Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a633030303a3a2f33362d3438203d3e20323039303235.roa
File:                     326130613a363034353a633030303a3a2f33362d3438203d3e20323039303235.roa (raw, json)
Hash identifier:          fVL29evf06l3/mtE4ojt+mAUhFIl23R7QEaVleF3dEE=
Subject key identifier:   A7:14:D6:62:E7:F2:58:C5:D9:16:97:95:04:5F:18:8C:0C:83:E5:C0
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       554BF5D438BEF800BC20EF8898F3E6730C59AA81
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a633030303a3a2f33362d3438203d3e20323039303235.roa
Signing time:             Fri 01 Dec 2023 14:06:26 +0000
ROA not before:           Fri 01 Dec 2023 14:01:26 +0000
ROA not after:            Fri 29 Nov 2024 14:06:26 +0000
asID:                     209025
IP address blocks:        2a0a:6045:c000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 01:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4b:f5:d4:38:be:f8:00:bc:20:ef:88:98:f3:e6:73:0c:59:aa:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Dec  1 14:01:26 2023 GMT
            Not After : Nov 29 14:06:26 2024 GMT
        Subject: CN=A714D662E7F258C5D9169795045F188C0C83E5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:2e:c0:35:f0:dc:6c:4f:07:e2:a6:01:d0:
                    3e:f2:9a:31:9a:2c:ce:93:98:21:1c:9d:d3:31:c3:
                    b6:4c:0d:8b:62:9f:0f:d4:f9:67:9c:7b:aa:3a:20:
                    54:b6:bf:a4:bb:2a:a6:71:ae:cf:4d:64:7e:c9:50:
                    83:7b:0a:3a:9b:49:58:6a:62:23:88:a3:86:3d:0e:
                    aa:28:16:aa:66:54:a7:6c:63:3e:88:49:0c:4e:d5:
                    2b:18:0c:a4:e0:80:32:a0:94:a7:3e:3e:f4:11:2d:
                    2a:e8:7f:05:dd:28:34:13:8b:54:47:82:34:5e:09:
                    19:45:14:d0:87:c2:bb:97:4a:19:17:09:25:89:14:
                    dc:d2:23:fe:9b:00:60:62:c6:d4:3c:dc:e0:f5:24:
                    48:38:d9:12:c5:0b:54:a4:a7:7c:27:d5:86:92:45:
                    d6:b9:4c:39:9c:e0:81:07:8f:02:24:ea:26:63:d4:
                    46:d5:f0:28:30:b9:4c:f2:c0:da:c0:cf:9f:8d:41:
                    ce:b5:32:23:74:36:85:2d:e9:c7:ed:45:e3:ee:9e:
                    f7:71:1e:55:ab:a3:1f:8d:ab:1d:15:73:8c:97:97:
                    7a:75:5a:8c:44:22:1a:ac:0f:d6:67:7d:04:06:ca:
                    79:e8:4c:90:af:e6:e3:a7:bb:e5:a8:f5:9c:03:ac:
                    50:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:14:D6:62:E7:F2:58:C5:D9:16:97:95:04:5F:18:8C:0C:83:E5:C0
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a633030303a3a2f33362d3438203d3e20323039303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1a:ab:e0:3c:f5:b4:d7:26:ca:3f:3e:1f:bc:f5:35:26:70:e2:
         63:8b:f0:91:62:07:b2:74:40:72:51:8d:98:8a:0b:5a:09:22:
