Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/1/326130613a363034353a3a2f33362d3336203d3e20313939373632.roa
File:                     326130613a363034353a3a2f33362d3336203d3e20313939373632.roa (raw, json)
Hash identifier:          TINQdpXYGuuvt5pgvtOE0AHgHC/kmmf3qThZtOyOtzE=
Subject key identifier:   D0:7A:A8:B7:1A:E5:E7:A7:94:67:4F:75:B9:BC:89:AE:38:EF:CC:2A
Certificate issuer:       /CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
Certificate serial:       4532EEABC3268551ED506EEEDFEE15F99D1FAD35
Authority key identifier: 0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a3a2f33362d3336203d3e20313939373632.roa
Signing time:             Thu 31 Oct 2024 23:19:18 +0000
ROA not before:           Thu 31 Oct 2024 23:14:18 +0000
ROA not after:            Thu 30 Oct 2025 23:19:18 +0000
asID:                     199762
IP address blocks:        2a0a:6045::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:32:ee:ab:c3:26:85:51:ed:50:6e:ee:df:ee:15:f9:9d:1f:ad:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F24571B693A0709B38AA00142BAC0AD8D8AA300
        Validity
            Not Before: Oct 31 23:14:18 2024 GMT
            Not After : Oct 30 23:19:18 2025 GMT
        Subject: CN=D07AA8B71AE5E7A794674F75B9BC89AE38EFCC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:e3:63:0a:1c:84:e4:78:ca:92:57:be:d8:
                    b8:eb:60:d9:65:27:aa:5b:4a:1f:f5:5a:df:45:b0:
                    1c:3b:d4:e0:5e:cf:62:ca:fb:c7:3f:8c:79:7a:28:
                    4b:94:01:fb:c5:cc:d3:0a:3d:b2:cb:60:92:69:52:
                    c5:0f:30:87:fa:e2:85:2d:e7:ff:f5:00:8f:40:25:
                    b3:e3:82:fb:1c:66:af:fa:1f:2c:75:6a:01:cd:b8:
                    b1:8b:01:e9:32:11:c6:73:db:12:7c:0d:83:be:04:
                    5d:49:ff:5e:50:c8:45:36:43:25:0b:0d:31:10:b1:
                    a1:96:8c:4d:c3:ed:d8:b7:8b:05:87:2b:80:05:bc:
                    a4:6d:4f:27:5c:38:a5:53:01:00:97:cd:4b:a6:05:
                    d6:bf:78:2c:a9:c6:88:2e:48:1e:b4:9a:e8:e9:10:
                    f7:8a:37:ae:26:07:0f:56:ae:a6:b7:5c:d6:0c:a4:
                    df:b4:48:4f:6b:5d:c1:24:cc:30:c6:28:bf:80:86:
                    4e:ab:ce:91:62:99:86:24:66:f8:5b:1f:78:bd:b2:
                    e5:9f:9b:d7:72:66:1a:4d:7c:73:77:48:01:61:60:
                    f8:71:fa:55:e3:6a:ae:32:77:fc:ac:9f:e3:19:21:
                    3e:a5:af:fd:14:d4:89:fe:a9:85:5d:fa:17:d0:06:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7A:A8:B7:1A:E5:E7:A7:94:67:4F:75:B9:BC:89:AE:38:EF:CC:2A
            X509v3 Authority Key Identifier:
                keyid:0F:24:57:1B:69:3A:07:09:B3:8A:A0:01:42:BA:C0:AD:8D:8A:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/1/326130613a363034353a3a2f33362d3336203d3e20313939373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045::/36

    Signature Algorithm: sha256WithRSAEncryption
         3f:09:b5:31:8f:24:b2:01:bc:27:bc:66:2a:5d:51:9d:ad:53:
         78:a0:12:bd:06:8c:11:dc:0a:a2:92:c2:df:1b:e0:4f:67:f1:
         7b:85:d4:6b:38:c8:bb:12:91:a6:16:ae:78:a0:ed:bc:57:44:
         39:b3:71:8f:7b:b1:d7:76:5a:a3:ce:58:0b:a1:6d:dc:c0:de:
         68:65:ef:c8:25:77:a1:31:bc:86:b8:01:26:ac:cf:ff:14:05:
         04:c8:3a:78:9b:27:54:5e:d2:22:ed:87:75:15:b2:6c:3d:24:
         56:ea:72:9a:49:6f:cb:04:18:a9:8d:39:d0:e4:d3:4d:a6:a2:
         1b:ef:13:9f:b9:24:ac:2e:14:f8:33:e4:4b:11:c2:35:07:e0:
         35:97:7a:d3:00:7f:86:1b:50:ef:47:fd:b0:3f:9f:1d:2e:13:
         4c:8d:53:f3:d1:19:3b:73:78:d3:c7:32:5e:87:d2:04:ee:4b:
         1d:c2:33:8a:c8:2d:5b:99:d9:19:a6:9b:0d:7a:26:86:d4:aa:
         5f:7d:dd:bc:32:b1:e8:52:a6:a1:ce:c3:5f:1d:59:da:f1:7e:
         90:ef:6f:fa:62:c2:8d:a6:48:f6:5f:7a:4a:89:b0:13:1b:a3:
         20:fc:70:ce:e4:fc:28:4a:fa:ee:03:da:cd:75:f9:e9:87:04:
         73:90:9b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:34:20 2024 by rpki-client on console-ams.rpki-client.org