7b:75:5c:7c:e9:
         46:d5:64:ab:83:66:87:dc:c4:92:33:b5:38:ac:b8:38:54:58:
         f1:cf:91:a6:af:e5:41:bb:e8:e7:87:6f:44:46:95:dc:bc:24:
         2d:0d:3d:01:db:5c:4d:86:ca:78:0d:4a:dc:6f:5b:d4:81:35:
         c6:4b:d7:e8:df:dc:23:eb:06:90:2f:56:ed:d5:9f:ed:e2:a7:
         74:3c:95:dd:e6:85:b8:59:60:1e:5d:50:30:c5:2c:d2:3a:2a:
         8b:37:3b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 2 23:32:26 2024 by rpki-client on console-fra.rpki-client.org