Route Origin Authorization

$ rpki-client -vvf rpki.uz/repo/pedjoeang-digital-networks/4/326130613a363034303a633230303a3a2f34382d3438203d3e20323030373735.roa
File:                     326130613a363034303a633230303a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          Uk8mJP3noUoz6gAbX2A4rWK0/X5YtZqqf8E67b/rAwE=
Subject key identifier:   F0:92:B7:70:03:F5:D2:8F:66:03:75:8C:4C:82:EE:5D:61:E3:CD:BA
Certificate issuer:       /CN=73236D2CCA0EE5A74A9C40FFF721835444703ABE
Certificate serial:       62AB1137DBF6FE0068D1BA976D2AF007A996DCAE
Authority key identifier: 73:23:6D:2C:CA:0E:E5:A7:4A:9C:40:FF:F7:21:83:54:44:70:3A:BE
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/73236D2CCA0EE5A74A9C40FFF721835444703ABE.cer
Subject info access:      rsync://rpki.uz/repo/pedjoeang-digital-networks/4/326130613a363034303a633230303a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Tue 28 May 2024 06:21:20 +0000
ROA not before:           Tue 28 May 2024 06:16:20 +0000
ROA not after:            Tue 27 May 2025 06:21:20 +0000
asID:                     200775
IP address blocks:        2a0a:6040:c200::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.uz/repo/pedjoeang-digital-networks/4/73236D2CCA0EE5A74A9C40FFF721835444703ABE.crl
                          rsync://rpki.uz/repo/pedjoeang-digital-networks/4/73236D2CCA0EE5A74A9C40FFF721835444703ABE.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/73236D2CCA0EE5A74A9C40FFF721835444703ABE.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ab:11:37:db:f6:fe:00:68:d1:ba:97:6d:2a:f0:07:a9:96:dc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73236D2CCA0EE5A74A9C40FFF721835444703ABE
        Validity
            Not Before: May 28 06:16:20 2024 GMT
            Not After : May 27 06:21:20 2025 GMT
        Subject: CN=F092B77003F5D28F6603758C4C82EE5D61E3CDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:53:6d:4c:95:ad:02:59:84:f3:98:ed:28:d6:
                    22:83:08:4f:ff:55:a4:af:a4:72:44:43:d5:96:a2:
                    f9:94:e2:3a:7f:52:fe:18:20:da:9f:32:5f:46:f7:
                    99:72:e8:93:c1:90:89:39:36:50:af:2f:79:f8:df:
                    9f:6e:f0:a7:ac:b9:51:2a:68:61:da:f9:3e:76:cc:
                    a0:97:55:3d:e8:38:96:10:f0:01:3e:92:19:d6:30:
                    c4:05:38:df:5e:93:4d:0a:5a:8a:ca:85:74:bc:5a:
                    0d:63:3a:44:ae:41:5f:c5:ed:90:c8:32:9f:c5:56:
                    05:3b:d1:b4:8a:05:bf:91:e7:eb:bb:d6:1b:ed:fa:
                    b3:55:6a:ff:52:9e:3d:7c:63:53:b3:a5:ee:93:7d:
                    04:a7:23:70:a2:85:1c:b2:26:ab:6e:97:e9:38:5f:
                    3b:29:eb:1e:c2:33:3e:b8:af:e2:dd:ce:25:aa:20:
                    d4:b1:de:53:44:17:6f:db:49:02:77:d7:0c:6a:1a:
                    b7:59:59:38:d1:04:bd:0c:a1:b6:7d:00:61:a1:1e:
                    ed:0e:38:68:fd:ff:1b:95:81:c4:62:15:69:7b:e4:
                    e7:8e:61:8a:56:f3:ba:b6:67:af:7f:e1:de:29:c2:
                    95:e7:0c:73:fb:69:7a:41:5e:b5:56:03:93:0a:09:
                    0f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:92:B7:70:03:F5:D2:8F:66:03:75:8C:4C:82:EE:5D:61:E3:CD:BA
            X509v3 Authority Key Identifier:
                keyid:73:23:6D:2C:CA:0E:E5:A7:4A:9C:40:FF:F7:21:83:54:44:70:3A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.uz/repo/pedjoeang-digital-networks/4/73236D2CCA0EE5A74A9C40FFF721835444703ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/73236D2CCA0EE5A74A9C40FFF721835444703ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.uz/repo/pedjoeang-digital-networks/4/326130613a363034303a633230303a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c200::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:75:f6:19:b6:5c:04:d4:19:19:c2:0a:67:d7:42:f7:77:
         71:de:b6:53:1e:f3:5d:78:ec:04:86:28:f4:28:c4:7b:a4:c1:
         72:65:f3:91:00:b3:50:15:f9:52:49:35:26:e3:ff:1a:f8:cf:
         69:9a:b1:18:91:94:16:75:47:3b:a9:71:bc:e4:39:6e:ae:7c:
         98:b0:cd:90:5b:ae:66:02:7e:75:f8:60:cf:63:d0:e8:f3:64:
         ad:1a:b3:22:1d:b7:fe:b6:b7:e3:9b:b6:79:09:fb:41:df:94:
         5a:e0:34:99:ad:76:f1:90:4a:a5:66:f1:fd:79:a6:b3:3f:1d:
         a1:1b:5b:a1:6b:bf:2f:f7:8b:6d:74:0f:79:6a:46:4d:c9:87:
         06:03:21:cc:b3:c8:97:b4:dc:78:06:0a:76:d0:81:27:a2:23:
         78:fa:c3:8c:2a:eb:54:fa:e2:0f:bc:2b:22:80:31:46:1a:0f:
         1b:85:07:b7:ab:df:97:9a:d3:e2:1c:1e:61:a8:da:39:37:1a:
         43:3e:cc:e2:ae:f2:8f:12:3d:1f:d7:13:06:92:7d:ad:d1:9f:
         19:91:27:1e:ea:6e:cd:77:27:90:60:4c:57:a5:98:44:26:4f:
         b6:e3:43:3c:93:fc:d2:52:74:a1:1d:4e:b8:88:6d:a8:bb:55:
         b4:8c:63:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:55:37 2024 by rpki-client on console-fra.rpki-client.org