         99:59:23:d0:77:d5:75:97:3a:3a:6f:cf:07:d5:76:a4:c1:2b:
         f9:0c:11:e2:aa:d4:17:8b:c5:01:03:80:69:bd:f3:1f:05:a5:
         71:f9:80:75:c4:99:1b:b1:f1:81:c8:a1:5b:ef:eb:36:4e:ab:
         f9:97:13:52:39:e9:2c:47:7c:9c:4c:de:f4:82:dc:e5:38:30:
         24:30:64:4c:13:6e:41:3d:da:fa:a8:b2:d3:80:92:cb:86:0d:
         6c:aa:62:d6:a3:f2:a2:8a:06:11:74:05:10:91:08:e6:b8:7f:
         49:04:c0:23:9c:16:8d:45:59:dc:1a:3f:58:b8:db:66:44:8f:
         5a:b7:e0:c0:69:bb:da:09:78:fa:ec:52:c0:fe:0f:ff:7f:cb:
         16:fe:52:a2:65:02:9a:d8:05:02:07:c4:3a:5f:18:1a:dd:47:
         42:40:5e:3b:8b:f7:e2:10:87:95:48:4b:17:a5:0e:4e:af:6f:
         a3:f0:bc:26:20:0d:ee:b7:6a:fe:27:e9:0c:be:22:72:e0:a1:
         ab:dc:94:e6:ce:c9:1f:1c:74:e9:13:ca:cf:b2:c1:ab:c3:4d:
         03:04:00:59
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUVUv11Di++AC8IO+ImPPmcwxZqoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzODFDMjY3MTFCMkEzMDVDNUY5QzNCQzEyMkQ5QTNC
MDI2OUU3MTAeFw0yMzEyMDExNDAxMjZaFw0yNDExMjkxNDA2MjZaMDMxMTAvBgNV
BAMTKEE3MTRENjYyRTdGMjU4QzVEOTE2OTc5NTA0NUYxODhDMEM4M0U1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ni7ANfDcbE8H4qYB0D7ymjGa
LM6TmCEcndMxw7ZMDYtinw/U+Wece6o6IFS2v6S7KqZxrs9NZH7JUIN7CjqbSVhq
YiOIo4Y9DqooFqpmVKdsYz6ISQxO1SsYDKTggDKglKc+PvQRLSrofwXdKDQTi1RH
gjReCRlFFNCHwruXShkXCSWJFNzSI/6bAGBixtQ83OD1JEg42RLFC1Skp3wn1YaS
Rda5TDmc4IEHjwIk6iZj1EbV8CgwuUzywNrAz5+NQc61MiN0NoUt6cftRePunvdx
HlWrox+Nqx0Vc4yXl3p1WoxEIhqsD9ZnfQQGynnoTJCv5uOnu+Wo9ZwDrFAzAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUpxTWYufyWMXZFpeVBF8YjAyD5cAwHwYDVR0j
BBgwFoAUFDgcJnEbKjBcX5w7wSLZo7AmnnEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5uYXAucmUvcmVwby9wb25nZXJ5LzMv
MTQzODFDMjY3MTFCMkEzMDVDNUY5QzNCQzEyMkQ5QTNCMDI2OUU3MS5jcmwwdgYI
KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3Jwa2kua29tb3JlYmku
bmV0d29yay9yZXBvL2tvbW9yZWJpLzEvMTQzODFDMjY3MTFCMkEzMDVDNUY5QzNC
QzEyMkQ5QTNCMDI2OUU3MS5jZXIwgYMGCCsGAQUFBwELBHcwdTBzBggrBgEFBQcw
C4ZncnN5bmM6Ly9ycGtpLm5hcC5yZS9yZXBvL3BvbmdlcnkvMy8zMjYxMzA2MTNh
MzYzMDM0MzUzYTYzMzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIzMDM5
MzAzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKgpgRcAwDQYJKoZIhvcNAQELBQADggEBABqr4Dz1
tNcmyj8+H7z1NSZw4mOL8JFiB7J0QHJRjZiKC1oJIplZI9B31XWXOjpvzwfVdqTB
K/kMEeKq1BeLxQEDgGm98x8FpXH5gHXEmRux8YHIoVvv6zZOq/mXE1I56SxHfJxM
3vSC3OU4MCQwZEwTbkE92vqostOAksuGDWyqYtaj8qKKBhF0BRCRCOa4f0kEwCOc
Fo1FWdwaP1i422ZEj1q34MBpu9oJePrsUsD+D/9/yxb+UqJlAprYBQIHxDpfGBrd
R0JAXjuL9+IQh5VISxelDk6vb6PwvCYgDe63av4n6Qy+InLgoavclObOyR8cdOkT
ys+ywavDTQMEAFk=
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:23:53 2024 by rpki-client on console-ams.rpki-client.org