Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a653030303a3a2f33362d3438203d3e20323133303836.roa
File:                     326130613a363034353a653030303a3a2f33362d3438203d3e20323133303836.roa (raw, json)
Hash identifier:          6g8NHgW7sn54LVF/wdlXTOjlPS6pB/m+QjR0C8BojEw=
Subject key identifier:   96:9F:60:BF:F0:8E:BD:2A:54:3A:11:36:83:FA:45:E0:DE:F0:7A:AC
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       51BD82EAF88176AE03C06DABB33B5F48770F5714
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a653030303a3a2f33362d3438203d3e20323133303836.roa
Signing time:             Fri 01 Dec 2023 14:05:26 +0000
ROA not before:           Fri 01 Dec 2023 14:00:26 +0000
ROA not after:            Fri 29 Nov 2024 14:05:26 +0000
asID:                     213086
IP address blocks:        2a0a:6045:e000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jul 2024 05:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bd:82:ea:f8:81:76:ae:03:c0:6d:ab:b3:3b:5f:48:77:0f:57:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Dec  1 14:00:26 2023 GMT
            Not After : Nov 29 14:05:26 2024 GMT
        Subject: CN=969F60BFF08EBD2A543A113683FA45E0DEF07AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a3:12:99:25:71:c3:d0:c8:a1:f3:86:b0:2e:
                    c2:08:53:e1:73:2e:7f:bc:b5:2b:70:d3:e5:f1:2d:
                    1c:fd:cd:95:6a:5e:bf:fc:90:01:b5:d0:62:68:11:
                    7d:f4:c9:9c:5a:03:95:8e:0e:6e:fa:68:ab:2a:52:
                    d6:f6:29:b8:20:e5:39:3a:59:1b:bc:92:d4:d8:7d:
                    e9:63:05:58:a5:8b:19:a1:31:16:ae:d8:cf:a2:f4:
                    1d:50:2d:c4:9a:fa:ae:5a:5d:4e:89:33:61:a4:ee:
                    05:5c:18:f2:d7:14:f8:ec:10:a8:f9:df:92:f3:32:
                    4a:c2:3a:29:60:46:f0:48:99:f4:f8:a1:36:69:5a:
                    05:10:02:14:43:7a:71:b0:0a:cc:7f:c5:e4:62:2e:
                    7b:f2:4f:41:0f:06:3e:67:d6:3b:d3:18:75:24:92:
                    e8:ca:d0:d9:76:8f:c5:0e:9b:60:cb:1d:b2:14:9c:
                    9f:19:61:fd:48:55:48:e0:65:c4:7c:10:23:96:0c:
                    89:6d:c7:07:4f:6f:01:bf:fc:8b:fd:7a:d4:33:e1:
                    6a:7c:40:ef:a1:d3:5b:16:06:54:58:bb:d5:7e:b7:
                    07:7f:cf:c7:d8:d4:e2:7a:ff:dd:50:e0:85:8d:3b:
                    8f:08:70:b4:8b:91:08:b2:04:39:19:be:d5:49:0d:
                    6f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9F:60:BF:F0:8E:BD:2A:54:3A:11:36:83:FA:45:E0:DE:F0:7A:AC
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a653030303a3a2f33362d3438203d3e20323133303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:12:92:97:fb:e2:0f:48:92:15:6f:00:0a:c6:b9:f7:9e:
         72:04:2d:25:91:ef:67:62:15:56:aa:b4:42:9e:6a:4f:e2:a2:
         b9:f1:bb:1f:b5:b8:d2:58:1c:f1:21:56:cf:40:b2:b4:4c:5a:
         80:56:f1:45:67:f9:7c:90:d6:82:22:ed:5c:c0:b8:46:33:e6:
         92:b2:f2:04:f7:6e:f9:81:1f:56:dc:a6:75:ba:08:19:74:0a:
         a8:8e:9a:9b:ca:6e:8e:dd:19:83:f8:0c:b6:46:9e:b1:d4:17:
         54:85:55:92:4b:78:9e:41:71:56:11:77:3b:06:ab:44:a1:6e:
         66:e9:09:72:c2:5c:d3:a5:e1:fa:b7:fd:c2:09:2f:73:c4:c5:
         97:07:fc:4c:fe:08:c8:b8:5f:45:8f:d7:55:36:5a:c3:35:ac:
         b0:10:36:e9:f4:6d:05:b5:72:62:91:d3:c0:d8:70:4d:7e:32:
         c9:ae:b6:a4:39:96:46:77:a0:b3:cf:f1:dd:d5:00:99:c9:24:
         17:3a:9a:7f:7f:40:61:1d:1c:ea:c4:79:39:84:cb:63:ac:95:
         9a:71:5e:8a:8c:51:7a:66:23:a7:32:0c:ae:24:2a:92:af:04:
         0b:c9:cc:4f:6a:45:fe:04:d4:ca:24:65:c2:05:c9:84:3b:40:
         5b:a9:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 19:55:41 2024 by rpki-client on console-fra.rpki-client.org