Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a663030303a3a2f33362d3438203d3e20323030313630.roa
File:                     326130613a363034353a663030303a3a2f33362d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          6cz2qyLTPUwj6csLdhgDyqxTl9tuP+gXDX5WBA5mUKU=
Subject key identifier:   CD:3C:C6:F4:BF:49:20:FC:EB:E9:87:CE:19:22:31:65:79:30:58:6D
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       70A6761E7D89C1FAA2C59B77BE1B5313A86658AD
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a663030303a3a2f33362d3438203d3e20323030313630.roa
Signing time:             Fri 01 Dec 2023 12:56:36 +0000
ROA not before:           Fri 01 Dec 2023 12:51:36 +0000
ROA not after:            Fri 29 Nov 2024 12:56:36 +0000
asID:                     200160
IP address blocks:        2a0a:6045:f000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a6:76:1e:7d:89:c1:fa:a2:c5:9b:77:be:1b:53:13:a8:66:58:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Dec  1 12:51:36 2023 GMT
            Not After : Nov 29 12:56:36 2024 GMT
        Subject: CN=CD3CC6F4BF4920FCEBE987CE192231657930586D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:a8:10:dc:94:29:05:b0:66:f9:50:af:67:
                    a9:0f:9c:26:6c:f0:9c:0d:f5:f6:b5:9e:41:5a:73:
                    07:d7:e6:56:6c:a5:d3:aa:7b:2b:1e:a1:c7:15:60:
                    b5:a4:b5:53:d0:44:ba:41:0d:35:7f:7f:c2:ce:e6:
                    0f:89:f2:28:f7:86:2c:f4:e7:9a:3c:c0:aa:d5:3c:
                    a5:19:c2:f2:0a:5b:e0:05:73:46:c9:46:ea:4d:fc:
                    cc:a7:b1:00:4e:50:cb:5e:96:c4:28:c7:66:f2:5d:
                    d1:a2:fd:76:6b:a1:64:54:50:eb:ef:89:a6:2b:2d:
                    b0:1c:0d:ff:54:74:44:86:b5:7f:36:00:d7:c5:e6:
                    22:e4:ae:6d:4f:ad:3a:33:48:d6:ed:e1:a0:97:91:
                    7c:f8:a9:7d:c9:10:ce:30:21:71:25:2a:6b:ac:ce:
                    94:d3:f9:c7:20:90:4e:80:95:27:54:68:30:0a:ee:
                    0c:97:9a:4e:dc:07:ee:09:87:99:0b:2c:04:e3:50:
                    44:1f:0b:d7:61:87:27:ab:79:f2:2e:38:14:a8:bf:
                    f3:72:5b:ba:16:5d:3d:22:cf:2c:fc:6e:43:08:ef:
                    45:98:9e:7e:89:8e:60:fa:90:e1:e0:2a:b1:09:9e:
                    31:00:ce:6e:3e:46:da:7f:54:64:19:1e:34:e5:c5:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3C:C6:F4:BF:49:20:FC:EB:E9:87:CE:19:22:31:65:79:30:58:6D
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a663030303a3a2f33362d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         95:a8:1b:ac:c4:ac:40:ab:50:5d:d1:d0:60:c0:1f:d7:96:aa:
         49:06:bc:1c:9e:ea:f5:88:7a:06:9b:18:73:26:7b:05:15:f5:
