Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630363a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630363a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          mloOBszUVtB5RaEG/zvGUl/yJbvFudOM8L5a49VHS6g=
Subject key identifier:   C2:78:0E:EB:08:CA:3B:10:87:C6:00:90:96:FC:D2:D3:54:5A:95:04
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       5F09DB6575DF5AD295EBA4256774238A6DE8A886
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630363a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Mon 12 Feb 2024 05:40:24 +0000
ROA not before:           Mon 12 Feb 2024 05:35:24 +0000
ROA not after:            Mon 10 Feb 2025 05:40:24 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff06::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:09:db:65:75:df:5a:d2:95:eb:a4:25:67:74:23:8a:6d:e8:a8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Feb 12 05:35:24 2024 GMT
            Not After : Feb 10 05:40:24 2025 GMT
        Subject: CN=C2780EEB08CA3B1087C6009096FCD2D3545A9504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:67:f5:26:8f:e3:15:97:48:48:53:b7:78:
                    7e:51:97:fc:4f:1a:24:5f:52:8b:ff:c1:40:4b:ca:
                    b1:87:68:fa:f4:ae:37:f4:7b:29:00:6d:87:4e:64:
                    bb:5c:00:d4:c6:a6:64:83:c2:85:12:3e:5e:e9:06:
                    08:b8:41:ed:32:39:31:72:68:06:c8:a9:fa:c7:c9:
                    10:f0:d7:15:24:c0:03:18:51:d2:d4:21:d2:01:8a:
                    50:b0:42:b2:6d:60:a0:8c:55:36:6b:5a:44:e3:b1:
                    da:ec:9a:1c:0f:54:63:ac:f0:59:ae:df:7d:58:0f:
                    70:2d:94:a0:81:78:d4:23:db:d5:1c:7b:af:8a:f4:
                    1a:1f:74:f1:34:00:57:da:b7:b0:fa:78:9a:b0:8c:
                    e5:21:97:2d:8a:fa:8e:b6:04:05:6e:b0:f1:8a:50:
                    7f:12:d4:44:67:16:eb:3c:55:52:f8:db:c2:fa:45:
                    3c:34:73:72:06:a7:f6:21:de:fb:fb:38:ad:ec:7d:
                    fe:b6:25:c7:94:9c:83:28:62:dd:fc:8c:66:ad:52:
                    80:8a:96:25:27:f3:e9:b5:33:1d:94:72:e7:9f:ee:
                    52:9d:a0:60:0d:d6:ae:0d:94:56:40:99:a0:ff:6d:
                    6c:fc:03:25:e4:8b:3b:66:68:bd:54:37:f0:75:34:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:78:0E:EB:08:CA:3B:10:87:C6:00:90:96:FC:D2:D3:54:5A:95:04
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630363a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff06::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:ba:e8:b4:3a:e6:54:ac:ed:ba:dc:b1:8a:76:ca:51:6a:d4:
         cb:88:01:1c:bf:0a:bf:a1:ed:e7:32:02:24:57:5d:99:a1:bf:
         99:5c:f6:d7:92:a2:6b:cc:af:7a:84:1d:e7:79:8e:60:4c:e0:
         6d:b5:63:88:a1:83:ad:c0:d5:78:25:7e:7c:8e:e7:6f:51:36:
         c6:3c:98:b4:1a:0a:a4:6d:22:4d:f1:9a:6c:5e:f0:27:92:4c:
         35:cf:91:e1:80:86:b4:85:23:64:51:5f:cb:3c:4a:fa:42:c0:
         d1:77:2b:de:2d:52:a1:2e:fd:52:78:9b:7c:e2:a3:9a:ee:68:
         f8:19:5e:0a:03:8e:ab:9c:c3:bb:3e:34:7f:87:75:fc:87:06:
         c5:5e:c2:80:ca:bc:6a:f3:ad:70:7b:95:f7:be:3f:97:0f:85:
         ad:0a:3a:34:29:a5:49:1f:16:3d:f2:c8:52:cf:2f:3f:a6:9b:
         9a:45:90:1c:d8:45:d5:5c:d9:e1:5c:e5:fc:72:3c:d8:4d:02:
         d8:69:4e:7f:bf:23:1b:5d:86:ca:2b:c4:8e:d1:bd:8a:01:b6:
         df:31:de:8f:e0:b8:a1:e4:30:ee:0e:85:7f:48:ac:2f:04:99:
         b8:37:e4:c7:25:a7:93:70:75:3d:a5:2a:04:c1:d8:5a:76:3d:
         9e:1f:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:05:08 2024 by rpki-client on console-fra.rpki-client.org