Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630383a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630383a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          7dL0Bx3Sbx+7X960VuVo5Z/FO19i3o82uRUtA9OdUd8=
Subject key identifier:   42:93:2B:74:24:9A:AF:CB:18:34:87:85:78:2F:A5:C4:1C:B5:11:4D
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       48744ACC5B3E777CBFB0C9FF611B054925CB4FEC
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630383a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Wed 17 Jan 2024 12:15:18 +0000
ROA not before:           Wed 17 Jan 2024 12:10:18 +0000
ROA not after:            Wed 15 Jan 2025 12:15:18 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff08::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:74:4a:cc:5b:3e:77:7c:bf:b0:c9:ff:61:1b:05:49:25:cb:4f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Jan 17 12:10:18 2024 GMT
            Not After : Jan 15 12:15:18 2025 GMT
        Subject: CN=42932B74249AAFCB18348785782FA5C41CB5114D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:63:4c:c2:7d:02:6d:c1:8a:56:9d:24:45:26:
                    40:10:88:be:c9:c2:cd:81:73:41:76:4e:77:04:51:
                    64:36:a0:fd:9c:19:98:35:5c:07:ae:73:57:02:ce:
                    ce:2b:b0:dd:90:6f:6e:a0:c5:d3:84:98:01:82:d2:
                    96:55:e3:76:5b:86:1d:c8:4f:e2:62:42:db:1d:e8:
                    24:58:e5:0e:42:bf:9b:05:df:86:66:c8:cb:b2:89:
                    bd:f3:9d:2b:cf:25:ac:2a:5b:3c:bb:cd:f6:a0:97:
                    0f:ec:ce:cd:43:e1:6c:64:79:be:e9:33:ff:80:55:
                    8f:88:d2:7f:cb:ab:a4:b9:b9:be:a1:1c:0e:e2:5a:
                    40:f3:15:53:c4:9e:40:5c:95:0a:fe:54:ee:e0:68:
                    c0:9c:df:87:6a:69:44:8d:23:b5:63:71:6c:ea:a0:
                    1d:e5:89:94:36:38:49:8f:44:8b:5d:39:d9:2e:32:
                    10:9f:8c:50:20:60:2f:57:72:9f:8f:c9:93:77:a3:
                    bc:ac:a7:58:f9:52:e3:b2:6d:43:a5:af:e1:81:81:
                    90:53:bd:d9:11:ae:73:f5:32:c1:6f:1d:5e:80:52:
                    ab:99:df:60:d2:a1:7e:92:93:c3:4e:27:c9:15:51:
                    8f:79:55:6d:94:33:54:19:f2:b3:36:cd:f1:48:85:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:93:2B:74:24:9A:AF:CB:18:34:87:85:78:2F:A5:C4:1C:B5:11:4D
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630383a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff08::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:a0:29:87:00:79:53:2f:70:d2:45:1a:02:5a:61:86:f8:80:
         3a:39:66:8b:ab:f3:9d:8d:75:e9:5d:00:ee:ac:ee:ec:b7:d0:
         9b:dc:2b:78:05:48:6b:07:2d:c3:0d:7d:a7:22:39:2f:cd:c6:
         ec:81:ea:3a:61:db:52:b1:49:68:52:57:f9:bf:3b:b2:78:4e:
         3d:10:9d:f2:a9:ef:f8:e9:b8:ba:9a:55:a7:37:86:8e:08:d2:
         08:d0:3f:5c:9c:2c:81:35:8c:48:69:81:b0:f6:68:52:01:69:
         bb:06:f5:8d:7f:ce:b7:ae:34:25:4e:dc:c9:e7:d6:c8:d7:55:
         55:bc:a0:57:41:bf:bf:c4:92:c8:72:2c:16:22:d3:90:2b:bb:
         c6:63:bd:d5:0a:6b:46:99:00:32:50:c8:43:e6:23:e7:00:f3:
         cf:88:d9:b4:4d:8b:aa:51:29:27:aa:bc:84:59:f6:4b:d9:57:
         e3:36:b7:16:77:44:be:d0:55:db:32:6a:ce:7f:2e:a7:44:12:
         9f:ba:87:5c:c6:0e:8c:63:d1:c0:0e:bc:e9:6f:bf:c4:e8:f7:
         87:46:c1:b8:4f:d2:01:41:4a:f5:2a:1b:ab:5a:83:93:37:e1:
         57:a8:d9:21:35:92:82:0a:37:6d:d0:74:bd:18:53:a8:28:90:
         9a:a7:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:05:08 2024 by rpki-client on console-fra.rpki-client.org