Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630393a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630393a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          T1SELD8eqqq+3Tz9oFmNaGpH82YECBS2ziEkv0R0lIc=
Subject key identifier:   12:DE:F0:1A:54:98:5E:3A:8A:B7:68:B8:67:80:70:96:FD:86:2C:6F
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       3F8F4E83C7AD83B2CFF8A12FC4F4A9B6A91A1B77
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630393a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Mon 12 Feb 2024 05:41:10 +0000
ROA not before:           Mon 12 Feb 2024 05:36:10 +0000
ROA not after:            Mon 10 Feb 2025 05:41:10 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff09::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8f:4e:83:c7:ad:83:b2:cf:f8:a1:2f:c4:f4:a9:b6:a9:1a:1b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Feb 12 05:36:10 2024 GMT
            Not After : Feb 10 05:41:10 2025 GMT
        Subject: CN=12DEF01A54985E3A8AB768B867807096FD862C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3d:37:fe:49:19:4e:34:7e:94:13:23:49:8f:
                    0e:f8:75:f8:4f:a6:c5:ac:57:be:1c:8a:31:ea:df:
                    21:64:1a:ec:60:89:98:32:62:d0:ae:41:44:98:1f:
                    b6:f5:aa:12:99:35:76:1d:92:2b:94:69:29:3f:23:
                    0c:8b:be:d5:21:d1:0d:ab:39:ff:c6:61:01:55:bb:
                    78:80:75:31:b3:d5:bd:86:e0:e3:88:f8:c4:df:1f:
                    a5:ad:70:62:fa:d8:0a:fd:b0:ec:d5:dd:b9:85:26:
                    f1:d6:4f:40:7e:46:22:4c:19:f1:2c:43:08:90:7b:
                    c6:94:3b:55:8a:8f:90:99:96:86:f0:37:af:80:b6:
                    56:a6:e5:7d:d7:f2:80:b0:44:33:a8:76:43:78:70:
                    e5:db:79:0a:56:67:6e:dc:db:36:5a:17:9e:0f:6f:
                    e2:0d:ca:ee:73:cc:0c:62:9e:d6:ec:ad:15:3b:75:
                    36:df:3f:b9:73:b5:e4:31:4c:8a:25:d7:e6:19:ba:
                    91:1d:42:77:7c:a9:ad:06:1c:cd:78:eb:97:e0:90:
                    6e:98:07:03:46:c8:18:1f:e2:87:4c:51:f6:85:40:
                    3f:c6:a0:6a:4d:50:b8:8e:df:d8:2d:64:cf:16:aa:
                    43:75:7f:9b:24:3a:7f:cf:0b:2f:72:0e:1c:c5:cb:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:DE:F0:1A:54:98:5E:3A:8A:B7:68:B8:67:80:70:96:FD:86:2C:6F
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630393a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff09::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:19:ba:e5:52:95:89:be:c2:37:5f:f8:e1:b1:96:a5:ab:5f:
         6b:b5:e1:3b:7c:a3:fb:bd:6b:8b:04:69:fc:a5:95:f3:6f:f0:
         f1:b7:c9:97:4a:a5:a6:03:a8:ff:6b:34:c6:9f:64:4c:b3:e3:
         ea:9e:71:6a:16:c6:ad:5e:98:3f:e5:50:4a:18:8f:e8:48:49:
         92:f9:18:71:af:5a:03:e6:03:1b:7f:c6:48:42:d5:17:7e:ff:
         52:c7:29:f0:26:94:56:1d:24:86:ab:7c:8b:db:6f:76:32:98:
         a2:d7:44:fb:92:2d:b9:ea:6c:8a:bc:4a:a6:79:34:ff:d3:90:
         ef:4d:9e:a2:fc:47:10:5a:5d:3b:fb:7a:f5:f6:c1:4a:88:de:
         5b:2c:8f:c7:6d:34:c5:9d:e5:6a:b7:fa:4c:eb:c3:ef:af:20:
         e2:e3:70:03:fc:97:d1:02:55:04:f0:66:4e:96:9a:d7:ec:c4:
         ca:84:5c:87:49:1c:c7:07:ea:2a:cb:1c:47:95:74:6e:ba:e2:
         f0:b6:a9:8e:ee:dc:e2:65:a8:c1:22:99:12:2d:70:10:7b:32:
         b2:f3:9a:e5:69:ee:3d:79:cf:20:f9:0f:21:2e:64:b0:8c:cf:
         34:95:37:88:48:e5:e4:ad:d7:c0:3e:d5:17:b8:5a:b2:b6:e2:
         62:11:54:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:05:08 2024 by rpki-client on console-fra.rpki-client.org