Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630333a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630333a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          Q9hS68IvdoQjuu0jitGhODO2WHPigOJn/GUnzcS290M=
Subject key identifier:   E5:D4:6D:DD:45:E4:5E:C2:31:F8:3D:9F:21:1A:D6:9E:BC:D1:0E:B8
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       077C1936A5273E78BB9A497EA14103BB863A474D
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630333a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Wed 17 Jan 2024 12:13:29 +0000
ROA not before:           Wed 17 Jan 2024 12:08:29 +0000
ROA not after:            Wed 15 Jan 2025 12:13:29 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff03::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7c:19:36:a5:27:3e:78:bb:9a:49:7e:a1:41:03:bb:86:3a:47:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Jan 17 12:08:29 2024 GMT
            Not After : Jan 15 12:13:29 2025 GMT
        Subject: CN=E5D46DDD45E45EC231F83D9F211AD69EBCD10EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:90:69:2f:dc:1b:e6:d7:a9:d1:11:a7:38:ed:
                    0b:7e:02:b7:4f:01:62:35:ab:40:50:94:a0:fd:e1:
                    a6:a8:d1:a1:b1:6f:a5:f5:26:29:6c:d7:02:23:e6:
                    17:03:7c:17:d5:cf:9a:c5:60:48:1e:cf:7f:c0:9e:
                    ca:85:65:31:08:85:2a:ea:87:c6:71:32:a0:ee:9a:
                    51:d0:da:a5:7f:3e:7c:50:17:a1:96:12:6c:d0:95:
                    86:a9:a1:e7:30:07:05:88:b3:68:ce:42:09:16:4e:
                    92:c3:f1:40:ac:76:4c:ce:35:48:88:0a:5f:1e:7b:
                    3e:5f:70:a9:2a:d6:09:fe:d5:b9:e2:61:c4:8e:24:
                    fb:fb:92:a8:1d:e4:65:6b:c8:90:88:2c:b4:c3:b9:
                    f1:f2:45:62:0e:c4:0c:f3:fb:ff:e5:13:f5:52:c3:
                    c4:e4:83:43:4d:2f:6b:43:ae:31:ad:70:79:ba:f0:
                    db:44:e1:72:a8:e5:02:76:e9:ca:74:2e:66:87:16:
                    f1:4a:92:ba:ae:d3:01:4d:43:29:48:66:b5:14:18:
                    c3:d5:36:07:bd:36:a7:d3:98:a4:a7:44:09:6b:18:
                    b7:6d:c7:8d:99:d1:d2:5f:53:7b:2e:bc:d5:b6:8b:
                    54:86:8d:74:05:4e:a7:0c:0f:23:81:f3:6c:e1:d3:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D4:6D:DD:45:E4:5E:C2:31:F8:3D:9F:21:1A:D6:9E:BC:D1:0E:B8
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630333a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff03::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:b5:1e:27:ef:76:8d:69:29:c1:2a:b6:ea:34:2f:3f:b5:58:
         24:48:d9:56:bd:4a:64:9c:f2:af:22:69:9a:bb:87:2d:49:14:
         01:f0:30:34:52:a4:25:68:b5:f4:0a:75:95:4c:40:d5:da:c3:
         db:6a:23:a3:d7:82:39:f2:e0:7a:65:1b:13:f6:6d:16:59:44:
         fa:8c:00:bd:b5:72:ac:c8:77:a1:d0:22:f7:9f:c2:cd:54:96:
         e9:7f:b1:53:82:e1:70:06:f3:fb:9b:6e:3c:24:3c:5f:e0:12:
         7c:98:a6:c4:76:a8:98:76:fb:56:e0:59:fa:cd:42:2c:5f:d1:
         51:f4:de:89:94:6e:6c:92:d4:53:88:6e:0d:2a:db:45:e6:c8:
         e6:e9:5a:4e:e9:ad:0f:14:c7:0b:b2:83:db:b7:f7:a8:98:24:
         6a:2d:e4:3f:ec:3a:02:e8:2a:88:ab:d7:cc:0f:2c:21:11:5f:
         e1:e0:02:d5:f6:61:59:4a:98:88:ed:d2:a7:12:89:82:db:36:
         1a:f4:dc:f0:c6:45:ac:e4:63:3e:71:11:da:f8:78:1d:af:d6:
         93:04:62:07:7a:ae:10:c8:ad:27:63:56:60:3c:fd:5b:74:07:
         23:78:44:06:ed:11:ee:21:b4:2d:80:c2:35:72:cf:ac:0d:c8:
         db:ee:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:05:08 2024 by rpki-client on console-fra.rpki-client.org