Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pong/1/326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa
File:                     326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa (raw, json)
Hash identifier:          j7oAfipQzJ+wsV9wx2c+ig0Hjcuurir0FB/tIsWx2ss=
Subject key identifier:   66:FE:F9:8B:42:CD:7E:D4:EE:72:9F:2D:75:3B:B5:96:2A:6B:67:F6
Certificate issuer:       /CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Certificate serial:       6A6AE84B6C377F5857D118F088F95ED15FAB796A
Authority key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority info access:    rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject info access:      rsync://rpki.co/repo/Pong/1/326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa
Signing time:             Thu 13 Apr 2023 09:53:03 +0000
ROA not before:           Thu 13 Apr 2023 09:48:03 +0000
ROA not after:            Thu 11 Apr 2024 09:53:03 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5210::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl
                          rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
                          rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://rpki.co/repo/August/5/33259DBB3E5512C09F2D867A5933EA377734A1FF.crl
                          rsync://rpki.co/repo/August/5/33259DBB3E5512C09F2D867A5933EA377734A1FF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyWduz5VEsCfLYZ6WTPqN3c0of8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Sep 2023 20:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6a:e8:4b:6c:37:7f:58:57:d1:18:f0:88:f9:5e:d1:5f:ab:79:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
        Validity
            Not Before: Apr 13 09:48:03 2023 GMT
            Not After : Apr 11 09:53:03 2024 GMT
        Subject: CN=66FEF98B42CD7ED4EE729F2D753BB5962A6B67F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e2:26:e6:ba:8b:19:a4:eb:d8:7f:33:8c:23:
                    05:82:67:d0:fe:c1:07:0d:bf:9f:34:92:d8:f1:47:
                    76:97:94:61:12:8c:5a:ce:b0:94:85:50:b8:b4:64:
                    69:bb:3c:6f:ed:6f:cb:90:3a:bf:b1:30:bd:0f:d7:
                    ab:8f:69:9d:21:05:6b:61:45:40:8a:cd:17:15:23:
                    82:a8:29:70:af:d9:c3:f4:e7:05:1e:40:3b:a4:eb:
                    ab:24:e7:da:74:d8:bd:c1:39:82:65:d8:92:e7:a3:
                    30:55:06:0f:32:0d:e7:76:2c:8e:ce:70:0a:04:79:
                    46:81:7f:5f:16:10:66:3a:ab:c5:25:a7:e0:a3:c1:
                    c0:44:12:c8:73:65:b5:31:75:24:7e:dd:61:d9:82:
                    1a:9e:6d:39:ca:92:08:b7:60:e8:c3:46:2a:d4:d9:
                    14:3a:ec:7c:45:43:67:9a:80:74:94:16:63:45:20:
                    c3:e2:cf:82:1c:26:2e:54:bb:f5:f0:27:10:f2:be:
                    37:77:f0:12:95:a0:39:4c:f1:78:1e:89:9f:5a:7b:
                    88:75:f1:89:98:69:31:f5:6f:cd:dd:31:05:a0:64:
                    e1:7b:8d:11:5a:af:35:31:a3:05:a6:56:b1:4d:1c:
                    87:5d:5a:de:78:36:88:29:69:a0:47:a3:d7:de:3d:
                    93:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FE:F9:8B:42:CD:7E:D4:EE:72:9F:2D:75:3B:B5:96:2A:6B:67:F6
            X509v3 Authority Key Identifier:
                keyid:51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pong/1/326131323a646434373a353231303a3a2f34342d3434203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5210::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:12:5d:08:7b:72:f5:a8:e6:2e:54:9f:40:21:d7:95:40:
         41:0b:8d:18:55:a2:ac:59:3c:0f:80:e1:38:73:bd:6c:29:09:
         c8:0e:df:89:1b:35:91:75:bf:bb:f0:b5:20:b3:2c:aa:7b:eb:
         59:a6:e7:33:15:51:57:a7:68:bc:e8:5e:bc:5f:da:fa:84:3e:
         c4:4b:c8:c5:bc:63:e6:ee:94:d8:f3:f1:6e:45:76:95:35:c3:
         aa:09:69:e0:0e:d3:33:46:ae:0f:c4:3a:cf:93:4c:59:2e:6a:
         af:62:14:e1:9b:11:ac:c2:98:5a:7e:5a:8e:a0:22:90:c1:df:
         78:38:86:94:b2:d9:67:d0:cf:ba:3e:25:64:ec:c5:85:01:ae:
         66:4c:7b:63:3c:22:0b:bd:7f:4e:f0:b0:67:3a:c8:34:6c:71:
         61:00:0a:17:9f:f8:b2:c8:79:0c:1d:a5:a6:0b:d3:6c:62:42:
         f5:87:de:81:8d:1f:c4:a7:d7:cb:a0:92:11:9f:32:3a:b1:f7:
         e6:32:c3:2d:f8:0f:e2:07:75:1c:67:96:60:9e:50:35:6b:de:
         ff:35:49:98:b2:e8:a7:80:86:ea:54:63:f7:5d:fc:b1:b0:d3:
         1e:29:ed:54:df:ec:28:0a:36:0a:08:ad:ba:14:8f:89:af:d1:
         87:62:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 12:07:30 2023 by rpki-client on console-fra.rpki-client.org