Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630303a3a2f34302d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630303a3a2f34302d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          KrDtY6Qoh1kw1AjkTZtwLuX8NoXOy1GClo3hRKS+KfQ=
Subject key identifier:   1A:35:D0:8E:BF:1C:5A:F0:F0:0B:AB:3C:34:65:89:7E:7B:85:39:07
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       573E9989F6B74CCE0B9BEF8CBDE85F4492E5C407
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630303a3a2f34302d3438203d3e20323030313630.roa
Signing time:             Wed 06 Dec 2023 04:25:11 +0000
ROA not before:           Wed 06 Dec 2023 04:20:11 +0000
ROA not after:            Wed 04 Dec 2024 04:25:11 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3e:99:89:f6:b7:4c:ce:0b:9b:ef:8c:bd:e8:5f:44:92:e5:c4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Dec  6 04:20:11 2023 GMT
            Not After : Dec  4 04:25:11 2024 GMT
        Subject: CN=1A35D08EBF1C5AF0F00BAB3C3465897E7B853907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:2f:3a:56:7f:04:fb:15:21:e4:14:ee:aa:
                    94:a3:42:22:54:a5:42:98:51:db:38:5a:1b:0f:c0:
                    1f:f2:a0:51:ba:c4:74:24:91:e9:63:6a:05:3c:58:
                    b2:68:6a:88:02:6a:16:89:62:44:6b:60:45:2b:f7:
                    fd:f8:ee:e2:a0:d5:8f:45:0a:37:9a:cc:f0:ca:93:
                    0a:bd:60:12:d6:d9:67:e7:17:56:59:ce:16:2d:d6:
                    b0:89:56:29:0e:78:ac:fb:69:dd:02:10:27:a0:53:
                    68:34:2e:b7:30:30:9c:cb:14:65:27:1f:dc:06:58:
                    cc:e7:b4:8b:e0:1e:40:0a:e7:63:48:a3:b7:fd:67:
                    d5:19:72:57:17:e0:d5:1c:88:25:e9:da:f8:36:9c:
                    07:07:b0:67:cf:4e:05:4f:e4:80:60:26:60:81:11:
                    f3:ae:e8:65:e1:f6:79:9f:e5:c6:a8:4f:a2:d9:ac:
                    aa:53:ce:51:b8:c2:22:50:fd:7c:c5:f4:eb:a5:bc:
                    4a:b0:d0:6e:f9:bb:eb:65:bc:b0:49:7b:ce:2d:06:
                    dc:6f:97:0c:b4:de:4f:42:e7:2a:9c:4f:23:7d:99:
                    82:c2:0b:bc:21:6c:4f:96:27:cc:ea:e9:5b:95:16:
                    27:cf:88:46:09:3e:0a:d4:7b:1c:cf:1e:60:ac:41:
                    f8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:35:D0:8E:BF:1C:5A:F0:F0:0B:AB:3C:34:65:89:7E:7B:85:39:07
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630303a3a2f34302d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:60:99:66:64:3f:f8:b2:46:d8:6e:f0:07:ba:61:49:d6:
         b8:04:09:ca:db:06:89:d2:92:eb:a9:1e:27:c3:4f:45:a0:be:
         9f:7a:db:76:5d:ee:48:9c:ee:16:86:49:e4:54:5c:c2:f9:f9:
         08:28:6c:d1:d1:59:ef:01:fb:52:ca:7a:d3:17:44:da:69:85:
         fa:7a:62:77:23:63:b6:ab:4e:91:cd:12:12:ed:a9:8d:0e:47:
         bc:34:63:80:67:37:9c:54:c9:0d:32:7d:a1:d7:47:0f:e4:50:
         9e:bc:f3:da:df:ca:aa:f5:a2:54:99:d6:12:a8:f7:12:00:55:
         6c:de:88:47:9b:a9:39:f7:a9:62:e1:1f:a7:38:85:7c:d3:db:
         89:da:8a:f7:d8:73:db:e4:60:47:da:af:7a:e9:73:19:51:5e:
         b7:95:aa:63:a3:3c:44:cb:6a:9d:2c:f2:b8:bb:d0:8a:40:e7:
         17:28:83:0d:ec:7f:71:7e:41:68:fe:64:1d:0d:01:98:82:a9:
         f8:d9:73:8a:5b:79:a1:88:d0:d3:ec:24:ac:a0:df:9e:73:ff:
         64:e3:04:30:9d:d5:02:f0:9e:4f:f1:bf:9c:72:1a:e1:32:31:
         a1:c0:1f:20:b1:a5:6b:a9:00:e0:28:39:13:09:25:a3:b8:b3:
         b1:85:e5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:05:08 2024 by rpki-client on console-fra.rpki-client.org