Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666530303a3a2f34302d3438203d3e20323030313630.roa
File:                     326130613a363034353a666530303a3a2f34302d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          Uyb497F8GwxRRrksmXvrDDn7BfO5JZmYb8tnOjba8x8=
Subject key identifier:   C0:B2:F9:5B:3C:6C:B3:9B:70:02:B7:8E:A1:68:23:B8:09:EB:AD:B4
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       20BD8E0A24341EA7664FAB8389CE38B06D95B269
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666530303a3a2f34302d3438203d3e20323030313630.roa
Signing time:             Mon 12 Feb 2024 05:49:55 +0000
ROA not before:           Mon 12 Feb 2024 05:44:55 +0000
ROA not after:            Mon 10 Feb 2025 05:49:55 +0000
asID:                     200160
IP address blocks:        2a0a:6045:fe00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bd:8e:0a:24:34:1e:a7:66:4f:ab:83:89:ce:38:b0:6d:95:b2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Feb 12 05:44:55 2024 GMT
            Not After : Feb 10 05:49:55 2025 GMT
        Subject: CN=C0B2F95B3C6CB39B7002B78EA16823B809EBADB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:8f:fc:54:42:36:57:20:03:5f:24:da:bd:
                    f6:0d:75:03:97:26:cd:d8:a4:48:e3:cb:47:28:f3:
                    99:ea:38:ad:b5:76:bf:55:11:6c:2e:e9:07:46:c8:
                    76:26:d4:9a:a7:9c:cd:ab:a8:a9:19:b3:02:fc:63:
                    f0:20:9a:a3:38:86:c4:62:ad:30:f0:c7:83:92:2e:
                    00:27:66:a0:64:42:f8:d1:27:dc:a1:af:19:05:75:
                    d2:7e:c3:6e:60:04:64:13:7f:8a:a1:4c:c6:24:ee:
                    dd:c4:7e:80:e8:e6:b4:b6:74:ab:b2:3c:e1:29:7a:
                    dc:b2:ad:4a:2d:b0:3a:3c:f4:95:23:f0:85:00:20:
                    94:70:b7:e8:7f:99:83:54:b2:a9:f5:fc:19:ad:be:
                    4d:95:70:48:71:d5:d8:94:37:af:1c:01:68:9e:2c:
                    1a:fb:5b:99:6b:d4:11:92:e0:9d:ec:1e:9f:ab:e3:
                    80:56:19:db:8d:3a:01:bf:06:3a:4a:f7:8e:1f:ff:
                    03:f4:72:c0:d9:c5:78:ee:e6:2d:d9:f8:6d:b8:74:
                    2f:81:8e:18:97:e5:d8:3e:ee:0d:dc:61:c0:02:06:
                    cd:b5:aa:f5:9b:2d:8a:a9:45:c8:35:ca:98:df:19:
                    b8:42:dc:b1:8b:7b:f8:2e:af:a5:d3:2b:7a:7d:cb:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B2:F9:5B:3C:6C:B3:9B:70:02:B7:8E:A1:68:23:B8:09:EB:AD:B4
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666530303a3a2f34302d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:5e:9f:4d:30:ee:2a:3e:fe:e9:47:eb:38:de:47:f7:b5:54:
         01:b7:5e:b4:01:5f:72:1a:79:52:43:bf:a6:b5:20:7b:14:66:
         11:98:be:ba:00:56:3e:67:d8:59:e7:f3:8d:4b:46:a8:eb:9e:
         8b:c3:ba:e0:ce:a1:5f:06:74:01:00:9d:c8:6c:3f:a7:29:6a:
         d5:ac:51:ae:8a:29:57:61:ae:c6:c3:be:22:74:9b:2b:3b:ab:
         93:e4:86:26:9c:bc:2f:ee:d7:df:1b:f8:a1:e9:63:a0:45:20:
         ea:b2:0e:c4:4f:1f:fc:dc:cd:87:68:be:e6:bb:3d:55:ef:37:
         7e:78:cf:05:c1:52:8c:f2:76:18:b2:0d:ef:06:ba:fc:53:b4:
         8a:3f:de:ee:14:cd:db:0d:24:ad:3a:56:08:e0:da:8c:c7:36:
         ad:96:9b:fb:ea:5a:2e:3a:ad:d0:ed:72:03:b0:05:d3:d3:eb:
         95:7a:9a:e1:06:08:60:2b:58:84:33:a8:ab:95:6e:34:94:db:
         0d:c9:d0:f3:16:ab:00:73:dd:7a:1c:24:5c:77:f2:c0:80:56:
         3e:8b:e1:62:65:b4:a7:db:a6:5a:f4:44:ec:3d:04:97:df:38:
         10:9c:0d:95:e5:1a:43:0b:df:fc:9d:e3:b5:4f:f7:ef:f7:5d:
         5c:e1:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:05:08 2024 by rpki-client on console-fra.rpki-client.org