Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/2/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa
File:                     326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa (raw, json)
Hash identifier:          oIiV80qP8M9S0c6+bZQX26nHiJOVNOULyb6jraMLDHw=
Subject key identifier:   45:8E:88:6F:D7:13:33:81:E5:10:2E:2A:0E:06:B8:DD:C7:84:E9:32
Certificate issuer:       /CN=6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17
Certificate serial:       2BFE8BB62260DDFC8B5DFB89A80CE75BAFC115B1
Authority key identifier: 6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/2/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa
Signing time:             Mon 13 Jan 2025 04:12:30 +0000
ROA not before:           Mon 13 Jan 2025 04:07:30 +0000
ROA not after:            Mon 12 Jan 2026 04:12:30 +0000
asID:                     56762
IP address blocks:        2a07:54c1:41ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.crl
                          rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 21:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fe:8b:b6:22:60:dd:fc:8b:5d:fb:89:a8:0c:e7:5b:af:c1:15:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17
        Validity
            Not Before: Jan 13 04:07:30 2025 GMT
            Not After : Jan 12 04:12:30 2026 GMT
        Subject: CN=458E886FD7133381E5102E2A0E06B8DDC784E932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:34:89:dc:13:4f:07:d0:4d:7f:e1:4c:65:38:
                    30:96:c6:dc:e0:51:e3:a0:08:70:ac:4c:74:f3:b5:
                    51:ff:d7:7a:b8:a0:55:ad:73:47:be:30:29:c9:50:
                    f3:fb:db:d2:7f:e8:7d:ed:08:17:6c:23:81:b9:5c:
                    18:0c:a0:2c:f3:1d:f7:e1:9d:b3:08:f6:68:ad:eb:
                    33:5b:89:0e:db:31:22:04:ac:94:a5:7b:40:2d:8a:
                    bb:63:ac:49:de:3e:41:a2:67:59:0d:74:6a:84:83:
                    1a:45:10:6f:71:73:fc:e5:9a:a1:b8:0d:c8:76:bb:
                    b1:5d:5e:b9:ec:0d:c6:be:1a:3d:a3:8d:a1:56:6d:
                    3a:f1:21:7a:e0:c5:d3:c4:56:a6:71:48:06:a7:18:
                    ff:a8:60:b8:34:dc:8f:cd:f6:4b:0b:b8:88:4e:84:
                    cb:0d:5e:83:6b:e6:dd:fe:15:2b:5e:ca:9a:e8:6b:
                    f9:c6:6f:c2:ff:ea:f6:ed:3e:7f:92:5c:05:0e:c8:
                    c6:e5:ba:17:1d:08:fa:51:3d:f6:90:cb:43:d1:c0:
                    52:8f:1f:58:99:20:bd:f5:6f:24:dd:2e:fe:e0:1d:
                    33:e6:d5:d6:b1:4e:ec:91:10:0d:cd:c1:e3:9e:e1:
                    f9:ac:c1:12:df:b6:10:e1:f9:e6:ef:79:e8:34:c7:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8E:88:6F:D7:13:33:81:E5:10:2E:2A:0E:06:B8:DD:C7:84:E9:32
            X509v3 Authority Key Identifier:
                keyid:6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/2/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:41ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:25:9e:c3:8e:e5:b7:4b:ec:aa:a5:f2:b4:39:99:1e:e5:1c:
         9a:c5:38:7c:72:ae:5a:95:ab:a4:49:72:61:b5:14:c8:0f:7f:
         7d:9c:c6:c2:76:c7:aa:fc:88:a4:8d:ee:50:4e:d4:45:f3:7e:
         c9:87:35:9f:dc:f9:a7:1b:c1:ac:b6:40:13:16:ab:7d:09:01:
         aa:84:e8:9a:0b:0d:12:71:9e:6d:43:c1:4b:c2:68:66:75:ac:
         d4:50:a5:96:88:cb:31:11:97:46:41:9d:c7:99:ae:a3:ba:8b:
         19:ca:05:46:e1:17:22:ec:78:1e:49:8f:43:60:27:81:b0:f1:
         b1:8c:68:49:d6:0f:2d:70:9c:dc:19:ea:e5:53:ae:3b:21:4b:
         1f:13:40:2e:c8:e2:4e:67:48:58:33:ce:cd:5f:cc:1e:b3:25:
         66:e7:a0:ed:9f:e6:8e:c3:31:88:3b:de:16:20:5c:7a:79:df:
         cb:c6:0e:43:51:b7:5e:28:6d:29:5d:80:9e:ba:88:30:b9:f9:
         4a:c5:68:b3:60:35:60:4a:16:39:79:b5:3a:f8:57:8f:93:6a:
         74:f1:33:4b:98:5a:e1:54:1b:d4:41:df:79:be:88:87:51:b4:
         2b:f2:12:a8:f1:8a:34:03:b3:6b:8b:eb:d3:9c:5f:8b:9d:0c:
         4a:62:8c:bf
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUK/6LtiJg3fyLXfuJqAznW6/BFbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ2REFDNDJGMDkyNkI4MkNFQzQ3RDdEOTIyQUI0RTE1
NzBFQUYxNzAeFw0yNTAxMTMwNDA3MzBaFw0yNjAxMTIwNDEyMzBaMDMxMTAvBgNV
BAMTKDQ1OEU4ODZGRDcxMzMzODFFNTEwMkUyQTBFMDZCOEREQzc4NEU5MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNIncE08H0E1/4UxlODCWxtzg
UeOgCHCsTHTztVH/13q4oFWtc0e+MCnJUPP729J/6H3tCBdsI4G5XBgMoCzzHffh
nbMI9mit6zNbiQ7bMSIErJSle0AtirtjrEnePkGiZ1kNdGqEgxpFEG9xc/zlmqG4
Dch2u7FdXrnsDca+Gj2jjaFWbTrxIXrgxdPEVqZxSAanGP+oYLg03I/N9ksLuIhO
hMsNXoNr5t3+FSteyproa/nGb8L/6vbtPn+SXAUOyMbluhcdCPpRPfaQy0PRwFKP
H1iZIL31byTdLv7gHTPm1daxTuyREA3NweOe4fmswRLfthDh+ebveeg0x//3AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQURY6Ib9cTM4HlEC4qDga43ceE6TIwHwYDVR0j
BBgwFoAUbW2sQvCSa4LOxH19kiq04VcOrxcwDgYDVR0PAQH/BAQDAgeAMF4GA1Ud
HwRXMFUwU6BRoE+GTXJzeW5jOi8vcnBraS5wdWR1LmJlL3JlcG8vcHVkdS8yLzZE
NkRBQzQyRjA5MjZCODJDRUM0N0Q3RDkyMkFCNEUxNTcwRUFGMTcuY3JsMIGeBggr
BgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFhcy5y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMt
NWNjYTYzM2NhZTNmLzAvNkQ2REFDNDJGMDkyNkI4MkNFQzQ3RDdEOTIyQUI0RTE1
NzBFQUYxNy5jZXIwfwYIKwYBBQUHAQsEczBxMG8GCCsGAQUFBzALhmNyc3luYzov
L3Jwa2kucHVkdS5iZS9yZXBvL3B1ZHUvMi8zMjYxMzAzNzNhMzUzNDYzMzEzYTM0
MzE2NjY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjM3MzYzMi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw
CQMHACoHVMFB/zANBgkqhkiG9w0BAQsFAAOCAQEACSWew47lt0vsqqXytDmZHuUc
msU4fHKuWpWrpElyYbUUyA9/fZzGwnbHqvyIpI3uUE7URfN+yYc1n9z5pxvBrLZA
ExarfQkBqoTomgsNEnGebUPBS8JoZnWs1FCllojLMRGXRkGdx5muo7qLGcoFRuEX
Iux4HkmPQ2AngbDxsYxoSdYPLXCc3Bnq5VOuOyFLHxNALsjiTmdIWDPOzV/MHrMl
Zueg7Z/mjsMxiDveFiBcennfy8YOQ1G3XihtKV2AnrqIMLn5SsVos2A1YEoWOXm1
OvhXj5NqdPEzS5ha4VQb1EHfeb6Ih1G0K/ISqPGKNAOza4vr05xfi50MSmKMvw==
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:23:41 2025 by rpki-client