Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/38392e3138372e36392e302f32342d3332203d3e20323035383438.roa
File:                     38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (raw, json)
Hash identifier:          lTrjewSsz19futMu9PbyT4EzTNaBbYgiKPohvr1WzqQ=
Subject key identifier:   F6:59:47:A0:9F:88:7D:47:85:6F:22:8D:FC:49:26:77:8C:DF:80:EB
Certificate issuer:       /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial:       7B4B3CDA042F8CE5EEF858541A1B1B9B48C81702
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/0/38392e3138372e36392e302f32342d3332203d3e20323035383438.roa
Signing time:             Mon 13 May 2024 21:06:47 +0000
ROA not before:           Mon 13 May 2024 21:01:47 +0000
ROA not after:            Mon 12 May 2025 21:06:47 +0000
asID:                     205848
IP address blocks:        89.187.69.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Dec 2024 17:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4b:3c:da:04:2f:8c:e5:ee:f8:58:54:1a:1b:1b:9b:48:c8:17:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Validity
            Not Before: May 13 21:01:47 2024 GMT
            Not After : May 12 21:06:47 2025 GMT
        Subject: CN=F65947A09F887D47856F228DFC4926778CDF80EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d7:e2:14:50:66:ee:ce:98:ee:cd:59:82:05:
                    a4:8f:de:a2:1d:84:a7:97:8e:06:56:94:dc:42:28:
                    c0:09:b1:d3:64:45:a6:da:40:5a:d2:fa:ff:43:85:
                    6a:02:00:6f:58:b3:de:af:f0:6d:5e:30:4c:a7:a2:
                    a1:b6:75:25:38:87:26:1a:9f:f0:c4:37:9d:24:3c:
                    e6:94:9d:7a:e0:37:e8:42:89:97:7c:f6:2e:6f:3f:
                    8b:b4:47:73:5e:5f:dc:b4:4e:d9:ad:ad:38:b4:e4:
                    c5:8b:df:80:0f:49:cd:35:02:ee:51:f0:4f:a5:f9:
                    4b:a4:d7:1d:dc:9a:22:52:b5:d8:be:36:91:24:7b:
                    8a:04:c5:a0:dc:8c:bb:68:5d:ee:a2:24:11:fd:3e:
                    a9:2f:6b:19:9b:a3:ea:7b:fe:d1:0e:da:e2:b7:23:
                    00:98:c4:70:76:40:8b:c3:b0:94:7f:54:56:a1:02:
                    02:5d:85:e4:d8:8b:ed:31:4f:bc:6f:c1:90:0c:42:
                    ec:f6:d6:26:af:b4:2d:d2:70:82:cc:8a:eb:2f:9a:
                    b1:6b:8e:79:02:08:97:59:15:e0:de:e4:fc:93:ca:
                    38:b2:6f:9f:e5:bc:18:80:37:f7:64:01:0a:c3:fa:
                    4c:fa:15:d7:a3:a9:a8:ed:41:d6:1b:9b:b4:47:67:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:59:47:A0:9F:88:7D:47:85:6F:22:8D:FC:49:26:77:8C:DF:80:EB
            X509v3 Authority Key Identifier:
                keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/38392e3138372e36392e302f32342d3332203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.187.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:c6:1d:a3:2e:53:51:67:0e:55:96:29:fc:c1:5a:e6:c4:
         61:5b:ac:54:e0:42:aa:a8:b7:5e:b6:ea:23:90:a9:ee:29:a8:
         07:3b:c4:9f:d6:bd:5b:be:f8:e1:d0:60:34:3d:79:24:c3:49:
         67:a5:a0:08:e4:cb:b0:79:51:81:1c:e6:dc:d7:59:18:64:97:
         66:9f:b3:d0:9b:a5:52:d0:a4:cd:8c:88:de:43:a0:fd:a7:87:
         27:5d:1d:3b:ab:e6:c5:36:9d:a0:03:1b:bb:7d:98:17:dc:a4:
         3b:83:64:78:7e:eb:9d:65:8c:69:37:e5:e5:6f:be:bf:55:f7:
         3b:15:5c:93:23:88:2f:ae:bb:3b:dc:8e:9d:b3:b7:d9:cf:03:
         20:cd:af:4c:d9:81:9d:1a:46:18:b9:50:05:58:4e:c0:ff:c6:
         9e:cf:e8:12:ca:d7:cd:46:81:ee:e7:94:63:eb:78:40:5b:67:
         31:09:86:1c:d4:c4:96:90:e3:17:d2:9a:0b:a1:62:bb:72:93:
         b9:be:4a:bc:10:30:99:39:ed:0b:68:85:26:9c:b5:10:71:e3:
         7d:1d:54:30:3a:c3:d6:05:84:90:9b:79:c1:00:db:85:f0:f0:
         3c:2b:2b:71:46:97:97:60:7a:67:39:8c:d2:aa:1a:c8:6f:68:
         9c:07:1c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 03:26:51 2024 by rpki-client on console-fra.rpki-client.org