Route Origin Authorization

$ rpki-client -vvf rpki.komorebi.network/repo/komorebi/4/326130613a363034303a333030303a3a2f34302d3438203d3e20313939373632.roa
File:                     326130613a363034303a333030303a3a2f34302d3438203d3e20313939373632.roa (raw, json)
Hash identifier:          gIU8wlHcN3TI0TmGuhN5nwVZF35Fsew+9p+ZnEJiTss=
Subject key identifier:   D1:13:EF:6E:CE:52:3A:31:03:A0:0D:E0:FF:E5:AC:AD:21:FD:CA:A5
Certificate issuer:       /CN=D5131EA7CE59E57775DE7C271A69CCF2356A207F
Certificate serial:       73F5CB3DA0C261F0E9CC9BAA32AF9E76E70F6006
Authority key identifier: D5:13:1E:A7:CE:59:E5:77:75:DE:7C:27:1A:69:CC:F2:35:6A:20:7F
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D5131EA7CE59E57775DE7C271A69CCF2356A207F.cer
Subject info access:      rsync://rpki.komorebi.network/repo/komorebi/4/326130613a363034303a333030303a3a2f34302d3438203d3e20313939373632.roa
Signing time:             Mon 11 Nov 2024 04:19:19 +0000
ROA not before:           Mon 11 Nov 2024 04:14:19 +0000
ROA not after:            Mon 10 Nov 2025 04:19:19 +0000
asID:                     199762
IP address blocks:        2a0a:6040:3000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.komorebi.network/repo/komorebi/4/D5131EA7CE59E57775DE7C271A69CCF2356A207F.crl
                          rsync://rpki.komorebi.network/repo/komorebi/4/D5131EA7CE59E57775DE7C271A69CCF2356A207F.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D5131EA7CE59E57775DE7C271A69CCF2356A207F.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f5:cb:3d:a0:c2:61:f0:e9:cc:9b:aa:32:af:9e:76:e7:0f:60:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5131EA7CE59E57775DE7C271A69CCF2356A207F
        Validity
            Not Before: Nov 11 04:14:19 2024 GMT
            Not After : Nov 10 04:19:19 2025 GMT
        Subject: CN=D113EF6ECE523A3103A00DE0FFE5ACAD21FDCAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6a:4f:29:0a:53:d4:c9:51:a4:be:58:c9:03:
                    c8:45:63:82:04:43:55:c5:88:3c:aa:b4:c2:61:76:
                    9f:9c:26:a0:ca:5e:07:bc:42:01:51:57:43:31:19:
                    f9:e1:5e:92:44:be:a3:e9:ea:d5:ff:1a:40:ca:69:
                    d7:39:d4:4b:f0:97:a8:12:b9:0d:6f:29:43:13:45:
                    85:6a:d0:1b:af:77:ba:9d:14:2a:bc:73:e0:0c:e8:
                    44:00:bc:74:75:f5:2d:a4:85:54:52:db:55:1e:d1:
                    7b:cb:22:58:32:ef:be:12:ec:95:84:70:e3:00:5b:
                    e6:ae:03:9c:7a:af:eb:ad:48:94:d1:7a:85:eb:86:
                    78:f4:07:e5:46:38:f7:02:26:ba:55:2a:36:96:36:
                    56:6f:8d:89:4a:76:f1:13:29:e3:97:30:9c:4a:64:
                    31:e6:8e:10:e0:29:b5:8a:0f:c7:61:d5:c5:a2:d0:
                    34:8f:06:18:1c:dc:fa:1b:d1:a1:60:a6:10:13:55:
                    7f:08:98:cf:10:62:64:48:85:9f:1d:72:a9:ff:26:
                    b4:b5:65:d5:8f:e1:3e:14:24:b1:83:a9:ea:68:46:
                    a4:c4:02:f5:c4:9e:a1:8b:9b:82:b5:ed:4f:b5:a8:
                    a6:e7:b0:a4:d9:c2:2d:a1:62:c0:72:9a:66:7b:04:
                    ae:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:13:EF:6E:CE:52:3A:31:03:A0:0D:E0:FF:E5:AC:AD:21:FD:CA:A5
            X509v3 Authority Key Identifier:
                keyid:D5:13:1E:A7:CE:59:E5:77:75:DE:7C:27:1A:69:CC:F2:35:6A:20:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.komorebi.network/repo/komorebi/4/D5131EA7CE59E57775DE7C271A69CCF2356A207F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D5131EA7CE59E57775DE7C271A69CCF2356A207F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.komorebi.network/repo/komorebi/4/326130613a363034303a333030303a3a2f34302d3438203d3e20313939373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:3000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:19:62:86:46:9b:59:03:cf:0e:68:26:c0:2e:b3:1c:c1:
         90:c0:e4:54:74:64:38:f2:e2:2f:7f:f0:e3:ab:d0:a3:33:88:
         91:52:11:0e:38:97:05:db:a2:63:25:c0:30:95:98:c8:7c:0a:
         d7:a4:99:0b:5a:28:c3:24:b2:d9:b0:47:42:e3:96:6b:29:64:
         81:e9:5c:8b:d0:ba:cb:dc:e8:e2:e8:1d:8d:fa:67:d6:59:9a:
         88:ff:79:86:23:56:04:05:af:e7:5f:a8:87:e8:22:44:f0:4e:
         7a:4a:c3:99:6f:c9:e3:d1:61:d5:54:59:91:9f:99:6d:27:6d:
         93:55:7e:1a:4f:4b:ae:e5:b8:99:12:4f:87:d8:3c:05:df:41:
         33:2c:ef:31:d4:96:6d:db:f6:c1:15:bb:38:d6:85:96:2a:fb:
         48:d0:40:77:06:f8:ed:b9:04:01:30:49:ad:d8:c5:4b:1c:94:
         15:ce:ee:a4:32:6c:2c:ad:96:5e:80:23:8d:87:cc:9c:71:cf:
         61:0f:55:2f:aa:83:77:af:0c:3c:4a:df:7d:5d:f9:88:de:e8:
         85:70:80:05:da:14:7d:78:3c:55:7b:73:3d:f0:9c:2c:d3:f1:
         d6:7b:25:2e:ed:fd:bc:29:70:64:da:be:46:e7:89:9f:77:5d:
         ad:a7:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:43:09 2024 by rpki-client on console-ams.rpki-client.org