Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pong/1/326131323a646434373a353261303a3a2f34342d3434203d3e20323030313630.roa
File:                     326131323a646434373a353261303a3a2f34342d3434203d3e20323030313630.roa (raw, json)
Hash identifier:          5wEyeNxwW9eiAa3UXRwI50Uk7QcnFawYTUoXWt9HUfA=
Subject key identifier:   9C:7B:70:93:3D:DB:D0:A9:5A:34:3A:3C:81:DF:83:4F:9D:E5:DF:4E
Certificate issuer:       /CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Certificate serial:       4BCF76E22883789FDCBE9CD6EECFD22B4AC95C7D
Authority key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority info access:    rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject info access:      rsync://rpki.co/repo/Pong/1/326131323a646434373a353261303a3a2f34342d3434203d3e20323030313630.roa
Signing time:             Thu 13 Apr 2023 09:52:27 +0000
ROA not before:           Thu 13 Apr 2023 09:47:27 +0000
ROA not after:            Thu 11 Apr 2024 09:52:27 +0000
asID:                     200160
IP address blocks:        2a12:dd47:52a0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl
                          rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
                          rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://rpki.co/repo/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://rpki.co/repo/August/5/33259DBB3E5512C09F2D867A5933EA377734A1FF.crl
                          rsync://rpki.co/repo/August/5/33259DBB3E5512C09F2D867A5933EA377734A1FF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyWduz5VEsCfLYZ6WTPqN3c0of8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Sep 2023 20:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:cf:76:e2:28:83:78:9f:dc:be:9c:d6:ee:cf:d2:2b:4a:c9:5c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
        Validity
            Not Before: Apr 13 09:47:27 2023 GMT
            Not After : Apr 11 09:52:27 2024 GMT
        Subject: CN=9C7B70933DDBD0A95A343A3C81DF834F9DE5DF4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:30:a3:f4:03:ee:31:17:f7:8e:f1:74:cd:
                    0b:83:d9:b9:28:fe:93:90:40:1b:c4:41:ba:4d:85:
                    15:b2:ed:fc:ce:cb:92:9f:c1:dd:48:f5:cb:f0:5c:
                    88:e7:d2:9d:ad:59:33:72:d3:6c:4f:c0:c8:94:18:
                    49:a4:d5:79:93:a5:8d:8e:86:21:ff:37:e9:95:c1:
                    b5:36:13:d9:79:4a:06:2b:57:5c:c1:08:e9:93:4b:
                    bc:7a:6c:7b:0c:2f:5f:ca:3d:70:64:7a:19:c4:0c:
                    d3:75:39:b6:9a:44:99:ba:6e:cd:90:5a:0b:d8:d0:
                    98:5a:74:5a:0a:fc:4e:aa:40:43:c5:35:7c:d3:73:
                    1b:f2:3c:71:de:b5:7f:ca:b0:8f:bc:f9:f6:42:ee:
                    69:6b:d6:e9:91:58:b3:07:0f:3e:6b:b1:84:bd:72:
                    b4:87:b0:44:7a:65:66:44:20:8c:65:55:36:bb:a3:
                    a3:48:7d:28:dd:c5:d6:b6:bc:e0:67:cb:13:b4:e6:
                    1f:32:d2:c4:17:5d:01:7b:99:c6:26:ef:23:0f:3d:
                    1a:e9:13:a7:3b:74:b0:77:83:58:08:30:f5:80:f3:
                    3a:08:0e:67:f4:f8:fc:a3:0d:fe:45:b0:88:06:ec:
                    4a:ec:df:31:d4:b4:fe:6b:62:71:9f:08:2e:0b:36:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7B:70:93:3D:DB:D0:A9:5A:34:3A:3C:81:DF:83:4F:9D:E5:DF:4E
            X509v3 Authority Key Identifier:
                keyid:51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pong/1/326131323a646434373a353261303a3a2f34342d3434203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:52a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:1e:99:26:27:e1:e8:68:94:08:61:51:b5:42:97:0d:d3:
         ed:23:26:82:c3:a3:6c:6d:25:e4:4a:a7:ba:5c:ce:ca:a6:a2:
         f7:d0:3c:e5:f8:8d:ca:5f:25:e9:4b:49:7e:52:ee:d9:54:c3:
         e7:5b:a3:99:77:69:0c:5d:c3:4d:16:e0:87:10:fb:68:fb:3e:
         59:4a:af:80:a3:ac:b3:fa:ea:d6:4b:67:bd:2a:7c:5d:fc:5b:
         09:65:ec:e5:8c:57:ad:4c:78:5a:83:8d:44:0c:28:bf:22:5b:
         48:8f:0f:18:a5:f2:8c:f1:35:cd:15:aa:63:cc:f3:98:72:1f:
         d5:c7:cb:d4:fb:dd:49:77:e5:85:b3:a2:54:56:2d:4b:13:16:
         8c:55:36:28:cb:2d:fd:92:23:c8:34:32:74:c3:c0:72:40:37:
         be:a5:34:27:21:b0:38:bb:d9:e9:8e:cf:ee:bd:6d:f7:e6:ef:
         da:81:46:aa:1d:e4:ef:cc:60:bb:13:cf:b6:4d:33:d9:95:76:
         84:de:1d:b4:e8:35:4f:04:4d:94:9f:64:6f:0f:00:d5:7c:4b:
         ce:7a:fa:dd:62:b0:45:9e:63:09:bc:1b:de:19:df:74:9e:ba:
         d5:ca:bb:72:66:dd:dc:9d:80:e7:e3:4c:69:61:c6:3b:bb:4c:
         51:a4:ed:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 12:07:30 2023 by rpki-client on console-fra.rpki-client.org