Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666630653a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666630653a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          epm/jRmhfZChInSKFh5Ft3eaGAAuQYC6u3VufxmKnjo=
Subject key identifier:   AF:55:FB:79:B1:F5:68:FE:2A:6F:F3:05:A5:D2:7B:78:8E:66:2A:6C
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       0E1F4F4CB6821F488BFBE9C782CF5D99282F8A7B
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630653a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Mon 12 Feb 2024 05:42:50 +0000
ROA not before:           Mon 12 Feb 2024 05:37:50 +0000
ROA not after:            Mon 10 Feb 2025 05:42:50 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ff0e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1f:4f:4c:b6:82:1f:48:8b:fb:e9:c7:82:cf:5d:99:28:2f:8a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Feb 12 05:37:50 2024 GMT
            Not After : Feb 10 05:42:50 2025 GMT
        Subject: CN=AF55FB79B1F568FE2A6FF305A5D27B788E662A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:66:bc:74:05:bc:bc:e3:11:ae:ef:a7:57:
                    07:be:4c:90:9d:84:9f:65:f7:5d:c3:8b:41:e6:cc:
                    46:d8:7f:64:70:93:c7:86:4e:73:e4:fa:ab:e1:d5:
                    54:9d:da:5f:4f:d5:61:18:c1:75:07:73:27:96:c4:
                    fe:6f:8a:45:0a:a3:c0:22:f4:62:2d:06:94:63:2b:
                    cb:e1:54:3c:38:3b:d3:91:8d:e7:ed:99:d9:7c:47:
                    14:a7:02:e1:4c:54:ae:1c:da:5e:ae:69:a8:ba:c8:
                    a4:5d:fc:e6:80:79:99:e0:2b:a0:c1:d8:d3:36:88:
                    ee:9c:16:44:9d:49:34:46:6c:fa:1c:7c:51:fb:a7:
                    07:5b:19:4c:8e:1c:97:37:c7:a6:70:c7:df:ac:aa:
                    d1:26:7c:dd:ac:d8:1d:9a:47:52:95:99:6f:9e:bb:
                    fd:13:3a:f3:8b:41:d5:3b:12:7e:68:f8:b6:51:3c:
                    9b:3f:76:cb:e9:1c:69:ae:42:90:b8:2e:7a:72:84:
                    ae:0c:83:bb:b4:af:f8:cd:39:55:bf:fc:ba:96:72:
                    a2:6c:f6:b1:29:a5:39:0b:ad:29:88:be:6f:ec:5a:
                    a5:dd:35:f7:e1:0d:67:04:be:ae:f1:e8:af:e5:bf:
                    3c:cb:33:ef:66:aa:36:ca:0d:87:b2:33:ba:18:95:
                    36:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:55:FB:79:B1:F5:68:FE:2A:6F:F3:05:A5:D2:7B:78:8E:66:2A:6C
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666630653a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ff0e::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:7c:64:d8:f3:40:7f:f1:24:2c:7b:9d:d6:89:23:13:f7:a2:
         40:28:5b:6f:e3:0a:76:dc:6a:f6:f5:df:54:24:39:e7:97:16:
         ab:a0:37:b7:d8:1a:81:f0:61:31:bd:eb:8d:2a:69:0b:21:59:
         0f:fe:87:5f:70:53:3d:0e:50:38:d1:67:64:ab:ee:1d:25:51:
         b0:59:5e:d9:e3:b1:fb:c4:59:80:78:33:93:eb:f5:aa:8b:4e:
         72:e5:99:69:b0:8c:78:9a:94:df:37:30:08:46:b3:fc:6d:d8:
         35:1b:f8:ba:24:ae:c6:34:11:f3:2f:e3:ab:0c:ef:a8:49:42:
         d1:d2:ec:3f:fc:c3:76:2d:b2:ff:31:72:77:61:00:6f:6e:31:
         98:32:b5:05:fc:5f:fd:bd:33:40:f6:65:e7:80:13:7f:9e:9f:
         d0:a1:45:fa:76:b6:4f:59:7a:d2:a5:8c:75:d0:bd:de:38:9e:
         ee:88:cb:bc:d0:05:bb:ad:1e:2e:4d:0c:2f:67:dc:ca:d6:1c:
         43:5e:dc:0e:08:67:ef:34:b4:0e:c7:58:a7:31:d7:2f:81:10:
         a4:c0:9f:89:92:a6:23:f2:4e:81:ab:0f:7a:f9:f0:76:28:3a:
         f7:7e:97:e3:58:68:49:12:80:e6:05:d7:f9:21:b7:6e:3c:69:
         de:98:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:05:08 2024 by rpki-client on console-fra.rpki-client.org