Route Origin Authorization

$ rpki-client -vvf rpki.uz/repo/pedjoeang-digital-networks/4/326130613a363034303a633230313a3a2f34382d3438203d3e20323030373735.roa
File:                     326130613a363034303a633230313a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          cyiIDoUa+wDk8mwOQUTXZzE7aLsUO8JFRUW/vZVWKu8=
Subject key identifier:   8B:B5:59:63:49:83:C6:88:07:18:93:4C:1E:82:DB:F3:11:3E:C8:F0
Certificate issuer:       /CN=73236D2CCA0EE5A74A9C40FFF721835444703ABE
Certificate serial:       36BBA7CF5E7794867A68DA1256CEA362AB424BA3
Authority key identifier: 73:23:6D:2C:CA:0E:E5:A7:4A:9C:40:FF:F7:21:83:54:44:70:3A:BE
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/73236D2CCA0EE5A74A9C40FFF721835444703ABE.cer
Subject info access:      rsync://rpki.uz/repo/pedjoeang-digital-networks/4/326130613a363034303a633230313a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Tue 28 May 2024 06:21:20 +0000
ROA not before:           Tue 28 May 2024 06:16:20 +0000
ROA not after:            Tue 27 May 2025 06:21:20 +0000
asID:                     200775
IP address blocks:        2a0a:6040:c201::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.uz/repo/pedjoeang-digital-networks/4/73236D2CCA0EE5A74A9C40FFF721835444703ABE.crl
                          rsync://rpki.uz/repo/pedjoeang-digital-networks/4/73236D2CCA0EE5A74A9C40FFF721835444703ABE.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/73236D2CCA0EE5A74A9C40FFF721835444703ABE.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:bb:a7:cf:5e:77:94:86:7a:68:da:12:56:ce:a3:62:ab:42:4b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73236D2CCA0EE5A74A9C40FFF721835444703ABE
        Validity
            Not Before: May 28 06:16:20 2024 GMT
            Not After : May 27 06:21:20 2025 GMT
        Subject: CN=8BB559634983C6880718934C1E82DBF3113EC8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:bd:2c:30:4a:2a:ea:7e:93:ac:19:81:13:
                    db:59:ec:4b:9a:e0:78:31:45:a9:1a:29:14:fa:2e:
                    ef:4b:55:4a:8c:1f:5c:d6:5a:84:f5:34:54:31:ad:
                    37:f4:ea:90:af:12:88:d4:12:a6:28:46:d2:c8:c3:
                    07:14:04:bb:f8:1e:50:df:05:68:6a:ec:96:03:84:
                    8b:2d:0b:d7:3a:75:50:d6:e7:82:c6:1c:24:e2:ce:
                    d9:c2:d3:b1:64:81:71:44:f8:8f:61:98:4b:e5:4a:
                    f7:89:dd:32:14:b6:a1:e1:83:a3:ee:1e:af:8f:85:
                    1d:85:11:a7:e5:32:90:fe:33:a4:da:31:df:ec:3a:
                    5b:bd:66:05:44:fe:07:62:a3:1a:e2:90:8b:76:bb:
                    32:02:e3:bd:40:74:12:aa:52:d0:20:c4:b8:b7:48:
                    28:68:53:51:e0:db:91:a5:a9:c9:41:2c:2e:d6:f0:
                    82:3a:53:87:ee:6a:4b:84:17:5f:86:68:ca:4f:24:
                    a7:98:da:c9:be:57:df:87:88:7d:0f:4f:36:f8:c6:
                    f6:44:6e:5a:61:c4:fc:d0:02:94:66:51:82:f1:f8:
                    5b:a6:a2:a2:02:cf:26:e7:b5:fd:4b:56:84:20:2a:
                    98:fa:b6:b1:4a:d3:7d:92:57:d7:56:07:76:c7:0b:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B5:59:63:49:83:C6:88:07:18:93:4C:1E:82:DB:F3:11:3E:C8:F0
            X509v3 Authority Key Identifier:
                keyid:73:23:6D:2C:CA:0E:E5:A7:4A:9C:40:FF:F7:21:83:54:44:70:3A:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.uz/repo/pedjoeang-digital-networks/4/73236D2CCA0EE5A74A9C40FFF721835444703ABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/73236D2CCA0EE5A74A9C40FFF721835444703ABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.uz/repo/pedjoeang-digital-networks/4/326130613a363034303a633230313a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c201::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:e4:9e:be:73:78:ad:1d:83:ce:eb:00:5f:bd:83:67:7d:70:
         5c:9b:95:87:58:15:5c:36:ae:23:31:5f:8f:0d:93:12:85:ef:
         f0:8d:a7:b1:23:86:6f:b0:22:80:3e:b7:74:68:f8:25:fc:63:
         e1:3b:a0:66:98:4c:75:b9:dc:87:7a:78:17:f3:82:15:18:fc:
         a6:5d:b4:04:c4:8f:ca:85:f0:bc:4d:c6:50:7b:74:ea:6d:66:
         62:84:f5:b2:e3:52:e3:d3:5f:b9:48:7d:ca:1f:dc:9c:7a:48:
         2e:45:b8:c8:b2:50:d3:9f:25:87:4d:7a:df:6c:da:00:c2:47:
         9c:d4:b0:84:90:7a:65:e5:10:16:03:54:af:c1:ea:c8:12:d2:
         a4:5e:ff:ba:7a:17:eb:d6:91:b1:fd:be:7b:e0:a4:e4:de:eb:
         ed:1c:1a:bb:b4:91:2c:b9:9d:12:02:51:35:5b:56:4a:ec:00:
         91:ad:55:41:58:09:88:3e:b7:a7:29:2b:ec:f5:10:1c:6d:12:
         98:70:80:2f:4c:17:f1:51:a0:e3:b9:5a:84:77:5d:a4:03:46:
         8e:3f:79:81:12:2a:8c:5c:10:f4:c4:88:94:f7:c9:ea:0b:12:
         17:c6:b2:b2:28:6d:b5:27:32:b2:a1:53:00:0e:bd:5f:ad:7b:
         b2:30:2e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:55:37 2024 by rpki-client on console-fra.rpki-client.org