Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa
File:                     326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa (raw, json)
Hash identifier:          rM7Iz0AdMAoRVTiJd3bICea3rYWVyAIw/EdVZlqCGD0=
Subject key identifier:   99:A5:20:DE:CB:79:44:DF:83:62:71:8E:67:7E:60:D9:DE:7E:6C:1E
Certificate issuer:       /CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
Certificate serial:       0C8D136E8B834807D53DE86F5AB1790948B51987
Authority key identifier: 1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa
Signing time:             Sun 07 Jul 2024 19:06:36 +0000
ROA not before:           Sun 07 Jul 2024 19:01:36 +0000
ROA not after:            Sun 06 Jul 2025 19:06:36 +0000
asID:                     202076
IP address blocks:        2a11:f2c0:fc00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 03:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8d:13:6e:8b:83:48:07:d5:3d:e8:6f:5a:b1:79:09:48:b5:19:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ABB08D41A5A6974320D97887769A15BA6B7EF71
        Validity
            Not Before: Jul  7 19:01:36 2024 GMT
            Not After : Jul  6 19:06:36 2025 GMT
        Subject: CN=99A520DECB7944DF8362718E677E60D9DE7E6C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:5f:5b:fc:54:89:e6:d0:59:a7:2c:8a:7a:
                    e3:03:4d:75:a5:2a:28:30:cd:8f:f3:af:cf:08:b6:
                    21:65:b5:8d:90:94:8d:e4:5d:f7:a0:ba:3b:ef:49:
                    4c:30:44:95:ae:4a:38:ca:b7:ae:35:eb:95:6e:46:
                    2f:d3:7e:24:41:88:2a:75:1f:ec:47:c4:39:8b:fe:
                    53:be:dd:c7:fa:a3:4e:ec:93:62:65:9c:a7:fc:57:
                    99:7d:40:84:4f:11:69:41:9e:45:73:16:c1:1c:c3:
                    9f:0f:b2:57:e8:75:9e:23:61:c7:b3:28:1a:b6:4c:
                    40:b6:40:de:4f:51:01:cd:f8:a9:bf:71:78:1f:a3:
                    67:3b:47:20:5b:9d:1d:4f:79:e7:29:f3:11:c1:16:
                    e5:39:84:0f:55:12:28:d8:24:ed:9f:f9:09:34:db:
                    54:c5:b6:1d:1d:50:45:17:35:4e:ec:8d:2d:e9:21:
                    9d:8c:55:a5:13:4e:a5:fe:34:14:81:c7:09:23:1f:
                    32:89:6f:8a:4e:93:5e:26:5a:81:a5:ec:73:bf:1e:
                    ae:58:6f:f8:92:fe:01:6e:b0:7e:d8:7c:32:05:1f:
                    dd:9a:75:d7:82:ec:b9:4e:77:3d:1a:96:f0:a7:99:
                    23:e8:d8:95:0b:26:69:4c:fe:9f:25:40:9f:64:ab:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:20:DE:CB:79:44:DF:83:62:71:8E:67:7E:60:D9:DE:7E:6C:1E
            X509v3 Authority Key Identifier:
                keyid:1A:BB:08:D4:1A:5A:69:74:32:0D:97:88:77:69:A1:5B:A6:B7:EF:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/1ABB08D41A5A6974320D97887769A15BA6B7EF71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1ABB08D41A5A6974320D97887769A15BA6B7EF71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_b3da5785f0c841ac8dd815b7354623df/0/326131313a663263303a666330303a3a2f34302d3430203d3e20323032303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:ae:c3:31:75:f5:46:68:d4:4d:ba:eb:c2:09:1c:ce:dd:1e:
         01:53:a2:f4:a8:2b:a8:e6:1e:c2:fb:87:be:06:3e:0b:61:5a:
         37:97:6a:44:cc:aa:9d:fe:be:d2:01:8e:1e:df:d2:2a:77:84:
         c9:12:a5:7c:db:95:2b:01:0a:6c:3b:44:ec:e2:1c:72:9d:a7:
         7c:cc:70:ad:19:3c:69:98:92:7f:7a:04:b6:a7:5d:e3:cc:d6:
         65:16:13:66:fa:22:80:9c:fa:7b:9e:ed:4c:d7:57:a9:4c:4b:
         13:0e:fa:53:bf:dc:fc:f0:5f:e7:f1:6f:e7:96:7a:7f:08:cd:
         8a:07:52:19:7d:cd:a3:e1:cb:34:6e:be:f9:ad:aa:18:e6:f5:
         1e:ca:d6:59:b2:a5:c0:52:51:be:4c:c4:8a:75:ea:29:83:0a:
         57:a2:d2:de:8e:76:93:35:9b:67:a5:e6:e8:35:92:d3:2b:b8:
         a7:45:12:dd:34:b5:f7:ea:41:5d:e6:e8:b3:d2:20:10:99:5f:
         5f:bf:62:6a:cc:6f:14:c7:b6:af:6f:70:1f:7f:36:b6:37:a3:
         e0:01:1a:29:45:69:1c:d7:c8:4e:b3:ab:66:9d:70:f3:32:49:
         9d:84:69:f1:56:ce:e0:4b:af:e3:79:f5:b9:fd:b2:54:87:97:
         df:6f:4a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 11:53:47 2024 by rpki-client on console-fra.rpki-client.org