Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa
File:                     326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa (raw, json)
Hash identifier:          TNOE1pCirHLerhLn7IqYYxyqzFfFoc4KWbe40YB630Y=
Subject key identifier:   7C:59:64:81:80:B2:CA:48:07:E1:8A:61:84:E6:85:97:57:47:B7:FE
Certificate issuer:       /CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
Certificate serial:       2D5EDA8A74989BACC8C4F70DCA59AA58C261BA40
Authority key identifier: 1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa
Signing time:             Sun 07 Jul 2024 20:06:40 +0000
ROA not before:           Sun 07 Jul 2024 20:01:40 +0000
ROA not after:            Sun 06 Jul 2025 20:06:40 +0000
asID:                     215500
IP address blocks:        2a11:f2c0:ffcd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:20:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5e:da:8a:74:98:9b:ac:c8:c4:f7:0d:ca:59:aa:58:c2:61:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FB9C850F913D6C09A776D8BB38327BE701B0F87
        Validity
            Not Before: Jul  7 20:01:40 2024 GMT
            Not After : Jul  6 20:06:40 2025 GMT
        Subject: CN=7C59648180B2CA4807E18A6184E685975747B7FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:f7:2f:8a:5a:67:43:38:3a:e9:ab:80:26:
                    b4:19:99:ff:b2:86:85:f4:e6:06:f1:03:1c:65:99:
                    d1:d7:1e:e7:72:d7:25:81:18:46:34:0c:3a:8a:c9:
                    d3:23:7c:b9:bb:0a:c1:ab:03:f5:0d:51:88:3a:a5:
                    c6:62:37:b3:7a:07:77:91:7d:1a:9f:c6:20:75:ce:
                    fc:d1:f4:9c:f8:ea:61:da:0f:70:ab:0b:01:7a:38:
                    4e:c0:33:38:09:ef:f5:9b:30:54:d4:22:9e:7e:67:
                    9b:d7:cd:3f:45:91:08:94:36:f4:dc:42:21:5c:5c:
                    98:5c:85:a4:13:8f:99:24:71:3b:3a:bb:d5:66:4d:
                    10:e2:38:88:51:26:fc:6b:53:a3:15:c6:37:17:cf:
                    60:07:48:df:cb:a7:8b:04:32:d1:2d:93:17:7f:a3:
                    4d:f5:b2:51:df:50:02:cd:bd:74:0f:37:f2:1b:8f:
                    aa:82:05:b3:c5:ee:e4:5b:c3:4f:f9:87:14:2f:c2:
                    8e:70:1b:9d:70:3e:5c:1d:48:df:43:36:59:41:21:
                    57:dd:f9:24:bb:58:81:9d:d7:cb:75:a2:8c:c6:69:
                    14:38:05:d1:20:2a:7c:d9:a4:e6:43:cc:9d:e4:76:
                    50:89:64:eb:95:30:39:12:cd:69:34:1d:53:8b:96:
                    1d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:59:64:81:80:B2:CA:48:07:E1:8A:61:84:E6:85:97:57:47:B7:FE
            X509v3 Authority Key Identifier:
                keyid:1F:B9:C8:50:F9:13:D6:C0:9A:77:6D:8B:B3:83:27:BE:70:1B:0F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/1FB9C850F913D6C09A776D8BB38327BE701B0F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1FB9C850F913D6C09A776D8BB38327BE701B0F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_cc6c0d0f4c07424392d8238720cc6a82/0/326131313a663263303a666663643a3a2f34382d3438203d3e20323135353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffcd::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:6b:91:fc:bf:7f:6b:9b:59:63:22:50:e0:e9:88:f7:f3:4c:
         88:65:a1:64:5f:22:33:3f:35:c9:42:7c:60:a3:6a:7d:5a:09:
         f1:bd:d2:a8:12:0f:85:e2:3a:3e:b3:3d:04:89:77:c9:49:e2:
         d2:ba:8e:c8:a0:eb:ce:33:35:61:3d:14:8a:14:94:b1:05:8f:
         41:7a:56:be:00:5e:95:4e:8b:b9:32:85:95:a0:67:e3:31:95:
         fb:93:2e:96:14:c2:14:81:c8:a7:74:48:0d:a2:3b:a4:a4:9d:
         ad:f3:a6:ec:5b:eb:37:bf:8f:70:64:c7:c3:69:87:9e:33:ec:
         ca:f3:c5:1a:82:d2:c4:ae:99:b1:2d:42:c1:60:2d:32:a1:0d:
         a2:e4:31:4a:8c:da:13:d3:43:85:a2:81:c8:28:c4:3f:7a:ad:
         5f:86:75:1d:3a:d1:a8:e4:75:16:27:ce:23:54:c7:af:eb:17:
         06:4d:e4:df:98:56:68:4e:c9:2f:24:30:aa:9e:fe:c8:8c:ad:
         c4:7f:56:92:7a:17:04:3c:c3:6f:bf:4f:9b:13:82:dd:9c:07:
         42:d6:67:5b:ff:4d:aa:27:40:44:2f:e9:2d:09:82:43:b5:1e:
         b2:40:31:e1:79:58:10:ea:ef:31:18:19:1b:1d:3b:80:d3:9f:
         bc:e6:7b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:49 2024 by rpki-client on console-fra.rpki-client.org