Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pong/1/326131323a646434373a353238303a3a2f34342d3434203d3e20323030313630.roa
File:                     326131323a646434373a353238303a3a2f34342d3434203d3e20323030313630.roa (raw, json)
Hash identifier:          d8acthgAHl8+LMrWWKih/sWdhZ/C/ZcILCB6t9xAfKs=
Subject key identifier:   B0:FE:80:B7:0C:D8:DF:32:A7:05:9F:88:0E:8F:3B:70:C5:91:0C:6F
Certificate issuer:       /CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Certificate serial:       4AC50F7DBF0C742FC90E9970A712FEE5A6F34353
Authority key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority info access:    rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject info access:      rsync://rpki.co/repo/Pong/1/326131323a646434373a353238303a3a2f34342d3434203d3e20323030313630.roa
Signing time:             Thu 13 Apr 2023 09:52:22 +0000
ROA not before:           Thu 13 Apr 2023 09:47:22 +0000
ROA not after:            Thu 11 Apr 2024 09:52:22 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5280::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl
                          rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
                          rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://rpki.co/repo/August/5/33259DBB3E5512C09F2D867A5933EA377734A1FF.crl
                          rsync://rpki.co/repo/August/5/33259DBB3E5512C09F2D867A5933EA377734A1FF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyWduz5VEsCfLYZ6WTPqN3c0of8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Sep 2023 20:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c5:0f:7d:bf:0c:74:2f:c9:0e:99:70:a7:12:fe:e5:a6:f3:43:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
        Validity
            Not Before: Apr 13 09:47:22 2023 GMT
            Not After : Apr 11 09:52:22 2024 GMT
        Subject: CN=B0FE80B70CD8DF32A7059F880E8F3B70C5910C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2a:5f:74:f3:97:a6:e3:27:37:e4:d1:3a:a5:
                    e6:3b:10:b1:76:f4:ff:30:dd:de:98:2d:82:1a:02:
                    6d:18:13:76:d5:c0:54:a8:70:31:b5:53:a2:40:0e:
                    95:22:8b:e2:d4:1c:ff:bf:de:82:1e:e9:fb:74:73:
                    07:c5:26:2e:72:92:cd:eb:ce:aa:b6:e5:67:1f:e1:
                    80:f8:ff:9f:61:5b:de:9b:db:9c:69:a4:f7:e1:c7:
                    75:a5:cc:47:d3:c8:20:d7:31:fa:ec:44:e0:4f:45:
                    03:a5:78:d3:09:7b:62:55:fe:ef:0a:44:ec:c0:73:
                    86:f4:45:99:ee:c5:b6:38:9d:7b:4e:cc:ce:e7:fc:
                    54:4e:cc:4e:d9:91:31:8e:14:e5:83:02:bd:51:da:
                    ec:33:5e:60:5c:5a:09:cf:a7:8a:67:2a:eb:4c:9e:
                    62:69:7b:f8:f7:55:8d:30:80:49:69:a9:86:9e:e9:
                    2a:74:3c:64:f2:14:a7:39:38:d2:6d:13:dc:3c:3a:
                    18:7e:8e:91:fc:14:f0:09:a2:67:c7:c8:e9:f8:2a:
                    25:f0:4a:8a:24:bb:c3:c4:a4:0d:95:ec:f1:f6:a8:
                    a4:b1:14:6f:5d:a2:91:4b:47:e7:8d:82:d2:77:f4:
                    a4:98:39:86:f3:70:de:c8:5f:82:7c:5f:23:d7:68:
                    a8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FE:80:B7:0C:D8:DF:32:A7:05:9F:88:0E:8F:3B:70:C5:91:0C:6F
            X509v3 Authority Key Identifier:
                keyid:51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pong/1/326131323a646434373a353238303a3a2f34342d3434203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5280::/44

    Signature Algorithm: sha256WithRSAEncryption
         19:cb:77:2e:28:aa:34:70:0f:bd:9f:3a:c8:d0:a9:ca:79:0a:
         51:03:18:2a:e5:9a:a6:21:35:8d:5c:a6:8d:7d:9c:c6:db:f4:
         58:d8:11:0c:a3:a5:75:ce:26:ec:57:71:ea:dd:cc:e8:85:ea:
         84:13:09:c7:da:d9:f2:ba:6e:8d:87:b8:1b:12:2e:05:41:c7:
         99:55:fd:43:3e:24:10:a9:b2:d5:c2:a0:f7:c8:4e:15:24:65:
         f2:ab:fa:38:4c:28:6a:63:7b:ff:0f:51:3c:cc:10:98:a3:6f:
         5d:f4:33:d0:9a:d5:78:33:50:14:d8:2f:bf:67:c4:c0:ff:9b:
         be:10:be:8c:07:14:fc:0f:cc:10:bc:f8:96:f3:c3:29:ca:61:
         1b:10:f5:14:6a:7e:64:6d:21:92:9c:4a:ff:4f:ba:f0:17:f8:
         48:1b:45:22:71:42:3d:19:60:e5:32:8f:c7:63:24:76:28:1d:
         e6:fb:96:17:09:6a:f9:c5:d7:dc:0a:72:a1:72:12:81:d3:14:
         44:51:db:ba:51:56:a9:3c:ae:ab:dc:e3:74:3e:44:77:5d:a9:
         4c:20:07:d4:b3:37:16:23:ab:ea:d4:ca:35:4e:d0:1b:fe:e0:
         1b:51:eb:4d:ae:4c:32:c9:cc:83:ec:c9:47:e7:d5:55:a8:01:
         70:79:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 12:07:30 2023 by rpki-client on console-fra.rpki-client.org