Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630613a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630613a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          0jPHn26za2YYapthdn+aETjYMyT4mlH1uD/2oIf+wzA=
Subject key identifier:   57:6A:26:F8:69:5D:05:35:07:03:6E:B7:12:80:BE:E6:6B:06:B5:A6
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       13BB7341E5A8CB1461651A9CA4DE0133680EB877
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630613a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Mon 12 Feb 2024 05:41:40 +0000
ROA not before:           Mon 12 Feb 2024 05:36:40 +0000
ROA not after:            Mon 10 Feb 2025 05:41:40 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff0a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bb:73:41:e5:a8:cb:14:61:65:1a:9c:a4:de:01:33:68:0e:b8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Feb 12 05:36:40 2024 GMT
            Not After : Feb 10 05:41:40 2025 GMT
        Subject: CN=576A26F8695D053507036EB71280BEE66B06B5A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:94:56:9a:1e:ae:17:a3:99:ee:dd:09:a2:
                    d4:9a:da:e5:b5:ee:44:40:11:7b:04:c9:fe:3d:ac:
                    f3:6c:23:7f:59:57:2c:04:80:c1:cf:87:99:e0:a1:
                    d0:00:42:84:42:e3:f3:78:37:4a:a5:8a:fd:fe:93:
                    a6:06:44:8d:da:d7:2a:de:59:bb:27:ef:23:74:35:
                    e5:c9:94:a3:53:2b:ab:d6:81:e7:81:2f:cd:4f:a0:
                    c4:5b:bc:85:8c:17:c9:de:c2:58:6e:3d:59:8e:15:
                    ff:45:5e:b3:f0:97:5d:82:71:96:bf:1e:9a:c0:25:
                    d2:65:82:bc:54:27:ee:f2:b5:00:93:b0:26:54:b1:
                    8f:d6:60:c1:47:b8:b8:82:38:af:b6:2e:e1:30:6c:
                    34:17:bb:60:c2:26:db:d1:cc:39:50:f8:32:9f:08:
                    96:95:80:c5:c6:c3:e7:36:67:7b:16:2e:97:91:b7:
                    41:53:15:c4:28:ae:a8:1c:cf:25:b6:d3:da:7a:92:
                    e1:f9:8a:32:b7:65:87:b6:ac:6a:1e:4e:12:1b:28:
                    98:d0:2d:16:96:f7:df:21:f0:cd:4c:8e:76:95:26:
                    62:dd:47:74:f7:22:2f:7d:93:8e:98:8f:6f:42:cc:
                    2d:8e:bc:e8:36:10:b3:06:83:32:b0:22:1d:9b:da:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:6A:26:F8:69:5D:05:35:07:03:6E:B7:12:80:BE:E6:6B:06:B5:A6
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630613a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff0a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:eb:ee:95:1f:89:81:24:61:1d:ab:33:10:f8:17:ff:9b:6d:
         b3:6f:57:38:d6:10:40:f5:e2:09:55:c4:33:6c:3d:8e:ce:db:
         ed:06:79:10:31:0b:d3:96:02:1b:8a:5e:7f:18:11:85:25:53:
         4d:66:66:82:09:1e:f8:51:e5:b6:90:d6:12:4d:db:d1:93:c7:
         03:10:89:1c:af:5f:e1:fc:28:12:3b:48:d5:66:53:aa:f5:d9:
         3c:08:44:10:eb:f0:41:46:4b:da:3d:d6:b2:33:81:b3:15:81:
         7b:e2:87:9b:f4:70:ad:82:c9:f5:2b:8b:57:f1:b3:d9:1d:f4:
         fb:b7:dc:62:49:5e:e8:83:67:21:bd:8d:15:0b:8a:b8:4b:5b:
         39:2c:68:67:d5:4b:bb:a8:ea:be:7e:35:4c:91:33:0f:22:4d:
         55:8f:69:62:1c:da:e5:0e:98:7a:e6:c6:5d:e1:90:46:15:89:
         c6:b3:19:6f:1d:eb:28:58:b8:1d:44:6a:45:37:e1:ff:f2:de:
         19:0e:e6:1a:1e:19:89:a9:0f:e0:05:70:70:f7:47:92:21:70:
         27:40:d8:91:4d:e5:c9:80:a5:0b:7d:af:f6:ef:b4:95:5f:50:
         d7:88:10:34:6d:96:72:20:2c:9b:90:06:ff:71:6d:04:ba:fd:
         ba:92:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:20:54 2024 by rpki-client on console-ams.rpki-client.org