Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/3/326130363a396634343a623030303a3a2f33362d3438203d3e20313939373632.roa
File:                     326130363a396634343a623030303a3a2f33362d3438203d3e20313939373632.roa (raw, json)
Hash identifier:          joIobybWYYaBAc1+6FHLLCOJjUsfmtIkiT2GFCvPvfQ=
Subject key identifier:   FA:9F:19:97:89:4E:4B:C0:96:D5:88:B2:EE:7F:2E:DF:96:3E:9A:25
Certificate issuer:       /CN=9682B2FF0EB7AE18049761215DA092A02BD2405E
Certificate serial:       460D0079B923F606E49D3FFE09603DD62C7A71C9
Authority key identifier: 96:82:B2:FF:0E:B7:AE:18:04:97:61:21:5D:A0:92:A0:2B:D2:40:5E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/9682B2FF0EB7AE18049761215DA092A02BD2405E.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/3/326130363a396634343a623030303a3a2f33362d3438203d3e20313939373632.roa
Signing time:             Mon 11 Dec 2023 03:39:03 +0000
ROA not before:           Mon 11 Dec 2023 03:34:03 +0000
ROA not after:            Mon 09 Dec 2024 03:39:03 +0000
asID:                     199762
IP address blocks:        2a06:9f44:b000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/3/9682B2FF0EB7AE18049761215DA092A02BD2405E.crl
                          rsync://rpki.komorebi.network/repo/komorebi/3/9682B2FF0EB7AE18049761215DA092A02BD2405E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/9682B2FF0EB7AE18049761215DA092A02BD2405E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 12:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0d:00:79:b9:23:f6:06:e4:9d:3f:fe:09:60:3d:d6:2c:7a:71:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9682B2FF0EB7AE18049761215DA092A02BD2405E
        Validity
            Not Before: Dec 11 03:34:03 2023 GMT
            Not After : Dec  9 03:39:03 2024 GMT
        Subject: CN=FA9F1997894E4BC096D588B2EE7F2EDF963E9A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:59:5d:30:02:b3:97:72:36:ba:20:ed:27:
                    26:bd:5f:a5:2c:e8:37:70:df:14:fd:d8:9c:88:d8:
                    27:4e:fa:81:17:93:db:75:2b:4e:d2:15:b5:2d:fa:
                    23:d1:93:5b:ca:31:bc:de:f5:5c:05:66:b0:8f:64:
                    f3:bd:14:0a:74:a9:07:8a:99:8a:3f:78:2f:04:e8:
                    9f:96:4f:fa:82:28:2d:b4:1a:1e:de:a5:48:da:0b:
                    ca:8d:c4:f8:5a:0a:29:19:15:c0:fd:bb:64:ef:7a:
                    e6:af:30:f3:bf:3a:3a:df:44:d6:f5:ad:02:df:dd:
                    ca:9c:17:e0:ef:4d:58:bc:1e:42:4d:84:01:89:14:
                    30:f2:5e:ba:c1:c7:9c:41:b4:a8:a6:d0:0d:66:70:
                    fc:b3:2f:7f:fa:b1:51:df:b6:93:d7:9a:66:14:36:
                    6c:45:e9:ba:3b:de:b8:f5:b7:8a:f7:2f:e6:6f:ef:
                    05:a3:ae:ea:d7:16:7f:7f:73:36:f8:19:19:f9:85:
                    0f:47:db:a7:de:6f:8f:1d:56:7d:9e:9c:71:3d:2c:
                    39:49:1c:b4:67:31:0b:43:3c:aa:e4:fb:07:f5:28:
                    86:5f:27:8e:68:34:8f:06:0d:0f:c9:f9:c6:4a:70:
                    90:4e:4b:10:9e:14:32:3e:60:81:24:f5:fa:2d:9d:
                    e5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9F:19:97:89:4E:4B:C0:96:D5:88:B2:EE:7F:2E:DF:96:3E:9A:25
            X509v3 Authority Key Identifier:
                keyid:96:82:B2:FF:0E:B7:AE:18:04:97:61:21:5D:A0:92:A0:2B:D2:40:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/3/9682B2FF0EB7AE18049761215DA092A02BD2405E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/9682B2FF0EB7AE18049761215DA092A02BD2405E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/3/326130363a396634343a623030303a3a2f33362d3438203d3e20313939373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f44:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:a7:e3:5b:71:03:fe:ef:93:51:91:fd:70:bc:f9:46:13:0a:
         99:c1:5c:db:7d:c9:b2:9b:e4:af:09:c4:39:55:e1:65:d0:ef:
         33:b4:a3:b1:2e:0a:32:8e:fd:bb:a5:f6:a0:b1:53:90:a5:3d:
         61:37:15:82:90:09:1d:21:1e:e5:be:8e:e5:61:4a:e1:23:69:
         c8:4f:73:d3:df:84:2f:3b:5a:38:1b:01:00:97:ca:63:63:bb:
         85:27:ea:17:64:1b:3d:1b:e5:d7:c2:24:3d:8c:46:2c:62:a5:
         88:7f:55:88:24:38:6a:e7:bd:57:61:b2:91:23:22:29:2d:4a:
         85:70:38:98:cf:b4:b1:f5:59:1b:d1:9c:8e:86:5b:29:21:6c:
         a2:1c:39:50:2a:4e:89:0c:c8:4c:d9:62:0a:47:21:37:29:a9:
         2e:e5:87:8f:4f:86:b7:09:e3:54:34:4a:b1:57:a4:46:08:b6:
         0b:11:23:f1:31:98:5a:47:1b:be:78:3e:82:e4:94:e3:47:3d:
         20:f6:c1:85:53:09:e8:dd:49:3b:b7:63:a0:28:fb:57:11:75:
         36:8c:06:95:f9:03:f1:e1:0e:bd:40:e1:46:8e:10:32:3c:7b:
         0e:3f:4d:f3:aa:d8:f3:d5:b6:f8:6f:15:0b:ed:30:a8:71:44:
         25:d5:a5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:54:33 2024 by rpki-client on console-fra.rpki-client.org