Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a633030303a3a2f33342d3438203d3e20323030313630.roa
File:                     326130613a363034353a633030303a3a2f33342d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          3lDk7KmU99jNXzfmHIo9hXO5HJ64fA3GbitCB5Dypkg=
Subject key identifier:   F9:C1:28:BC:31:E7:F0:F4:6A:0A:B6:7F:5C:48:C7:AA:F9:87:76:CD
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       6204FBDBAE871F74F56DEB5F332471A020B128BB
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a633030303a3a2f33342d3438203d3e20323030313630.roa
Signing time:             Wed 20 Dec 2023 06:22:05 +0000
ROA not before:           Wed 20 Dec 2023 06:17:05 +0000
ROA not after:            Wed 18 Dec 2024 06:22:05 +0000
asID:                     200160
IP address blocks:        2a0a:6045:c000::/34 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:04:fb:db:ae:87:1f:74:f5:6d:eb:5f:33:24:71:a0:20:b1:28:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Dec 20 06:17:05 2023 GMT
            Not After : Dec 18 06:22:05 2024 GMT
        Subject: CN=F9C128BC31E7F0F46A0AB67F5C48C7AAF98776CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:5c:0e:3a:fb:34:0a:ae:14:1c:23:f1:08:
                    10:c3:4e:2e:b5:04:ed:d7:9c:b9:f7:a3:af:58:4b:
                    35:45:a5:22:82:79:f5:01:4d:35:23:ad:93:ce:45:
                    b4:72:a5:cd:57:37:6a:ef:e3:5d:69:c6:e0:c4:09:
                    f1:5f:93:db:ab:0d:94:c0:aa:32:aa:d3:3b:a4:8e:
                    f2:ff:d5:15:ea:96:67:75:f7:22:7e:5f:38:16:79:
                    d8:ee:8c:aa:bc:c0:aa:73:17:c2:bb:5a:04:04:c7:
                    41:94:59:00:e4:0c:e8:e7:42:41:38:5d:38:07:b6:
                    26:9c:3d:e6:de:08:34:22:67:75:16:7c:bf:36:f9:
                    ec:18:3e:0f:05:a5:fe:16:a2:12:13:8a:98:14:3e:
                    8a:37:f2:81:6b:70:40:9a:49:3b:36:84:70:0c:6f:
                    28:30:f1:0a:cf:c4:8c:20:8c:88:e2:7b:a7:3d:71:
                    67:ad:aa:8d:e1:83:34:2b:fa:40:03:d4:99:d2:86:
                    23:f7:9b:5b:6f:de:b0:25:7f:03:25:c5:48:3c:ae:
                    18:3e:95:b5:dc:27:fa:19:7e:b3:b0:91:1c:25:e3:
                    ab:8c:a8:fd:83:63:55:1f:06:60:c5:41:7e:7a:aa:
                    7b:55:3f:d4:1a:31:b7:9d:74:e2:03:c8:4c:ee:95:
                    40:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C1:28:BC:31:E7:F0:F4:6A:0A:B6:7F:5C:48:C7:AA:F9:87:76:CD
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a633030303a3a2f33342d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         36:2d:49:b7:5a:1a:fb:84:f1:d0:26:5c:7f:8d:1c:1f:01:e2:
         17:73:47:df:f9:65:7b:ba:12:ff:b2:33:4c:d3:e7:93:1d:d2:
         0c:b5:09:2b:a4:15:04:0f:61:ac:3e:ac:c3:34:9e:d2:ae:f0:
         3b:4b:5e:c1:24:d2:5d:da:c6:a9:91:bd:74:76:4f:0f:21:6b:
         15:2d:15:8f:85:82:b9:ff:40:8e:cb:22:be:73:38:e5:6c:99:
         f7:8b:a5:2f:8a:44:53:19:50:0e:96:f5:51:11:68:6d:01:7d:
         59:0d:1c:43:43:08:5f:f8:2b:c2:f5:e2:8a:48:ad:ca:4a:52:
         49:58:51:31:be:12:2b:3e:90:33:0c:64:c4:88:00:13:97:32:
         5b:bd:37:18:5c:3f:09:ac:6d:d5:8a:5e:79:2e:33:64:1d:89:
         68:6b:c4:74:a4:65:e6:d8:26:77:2a:57:fe:3d:2f:5c:d6:fc:
         19:1d:98:e9:8d:93:26:67:9e:40:db:c3:cb:aa:0e:36:d4:a6:
         a0:c8:fe:4d:cd:bb:52:43:d2:95:90:98:40:ee:20:75:6c:62:
         94:c9:72:2c:e6:8b:59:8f:6b:cc:65:bb:c6:bb:b8:f3:c0:bb:
         6a:b7:2b:77:b6:eb:dd:84:40:0f:cb:cc:b9:cf:39:34:cc:d0:
         a6:cc:11:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:34 2024 by rpki-client on console-fra.rpki-client.org