Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a636130303a3a2f34302d3438203d3e20323039303235.roa
File:                     326130613a363034353a636130303a3a2f34302d3438203d3e20323039303235.roa (raw, json)
Hash identifier:          gC7J48uw31zDI4cI5j9MPK3pOLd9paWxfX7L+DfL/rI=
Subject key identifier:   26:C4:1A:5D:43:15:64:0A:4D:01:8F:A8:B4:E1:7F:E6:89:8B:BB:F1
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       76A826BE60A25B1839CBF6B1C4F3074D1A6C7F36
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a636130303a3a2f34302d3438203d3e20323039303235.roa
Signing time:             Fri 08 Dec 2023 08:20:16 +0000
ROA not before:           Fri 08 Dec 2023 08:15:16 +0000
ROA not after:            Fri 06 Dec 2024 08:20:16 +0000
asID:                     209025
IP address blocks:        2a0a:6045:ca00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Jun 2024 01:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a8:26:be:60:a2:5b:18:39:cb:f6:b1:c4:f3:07:4d:1a:6c:7f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Dec  8 08:15:16 2023 GMT
            Not After : Dec  6 08:20:16 2024 GMT
        Subject: CN=26C41A5D4315640A4D018FA8B4E17FE6898BBBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:83:ac:ec:84:cb:46:17:0c:d3:e8:c8:d2:22:
                    26:17:2d:fb:c8:a8:51:e0:f2:4c:aa:9e:81:ed:b9:
                    53:af:19:ac:7e:2b:f1:51:ce:9d:dc:32:c6:45:67:
                    24:6f:06:30:75:a9:f5:3b:98:1f:32:77:6f:a0:a9:
                    93:9e:78:db:9b:da:ee:b5:35:e6:f2:1e:07:e8:92:
                    bd:e4:9b:26:11:c9:1e:57:4c:f9:df:47:0b:cc:e4:
                    49:b8:e2:ed:e0:8f:f4:15:73:ea:5c:88:b0:69:bd:
                    2f:e2:51:33:2b:00:54:cb:0d:3a:9a:d6:0c:16:a5:
                    d0:d4:67:c5:05:ed:4f:35:86:78:00:2e:ea:01:b0:
                    81:1f:31:d5:17:c2:71:5e:26:ef:88:8d:27:0a:76:
                    72:be:0b:5b:6e:ab:a9:b0:74:4c:85:d8:77:be:b5:
                    15:43:8e:37:f3:5d:28:20:02:18:12:e8:f7:e4:90:
                    dd:0e:c2:36:9d:35:3d:9c:5d:d7:ea:de:1c:d0:b8:
                    56:ef:c2:38:ad:a0:22:44:b4:df:c0:2c:db:c7:fb:
                    8b:bb:e8:9a:9f:d0:de:cc:b5:4a:b0:93:ab:f0:65:
                    aa:24:a1:0a:62:97:72:ab:13:87:ff:9c:21:0c:e2:
                    f0:a4:6f:30:24:3e:61:e9:e4:d0:10:72:3d:60:cb:
                    37:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C4:1A:5D:43:15:64:0A:4D:01:8F:A8:B4:E1:7F:E6:89:8B:BB:F1
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a636130303a3a2f34302d3438203d3e20323039303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ca00::/40

    Signature Algorithm: sha256WithRSAEncryption
         80:64:37:28:cc:96:64:43:1e:da:79:0c:a1:38:bc:ff:30:6e:
         63:63:d9:cd:1d:81:b0:fe:29:ca:ad:d2:b3:d6:75:89:cd:dd:
         61:09:f5:2c:23:63:73:fe:ca:35:4f:c0:5a:60:e5:93:47:ef:
         e1:8d:47:06:a9:d7:f1:9c:d3:38:cb:16:3c:7c:33:e0:82:f6:
         99:af:28:75:77:d7:9c:8c:d5:38:52:78:e0:87:e4:3f:42:a5:
         1f:60:f7:a4:8b:20:99:9c:49:75:48:e5:35:d6:30:a1:83:dd:
         d9:b0:ed:8e:ff:1f:f9:d1:03:82:51:e8:5b:a7:af:b2:3f:51:
         7f:21:26:a2:66:cb:6a:6e:5e:38:4e:67:a1:98:87:2f:42:49:
         61:d0:da:90:22:c7:77:84:18:22:b2:34:2e:63:c4:4f:c4:27:
         2f:d2:f4:97:2b:1a:e7:c2:4a:28:4e:2e:e4:67:9f:e3:94:b8:
         ec:00:25:8f:f0:62:e9:6c:a7:d7:92:d3:31:65:50:2e:09:b3:
         65:b5:e6:3e:0f:16:2b:91:ad:02:f8:08:6b:76:72:02:f8:61:
         e6:d9:4f:6c:ee:1e:97:1a:e3:65:1e:f3:46:9d:9f:83:98:46:
         83:2a:26:01:a7:51:ef:c7:17:89:3b:42:30:7a:2f:0c:e7:07:
         30:c6:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:37:22 2024 by rpki-client on console-fra.rpki-client.org