         73:9a:11:4b:41:95:04:9f:cf:a9:7c:12:32:13:65:4d:3c:11:
         5f:bf:15:b0:8e:73:42:2a:aa:3c:6c:a6:b0:66:e3:7a:77:cc:
         b6:c2:1f:b3:6e:1a:76:f2:b1:0d:2b:11:35:7e:a7:60:60:38:
         85:89:8e:2b:df:35:62:16:07:a9:85:88:b3:e5:20:48:61:1d:
         65:6f:87:36:97:5d:07:5f:c8:43:d2:80:4d:e3:90:e9:5c:43:
         c0:d4:46:ed:33:c3:96:0e:cd:4f:a6:08:76:23:b1:b9:ae:d4:
         30:42:d7:7d:1f:e6:a8:00:a4:d1:4c:14:fa:db:85:e7:c3:6f:
         2b:90:9c:96:d3:7f:6f:9c:4d:bf:26:c8:0d:18:1b:a4:af:d0:
         04:ed:e6:c7:7b:f1:6e:06:ec:67:91:5d:34:20:c2:36:d3:b0:
         14:78:a8:1a:69:33:9d:6e:c0:3b:59:85:e3:9e:ca:70:a5:11:
         6d:32:d6:a8:37:34:57:32:7f:25:ea:e3:9f:50:65:04:cd:c1:
         b3:43:da:ec:b1:61:d0:61:20:0a:47:d4:5c:60:be:bf:8f:74:
         f2:82:17:47
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUcKZ2Hn2JwfqixZt3vhtTE6hmWK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzODFDMjY3MTFCMkEzMDVDNUY5QzNCQzEyMkQ5QTNC
MDI2OUU3MTAeFw0yMzEyMDExMjUxMzZaFw0yNDExMjkxMjU2MzZaMDMxMTAvBgNV
BAMTKENEM0NDNkY0QkY0OTIwRkNFQkU5ODdDRTE5MjIzMTY1NzkzMDU4NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoMagQ3JQpBbBm+VCvZ6kPnCZs
8JwN9fa1nkFacwfX5lZspdOqeyseoccVYLWktVPQRLpBDTV/f8LO5g+J8ij3hiz0
55o8wKrVPKUZwvIKW+AFc0bJRupN/MynsQBOUMtelsQox2byXdGi/XZroWRUUOvv
iaYrLbAcDf9UdESGtX82ANfF5iLkrm1PrTozSNbt4aCXkXz4qX3JEM4wIXElKmus
zpTT+ccgkE6AlSdUaDAK7gyXmk7cB+4Jh5kLLATjUEQfC9dhhyerefIuOBSov/Ny
W7oWXT0izyz8bkMI70WYnn6JjmD6kOHgKrEJnjEAzm4+Rtp/VGQZHjTlxWTHAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUzTzG9L9JIPzr6YfOGSIxZXkwWG0wHwYDVR0j
BBgwFoAUFDgcJnEbKjBcX5w7wSLZo7AmnnEwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnBraS5uYXAucmUvcmVwby9wb25nZXJ5LzMv
MTQzODFDMjY3MTFCMkEzMDVDNUY5QzNCQzEyMkQ5QTNCMDI2OUU3MS5jcmwwdgYI
KwYBBQUHAQEEajBoMGYGCCsGAQUFBzAChlpyc3luYzovL3Jwa2kua29tb3JlYmku
bmV0d29yay9yZXBvL2tvbW9yZWJpLzEvMTQzODFDMjY3MTFCMkEzMDVDNUY5QzNC
QzEyMkQ5QTNCMDI2OUU3MS5jZXIwgYMGCCsGAQUFBwELBHcwdTBzBggrBgEFBQcw
C4ZncnN5bmM6Ly9ycGtpLm5hcC5yZS9yZXBvL3BvbmdlcnkvMy8zMjYxMzA2MTNh
MzYzMDM0MzUzYTY2MzAzMDMwM2EzYTJmMzMzNjJkMzQzODIwM2QzZTIwMzIzMDMw
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKgpgRfAwDQYJKoZIhvcNAQELBQADggEBAJWoG6zE
rECrUF3R0GDAH9eWqkkGvBye6vWIegabGHMmewUV9XOaEUtBlQSfz6l8EjITZU08
EV+/FbCOc0IqqjxsprBm43p3zLbCH7NuGnbysQ0rETV+p2BgOIWJjivfNWIWB6mF
iLPlIEhhHWVvhzaXXQdfyEPSgE3jkOlcQ8DURu0zw5YOzU+mCHYjsbmu1DBC130f
5qgApNFMFPrbhefDbyuQnJbTf2+cTb8myA0YG6Sv0ATt5sd78W4G7GeRXTQgwjbT
sBR4qBppM51uwDtZheOeynClEW0y1qg3NFcyfyXq459QZQTNwbND2uyxYdBhIApH
1Fxgvr+PdPKCF0c=
-----END CERTIFICATE-----
Generated at Tue May 7 07:05:08 2024 by rpki-client on console-fra.rpki-client.org