Route Origin Authorization

$ rpki-client -vvf rpki.nap.re/repo/pongery/3/326130613a363034353a666666663a3a2f34382d3438203d3e20323030313630.roa
File:                     326130613a363034353a666666663a3a2f34382d3438203d3e20323030313630.roa (raw, json)
Hash identifier:          rF/HHdsNrf/3mSIxolo64lsSH5sFBtvbZjvyGItU10k=
Subject key identifier:   57:1F:D8:45:49:EC:91:F7:11:F9:57:55:9C:FF:E0:C3:60:8B:C7:A3
Certificate issuer:       /CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
Certificate serial:       70128CF7AAF970509B557F2BFDAAFDA713CD214C
Authority key identifier: 14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71
Authority info access:    rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
Subject info access:      rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666666663a3a2f34382d3438203d3e20323030313630.roa
Signing time:             Wed 17 Jan 2024 12:13:46 +0000
ROA not before:           Wed 17 Jan 2024 12:08:46 +0000
ROA not after:            Wed 15 Jan 2025 12:13:46 +0000
asID:                     200160
IP address blocks:        2a0a:6045:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl
                          rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.mft
                          rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.crl
                          rsync://rpki.komorebi.network/repo/komorebi/1/0F24571B693A0709B38AA00142BAC0AD8D8AA300.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0F24571B693A0709B38AA00142BAC0AD8D8AA300.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:12:8c:f7:aa:f9:70:50:9b:55:7f:2b:fd:aa:fd:a7:13:cd:21:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14381C26711B2A305C5F9C3BC122D9A3B0269E71
        Validity
            Not Before: Jan 17 12:08:46 2024 GMT
            Not After : Jan 15 12:13:46 2025 GMT
        Subject: CN=571FD84549EC91F711F957559CFFE0C3608BC7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:5e:ba:ff:79:ac:36:0a:6e:12:b2:c2:c4:
                    54:df:c5:63:9b:2c:63:c0:64:68:e2:d2:0a:b1:ea:
                    21:1e:ee:af:15:7a:2c:62:07:35:18:99:43:e5:58:
                    49:64:9f:e7:a0:98:e3:68:a5:70:1f:19:25:8e:ec:
                    2d:b7:71:51:dc:29:8c:a2:9f:a9:82:ec:6f:34:e2:
                    22:3e:ce:f2:fb:0a:5d:d4:b0:2d:45:1e:d9:1d:bd:
                    7b:da:24:31:46:2a:6a:7a:21:40:b5:27:51:1e:c4:
                    f7:e4:f6:3e:81:ce:00:bb:cf:8d:30:b5:fe:68:13:
                    53:0c:56:3e:d9:9e:0b:db:68:0b:32:a1:b0:58:2f:
                    3d:a6:d1:57:76:5e:d9:49:c3:45:51:23:9d:d5:66:
                    9c:1e:57:52:74:1b:f6:15:a5:ed:23:2b:35:84:58:
                    36:59:fe:48:7d:6a:37:cb:76:a0:76:74:d7:1a:aa:
                    1f:dc:ed:f3:be:a5:df:c7:11:19:8f:9f:94:9d:52:
                    65:dc:83:9c:ae:8e:66:dc:2b:41:e2:61:33:4a:a6:
                    5d:5f:ba:59:ae:a0:8d:e8:f6:5c:85:b1:2f:a0:3f:
                    84:5d:ad:32:f9:4d:94:50:86:29:d0:62:ce:10:b8:
                    af:0b:c5:c2:f8:ae:e7:02:da:e9:ca:41:28:8b:7e:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:1F:D8:45:49:EC:91:F7:11:F9:57:55:9C:FF:E0:C3:60:8B:C7:A3
            X509v3 Authority Key Identifier:
                keyid:14:38:1C:26:71:1B:2A:30:5C:5F:9C:3B:C1:22:D9:A3:B0:26:9E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nap.re/repo/pongery/3/14381C26711B2A305C5F9C3BC122D9A3B0269E71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.komorebi.network/repo/komorebi/1/14381C26711B2A305C5F9C3BC122D9A3B0269E71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nap.re/repo/pongery/3/326130613a363034353a666666663a3a2f34382d3438203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6045:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:b2:85:c0:54:b3:3c:1c:02:89:87:67:c3:d2:f4:a3:f9:65:
         8b:60:97:75:03:a7:04:fe:76:54:e2:52:e5:35:2b:1e:e0:5b:
         e1:49:12:d0:0a:3e:90:bb:2a:26:03:41:b6:4f:02:6a:5b:4c:
         99:59:46:45:1e:87:f7:1f:f9:8c:95:13:7d:7d:07:3b:7c:29:
         d8:ab:5d:2f:a5:c0:e2:f9:b2:15:76:57:d7:4e:22:2f:40:30:
         c6:37:83:38:46:80:92:04:a1:ac:7e:6c:b3:4f:51:25:54:5e:
         be:16:83:73:93:c1:b9:40:81:5f:0a:f6:44:20:5e:9f:31:4d:
         44:f7:cd:dc:a1:a6:ec:5a:88:c0:a3:70:58:fe:ba:7a:26:84:
         f4:c7:1a:7d:78:e1:60:82:00:c6:b4:ce:df:a4:b9:50:9b:30:
         62:7e:72:6d:0b:b5:4c:8c:40:06:85:c2:a1:4d:1e:a0:c1:70:
         f9:59:41:eb:3c:4a:44:79:5b:a7:79:8f:53:b4:10:81:56:43:
         a2:0e:ea:11:cd:aa:2d:35:69:53:df:a5:b6:4c:1b:33:11:58:
         29:71:96:e9:a9:de:0b:48:f3:6a:28:c4:3f:a6:15:6c:d5:14:
         5b:21:79:0c:b5:69:20:b7:b0:f4:b2:0c:d4:02:4d:b0:73:ce:
         fb:d8:48:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:13:56 2024 by rpki-client on console-ams.rpki-client.org