Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa
File:                     326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa (raw, json)
Hash identifier:          NE4bfYsV+XzbMfMsYggPNoIrdWZQfn3pKgDoNx1OmHE=
Subject key identifier:   5A:38:28:72:36:E1:A9:DA:3B:09:B4:88:C1:D6:E4:35:3D:EF:96:D5
Certificate issuer:       /CN=E02C2B37910DB974089166C0D244DE386B5762C2
Certificate serial:       51D9CBCFD618215B3EC1EB1A544A38447C9A4E43
Authority key identifier: E0:2C:2B:37:91:0D:B9:74:08:91:66:C0:D2:44:DE:38:6B:57:62:C2
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa
Signing time:             Sun 07 Jul 2024 19:19:33 +0000
ROA not before:           Sun 07 Jul 2024 19:14:33 +0000
ROA not after:            Sun 06 Jul 2025 19:19:33 +0000
asID:                     215963
IP address blocks:        2a11:f2c0:ffc9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 17:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d9:cb:cf:d6:18:21:5b:3e:c1:eb:1a:54:4a:38:44:7c:9a:4e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E02C2B37910DB974089166C0D244DE386B5762C2
        Validity
            Not Before: Jul  7 19:14:33 2024 GMT
            Not After : Jul  6 19:19:33 2025 GMT
        Subject: CN=5A38287236E1A9DA3B09B488C1D6E4353DEF96D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:fd:0e:42:2f:21:25:c7:bd:9b:e0:30:53:
                    a0:27:5e:0e:09:ec:4a:2b:ca:29:89:32:27:69:ed:
                    09:38:00:45:93:c5:7f:f6:32:c3:c4:d9:7c:e4:0c:
                    24:82:3f:ef:1f:2e:f9:e0:8e:a4:11:fc:07:fb:ea:
                    69:94:c0:70:08:ec:44:33:0f:b7:b8:ce:02:2b:89:
                    e0:9d:33:5c:ed:9d:2e:b4:80:3b:1c:5f:ac:52:c2:
                    83:25:08:03:44:47:9d:67:da:a2:65:8a:7d:08:a3:
                    be:0c:8c:8e:6a:9d:fa:61:58:99:a2:15:24:6b:fe:
                    73:61:d6:8e:d7:c7:20:ed:82:59:dd:eb:bc:3a:03:
                    ec:1b:8d:bb:58:c8:63:a6:28:1e:c8:fb:6e:78:ca:
                    c6:93:c1:84:d5:db:30:17:3c:6e:7f:0d:8b:fa:4d:
                    65:22:50:c6:80:01:28:bd:1d:82:13:fd:a2:ae:c3:
                    60:98:29:29:77:f7:9f:85:65:00:70:d3:4d:5e:10:
                    79:9d:d1:e1:6a:f6:01:ff:91:90:9c:93:f5:3e:9f:
                    bc:c8:ff:69:ce:db:d3:f8:db:38:ea:64:96:1d:70:
                    73:a5:a7:59:8d:29:0c:c0:5d:79:a4:ed:c7:ed:fe:
                    d1:52:70:1e:b1:21:75:97:85:42:09:44:e7:37:22:
                    20:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:38:28:72:36:E1:A9:DA:3B:09:B4:88:C1:D6:E4:35:3D:EF:96:D5
            X509v3 Authority Key Identifier:
                keyid:E0:2C:2B:37:91:0D:B9:74:08:91:66:C0:D2:44:DE:38:6B:57:62:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/E02C2B37910DB974089166C0D244DE386B5762C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/E02C2B37910DB974089166C0D244DE386B5762C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a792bf2416824748ace8530fb32d91c9/0/326131313a663263303a666663393a3a2f34382d3438203d3e20323135393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc9::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:d0:a8:92:b0:f5:ed:ef:ef:04:8d:5f:fe:df:96:bc:e0:f8:
         28:16:10:41:01:17:c1:91:ad:62:0b:4c:95:99:88:93:15:ac:
         28:60:82:1b:e8:47:99:e3:1a:98:6e:23:a6:57:de:b2:0e:95:
         fb:f6:ce:f7:75:db:c7:43:52:7c:03:0d:2d:5f:5d:9f:2b:90:
         0a:9b:02:10:cc:8d:59:b3:3e:88:21:5f:78:66:6d:58:91:ed:
         28:69:1a:d3:77:f7:ad:cb:41:f3:4f:8a:fe:32:4a:8f:cb:cd:
         cb:46:10:f1:e6:78:dd:96:4f:a7:13:21:b5:5f:94:56:ed:e6:
         00:00:3a:93:9e:60:3f:a3:f4:fe:24:9c:b5:a7:2b:98:a9:ca:
         5a:2a:f3:4d:7a:52:a6:53:c9:e0:8d:dc:8a:37:cf:f5:26:72:
         5d:a3:24:dc:b3:79:30:73:cb:0f:68:4b:b4:2d:66:fb:09:38:
         22:cb:bd:97:ff:27:a5:6b:af:d1:78:cc:a5:df:94:57:9d:85:
         99:ea:34:ae:fc:32:1a:99:c1:f3:b2:57:bb:6b:4e:89:e2:7f:
         57:58:f1:f2:c9:63:96:f2:c2:12:79:00:04:8c:88:03:7c:ee:
         db:09:91:45:df:81:d2:ae:e1:cf:1f:0d:11:cd:7f:70:fe:33:
         7e:39:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 10:13:14 2024 by rpki-client on console-fra.rpki-client.org