Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/2/326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa
File:                     326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa (raw, json)
Hash identifier:          bsK71anKXh6jm9WqbH7ANe1920WLCa1akILIj2ZtoAA=
Subject key identifier:   11:C1:D1:6C:39:56:17:EF:EE:69:54:DF:AD:8C:02:CC:DD:A4:77:CA
Certificate issuer:       /CN=6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17
Certificate serial:       03CE226249BBEBBA7673D8EEC53C17188A8313DB
Authority key identifier: 6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/2/326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa
Signing time:             Tue 11 Jun 2024 05:36:47 +0000
ROA not before:           Tue 11 Jun 2024 05:31:47 +0000
ROA not after:            Tue 10 Jun 2025 05:36:47 +0000
asID:                     47689
IP address blocks:        2a07:54c1:4100::/40 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.crl
                          rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ce:22:62:49:bb:eb:ba:76:73:d8:ee:c5:3c:17:18:8a:83:13:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17
        Validity
            Not Before: Jun 11 05:31:47 2024 GMT
            Not After : Jun 10 05:36:47 2025 GMT
        Subject: CN=11C1D16C395617EFEE6954DFAD8C02CCDDA477CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:80:3c:d2:3d:a8:b9:da:45:aa:3d:90:a1:
                    93:cf:04:a7:0c:1e:b4:fa:82:9b:dd:5d:09:b5:93:
                    ed:32:d6:e8:71:0c:02:d4:2d:e8:40:f0:cc:2c:62:
                    01:57:e2:65:00:d9:ba:f6:f9:23:8c:4a:c5:d0:b4:
                    8f:ad:11:fe:53:f2:9a:c9:82:3c:ca:8b:6e:ca:3c:
                    64:90:32:b5:51:4a:92:72:9f:87:45:12:e3:dd:bc:
                    13:45:ca:f6:12:21:00:e1:c8:8f:27:06:81:c6:52:
                    fe:0c:a8:fa:92:94:f5:e3:05:77:bf:33:aa:cd:c1:
                    e2:24:ed:bb:ea:3c:ce:38:65:c6:fa:2f:a7:7f:67:
                    2b:ff:8c:9a:c7:49:3f:43:43:2d:2d:a9:ba:ed:71:
                    5d:1b:45:c4:00:d6:ac:0a:53:55:03:d5:79:ea:37:
                    c7:4b:d3:eb:1a:6b:f1:38:3e:7a:4e:ab:bd:29:87:
                    27:cf:0c:97:37:16:72:bf:ed:b9:1d:4a:c9:ea:99:
                    fb:52:3d:85:8a:18:57:9e:22:26:4b:38:72:a3:88:
                    83:06:39:bd:f7:54:dc:4b:d7:df:ca:df:0e:aa:76:
                    a3:be:f3:6a:4c:31:07:6e:e1:73:90:fc:c5:bd:2c:
                    b8:79:0b:ef:c3:7e:d7:be:19:46:92:9a:3a:87:b5:
                    40:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C1:D1:6C:39:56:17:EF:EE:69:54:DF:AD:8C:02:CC:DD:A4:77:CA
            X509v3 Authority Key Identifier:
                keyid:6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/2/326130373a353463313a343130303a3a2f34302d313238203d3e203437363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:4100::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:62:c0:4e:c3:9e:c9:f4:5a:35:ae:e9:9e:57:06:c8:61:
         f0:24:cc:e1:3b:f3:c9:73:28:23:37:df:66:e3:1f:c7:34:87:
         81:fb:4a:8c:30:8f:68:75:fe:3c:df:c7:ea:3d:fc:89:8f:06:
         a3:a9:38:07:3f:66:89:39:ac:98:3f:58:b5:81:b4:9b:3a:a0:
         5b:56:68:f8:0c:fb:17:77:38:88:03:28:66:f9:b3:75:d8:21:
         32:29:73:3b:03:20:c5:55:fc:82:12:3b:c8:67:ac:b4:4c:eb:
         08:96:2c:4b:63:96:03:fb:ae:ab:a6:16:40:ee:e5:51:11:c5:
         3d:29:69:da:fe:32:73:90:87:be:77:bc:ac:51:fd:1e:60:30:
         31:d1:a3:73:68:64:58:cb:80:b7:c5:c4:c2:33:20:b7:d5:90:
         c1:19:62:26:f0:0a:96:45:b2:2e:e0:e2:a3:d6:38:ce:69:64:
         83:64:65:5e:96:ac:76:ec:66:29:73:79:28:6b:a7:6a:26:58:
         a6:7f:ec:2d:67:f1:03:70:09:5e:c6:91:e7:c0:81:1c:94:53:
         5c:df:5e:f9:cf:a8:91:ca:8d:79:f6:5e:33:93:64:10:b4:6f:
         03:a3:fc:df:1c:82:bb:3c:bc:9f:42:eb:46:a0:21:7c:5d:05:
         2e:e2:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:32:13 2024 by rpki-client on console-fra.rpki-client.org