Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa
File:                     326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa (raw, json)
Hash identifier:          Z89FcbCrTMtBscw2h5W75CHunYRsXIbcHNYXASnkLN0=
Subject key identifier:   8C:67:E8:98:55:94:51:0C:91:A4:91:A8:32:75:88:9F:8C:FF:D2:E8
Certificate issuer:       /CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
Certificate serial:       75915142F491B17F8800111AE8DFDCE0285178BB
Authority key identifier: 10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa
Signing time:             Sun 07 Jul 2024 19:31:48 +0000
ROA not before:           Sun 07 Jul 2024 19:26:48 +0000
ROA not after:            Sun 06 Jul 2025 19:31:48 +0000
asID:                     203024
IP address blocks:        2a11:f2c0:fff0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:91:51:42:f4:91:b1:7f:88:00:11:1a:e8:df:dc:e0:28:51:78:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42
        Validity
            Not Before: Jul  7 19:26:48 2024 GMT
            Not After : Jul  6 19:31:48 2025 GMT
        Subject: CN=8C67E8985594510C91A491A83275889F8CFFD2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5a:97:aa:c7:43:fe:5c:b2:f0:cd:16:1b:f9:
                    56:1c:b7:9c:ad:1d:a0:01:45:d8:6a:ce:07:08:49:
                    54:68:45:ed:75:87:31:ac:14:8b:34:f0:43:0d:6f:
                    92:32:2f:29:8d:01:e5:b3:b4:9d:d9:38:21:a3:5a:
                    2f:0b:a8:c4:3c:fa:06:e7:ee:b4:68:ba:19:d2:60:
                    51:fc:13:ff:86:23:48:ae:86:e6:e7:bd:89:99:c0:
                    a5:24:9f:e1:c1:ab:c6:9e:9a:13:ee:9c:c7:a2:92:
                    ab:10:6a:b2:d8:a5:fe:1a:dc:83:35:f3:3c:21:3d:
                    31:b8:6a:d5:d1:c5:07:4b:4d:2a:0c:ca:c6:8a:4e:
                    e0:e6:44:88:63:f2:7b:cb:16:5d:a8:21:a3:d8:25:
                    9f:a7:10:48:22:de:36:32:85:99:19:1d:dc:a9:46:
                    9c:9e:1b:aa:05:35:44:d3:9d:ee:91:22:cd:90:51:
                    e6:ae:5a:ad:ff:eb:4b:e2:5e:7b:6a:11:8c:a5:50:
                    4c:03:76:36:d5:e3:ca:34:7d:f2:8a:fd:be:00:b8:
                    6a:8b:5f:bd:a0:5e:6f:69:82:79:4d:b7:4e:62:d0:
                    d9:d8:d4:91:fe:ea:6d:3a:ff:bd:6a:8b:89:3c:24:
                    cb:dc:47:84:71:b5:fd:6c:6f:a6:ae:1b:3d:0d:16:
                    03:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:67:E8:98:55:94:51:0C:91:A4:91:A8:32:75:88:9F:8C:FF:D2:E8
            X509v3 Authority Key Identifier:
                keyid:10:B5:13:39:C5:BC:CE:70:9C:B6:D6:A1:49:21:AA:F4:C6:BA:6A:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/10B51339C5BCCE709CB6D6A14921AAF4C6BA6A42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_ecb34b04691e4995a606952e836b4ecc/0/326131313a663263303a666666303a3a2f34382d3438203d3e20323033303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:ce:44:62:b9:65:5b:90:0a:3e:d5:1f:c4:8d:53:e3:72:3c:
