Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630643a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630643a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          UoUxQF9oPJSqtPPrTTBx1hexX+DgGavOAxaUNGZSY38=
Subject key identifier:   1E:0D:82:F1:04:D4:CF:31:73:5A:C4:2A:99:DD:FE:66:B4:7B:3D:75
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       72CA053EEEC2326965C964176FAAEEB38D189D96
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630643a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Mon 12 Feb 2024 05:42:08 +0000
ROA not before:           Mon 12 Feb 2024 05:37:08 +0000
ROA not after:            Mon 10 Feb 2025 05:42:08 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff0d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ca:05:3e:ee:c2:32:69:65:c9:64:17:6f:aa:ee:b3:8d:18:9d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Feb 12 05:37:08 2024 GMT
            Not After : Feb 10 05:42:08 2025 GMT
        Subject: CN=1E0D82F104D4CF31735AC42A99DDFE66B47B3D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:30:8b:c0:5c:c3:b2:31:79:78:97:4e:6a:
                    3d:95:cc:c2:55:49:9d:b0:d3:18:40:70:9c:36:62:
                    54:33:4f:cb:64:a7:fe:05:7a:e9:26:45:b6:4e:ca:
                    a3:51:ec:02:cb:0d:31:c8:0f:d4:a0:a3:00:55:55:
                    10:d4:cc:48:a2:ca:15:21:c8:79:8c:fd:40:d6:4c:
                    1a:c3:48:13:41:6b:fe:e5:09:8b:6a:3e:15:f9:a8:
                    b3:c3:99:0b:26:2b:75:7f:73:ec:95:7a:ec:3d:16:
                    4e:48:22:6e:d2:3a:c4:a8:c1:fb:1e:29:62:44:23:
                    d2:dd:4c:97:cb:a2:c8:62:50:19:7b:61:7e:ff:e6:
                    68:0a:d5:4e:67:6b:31:5d:8e:81:1e:ac:a8:88:db:
                    29:97:ac:f9:2d:bf:cb:ae:d8:a4:1c:78:5e:38:0d:
                    11:48:7f:b7:c8:6a:05:a5:87:c4:7f:3a:3d:b8:49:
                    59:b1:a3:0f:3d:b5:e6:8d:bb:7b:e6:32:e3:d9:17:
                    f2:8a:08:bf:01:e1:d3:7e:41:71:a4:5c:a6:8d:84:
                    58:7f:1b:31:89:55:1e:16:eb:2f:46:96:e1:0d:1a:
                    ec:3c:33:70:86:45:76:0a:39:47:26:08:42:c8:20:
                    ce:47:28:bb:5d:7a:73:29:55:07:e1:8a:f5:23:57:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0D:82:F1:04:D4:CF:31:73:5A:C4:2A:99:DD:FE:66:B4:7B:3D:75
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630643a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff0d::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:5b:17:61:14:3a:45:f8:15:4e:f9:f0:7e:85:94:92:f3:
         f0:36:8a:55:35:0f:a6:6a:66:b6:ab:24:ef:9d:80:10:7a:ae:
         2e:ba:5c:41:ae:15:3a:e7:ff:f0:03:ed:a1:49:48:23:87:81:
         a8:50:32:33:ce:05:4b:a6:1c:e1:cb:50:42:78:23:88:e9:b2:
         c0:2a:ac:85:4b:79:4d:33:07:d6:6b:7f:00:ed:15:7b:07:b5:
         a3:4b:41:93:eb:1d:bb:67:15:80:25:ab:05:2d:fc:1c:74:74:
         59:7f:66:21:71:a9:c5:9e:15:be:61:84:ef:18:9b:cf:81:e8:
         35:0d:0f:44:a6:1a:dc:75:77:7d:ca:48:14:6e:0b:35:78:cc:
         12:9b:d5:a9:74:a6:1a:dc:00:43:4c:bd:05:c3:97:3a:b0:83:
         4c:f4:5b:20:a2:a6:2c:fb:58:aa:f1:8b:39:8c:39:3c:f1:52:
         14:8f:97:55:87:99:76:40:bb:ae:6a:dd:8b:c8:c9:ac:da:98:
         4a:90:ee:e7:06:05:89:29:44:f0:f7:e1:e6:ed:20:cf:55:87:
         7e:fc:ec:9a:29:ef:ef:38:8d:25:16:b5:e1:96:15:88:e9:40:
         b5:02:9b:69:99:91:ea:05:35:8b:fc:6a:40:0f:55:2b:53:94:
         fb:c1:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:56:34 2024 by rpki-client on console-fra.rpki-client.org