Route Origin Authorization

$ rpki-client -vvf rpki.pudu.be/repo/pudu/2/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa
File:                     326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa (raw, json)
Hash identifier:          hfxxdvcVVtSSM/aCXUJKXC7Wi40CVOwMlVoIaRDtzlM=
Subject key identifier:   56:C9:76:16:4F:2F:D9:30:10:BC:84:89:B3:73:89:4F:0E:81:A0:61
Certificate issuer:       /CN=6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17
Certificate serial:       48A97DF7B421C8AFA4D88808EEFF4967A7B14E88
Authority key identifier: 6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer
Subject info access:      rsync://rpki.pudu.be/repo/pudu/2/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa
Signing time:             Mon 12 Feb 2024 03:33:25 +0000
ROA not before:           Mon 12 Feb 2024 03:28:25 +0000
ROA not after:            Mon 10 Feb 2025 03:33:25 +0000
asID:                     56762
IP address blocks:        2a07:54c1:41ff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.crl
                          rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a9:7d:f7:b4:21:c8:af:a4:d8:88:08:ee:ff:49:67:a7:b1:4e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17
        Validity
            Not Before: Feb 12 03:28:25 2024 GMT
            Not After : Feb 10 03:33:25 2025 GMT
        Subject: CN=56C976164F2FD93010BC8489B373894F0E81A061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:1c:24:57:22:43:41:0e:37:97:2c:ab:ee:
                    a2:26:c4:48:77:bf:09:50:ad:52:4e:7d:6c:4c:38:
                    95:05:b3:30:8e:8f:ee:d2:10:67:7e:3b:14:6d:6e:
                    f6:9f:83:85:bf:a8:18:76:ec:03:ee:8e:80:41:b4:
                    d6:df:1b:80:d2:32:ee:c5:cc:7b:c8:d1:39:c2:3f:
                    ad:b1:7e:56:a1:96:93:7b:38:02:60:e5:01:72:11:
                    fa:05:21:30:35:38:b1:fe:19:38:47:36:a7:b4:63:
                    d3:e1:18:b8:de:e1:4a:32:cd:75:72:b9:88:fb:af:
                    b1:8c:af:d2:a7:2f:2a:29:82:d6:39:e3:69:19:23:
                    aa:7f:16:46:cf:21:b8:a1:f0:af:db:73:4e:91:05:
                    67:be:ec:f4:89:5e:e1:68:1b:22:bf:41:4f:05:7e:
                    4a:fb:e1:bd:c4:2a:f0:44:8f:f1:33:86:0d:b1:d0:
                    73:69:29:91:14:3e:d6:4a:0b:a5:bc:90:81:2c:31:
                    64:d0:83:5c:29:c4:27:7b:d5:2c:f2:66:46:09:40:
                    48:f1:72:13:91:14:78:3d:51:0b:fd:27:65:cf:f5:
                    ce:38:8c:b8:34:d3:0d:04:d6:c7:a3:84:4e:49:44:
                    53:fa:34:08:36:cc:64:c5:0f:66:09:47:a9:8c:06:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C9:76:16:4F:2F:D9:30:10:BC:84:89:B3:73:89:4F:0E:81:A0:61
            X509v3 Authority Key Identifier:
                keyid:6D:6D:AC:42:F0:92:6B:82:CE:C4:7D:7D:92:2A:B4:E1:57:0E:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.pudu.be/repo/pudu/2/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/6D6DAC42F0926B82CEC47D7D922AB4E1570EAF17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.pudu.be/repo/pudu/2/326130373a353463313a343166663a3a2f34382d3438203d3e203536373632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:41ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:0c:0d:89:f6:a6:b9:0d:fa:5d:10:1b:5c:b9:eb:b5:0e:
         7c:53:fb:33:a9:0a:d2:3f:01:92:12:9b:af:6d:95:db:4d:85:
         fa:77:d6:dc:14:2a:1d:54:53:e2:e4:bf:e9:af:35:aa:f9:2e:
         ae:50:6d:76:c8:33:91:9a:48:5b:7f:9f:ae:20:48:df:f3:aa:
         82:63:21:2f:cb:50:0a:67:67:13:ec:66:32:00:42:08:60:b9:
         36:d4:9a:09:9d:6d:f8:74:80:f6:60:fb:98:ab:cf:59:33:aa:
         8f:a6:47:c5:84:d6:9f:05:78:a5:e3:5a:08:c3:9c:18:c0:fe:
         22:d8:1c:b9:76:46:7f:7d:0e:cb:41:19:61:57:24:d8:c8:9d:
         e1:03:07:f2:38:b3:79:ec:25:13:6d:09:d1:18:0b:15:8f:da:
         7a:2a:ab:88:76:f7:02:aa:a1:ac:e5:25:95:1e:6b:6f:b1:70:
         a2:f1:95:dd:f7:7f:02:00:6a:c3:2a:68:3d:2d:8e:fd:07:3a:
         2e:ce:00:49:bd:40:e7:31:dd:cc:cd:14:01:f9:ef:0e:f5:d6:
         a5:20:2b:0a:67:27:dd:53:62:bd:6d:f2:5b:03:4a:7a:b4:34:
         17:c6:80:19:e0:aa:8b:a8:02:22:74:d0:db:b4:a9:0c:7b:98:
         5b:ce:21:b4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:40:52 2024 by rpki-client on console-fra.rpki-client.org