         ae:eb:f3:27:62:c4:1f:62:86:dc:aa:b0:34:72:59:a5:9f:02:
         6b:2f:4a:e1:20:52:44:17:ae:f8:78:5b:b6:a3:f4:81:7d:4b:
         5c:cd:fa:2f:38:b7:8e:f2:4a:10:a8:0f:09:2c:b9:2e:63:60:
         44:6f:87:0b:51:7b:6e:0b:41:a8:58:89:76:10:03:ec:62:70:
         8c:84:8c:70:c2:c8:a5:31:9b:26:28:b1:d9:a5:23:8f:27:04:
         58:0a:aa:01:87:64:67:8c:e2:d4:7c:29:a7:56:a6:e1:3a:f5:
         42:ab:31:4b:85:9e:49:98:b1:5a:4a:89:58:92:96:1b:72:ed:
         16:43:fa:4b:35:e6:1d:91:2e:5d:15:1f:d5:44:f1:5b:64:5b:
         26:7f:74:20:e3:ac:1a:f3:74:dd:36:f8:35:ca:0a:96:c1:b9:
         3e:1c:0a:ca:5a:fe:3c:8b:3c:6e:be:24:36:37:ac:d7:11:c5:
         55:b1:1a:2e:f0:17:ef:ea:41:9a:b4:0a:10:4f:12:3e:1d:12:
         6d:af:fc:c4:3c:28:e1:b5:21:57:9a:8d:e2:fb:4b:72:e5:51:
         b7:c1:73:ce:73:69:57:37:6c:63:c2:76:5d:4e:96:43:cd:27:
         81:b3:9b:dc
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgIUdZFRQvSRsX+IABEa6N/c4ChReLswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRD
NkJBNkE0MjAeFw0yNDA3MDcxOTI2NDhaFw0yNTA3MDYxOTMxNDhaMDMxMTAvBgNV
BAMTKDhDNjdFODk4NTU5NDUxMEM5MUE0OTFBODMyNzU4ODlGOENGRkQyRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlWpeqx0P+XLLwzRYb+VYct5yt
HaABRdhqzgcISVRoRe11hzGsFIs08EMNb5IyLymNAeWztJ3ZOCGjWi8LqMQ8+gbn
7rRouhnSYFH8E/+GI0iuhubnvYmZwKUkn+HBq8aemhPunMeikqsQarLYpf4a3IM1
8zwhPTG4atXRxQdLTSoMysaKTuDmRIhj8nvLFl2oIaPYJZ+nEEgi3jYyhZkZHdyp
RpyeG6oFNUTTne6RIs2QUeauWq3/60viXntqEYylUEwDdjbV48o0ffKK/b4AuGqL
X72gXm9pgnlNt05i0NnY1JH+6m06/71qi4k8JMvcR4Rxtf1sb6auGz0NFgPvAgMB
AAGjggJ7MIICdzAdBgNVHQ4EFgQUjGfomFWUUQyRpJGoMnWIn4z/0ugwHwYDVR0j
BBgwFoAUELUTOcW8znCcttahSSGq9Ma6akIwDgYDVR0PAQH/BAQDAgeAMIGPBgNV
HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv
cmVwby9ycGtpX2NhX2VjYjM0YjA0NjkxZTQ5OTVhNjA2OTUyZTgzNmI0ZWNjLzAv
MTBCNTEzMzlDNUJDQ0U3MDlDQjZENkExNDkyMUFBRjRDNkJBNkE0Mi5jcmwwgZ4G
CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh
MC1mMGQwMmMwM2EyYzYvNy8xMEI1MTMzOUM1QkNDRTcwOUNCNkQ2QTE0OTIxQUFG
NEM2QkE2QTQyLmNlcjCBswYIKwYBBQUHAQsEgaYwgaMwgaAGCCsGAQUFBzALhoGT
cnN5bmM6Ly9ycGtpLXJlcG8uYXMyMDc5NjAubmV0L3JlcG8vcnBraV9jYV9lY2Iz
NGIwNDY5MWU0OTk1YTYwNjk1MmU4MzZiNGVjYy8wLzMyNjEzMTMxM2E2NjMyNjMz
MDNhNjY2NjY2MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjMwMzMzMDMyMzQu
cm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzAR
MA8EAgACMAkDBwAqEfLA//AwDQYJKoZIhvcNAQELBQADggEBAJbORGK5ZVuQCj7V
H8SNU+NyPK7r8ydixB9ihtyqsDRyWaWfAmsvSuEgUkQXrvh4W7aj9IF9S1zN+i84
t47yShCoDwksuS5jYERvhwtRe24LQahYiXYQA+xicIyEjHDCyKUxmyYosdmlI48n
BFgKqgGHZGeM4tR8KadWpuE69UKrMUuFnkmYsVpKiViSlhty7RZD+ks15h2RLl0V
H9VE8VtkWyZ/dCDjrBrzdN02+DXKCpbBuT4cCspa/jyLPG6+JDY3rNcRxVWxGi7w
F+/qQZq0ChBPEj4dEm2v/MQ8KOG1IVeajeL7S3LlUbfBc85zaVc3bGPCdl1OlkPN
J4Gzm9w=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:12 2024 by rpki-client on console-fra.rpki-client.org