Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/TERITUM_UID_18858/0/326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa
File:                     326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa (raw, json)
Hash identifier:          m+zCbjNrqfTxv221tt6Q+Miq6ghr64br+bP5nn4Okrw=
Subject key identifier:   59:48:CF:74:D4:85:05:2D:B8:F4:22:04:38:7E:10:4B:F7:15:92:DD
Certificate issuer:       /CN=F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954
Certificate serial:       079F1C9BA9A1D43E1B66A676BEC9EB88EDA1BAED
Authority key identifier: F9:2C:0C:A8:60:03:BE:2D:96:91:2F:0C:F0:E9:0F:AF:0D:6C:F9:54
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa
Signing time:             Fri 26 Jan 2024 22:33:09 +0000
ROA not before:           Fri 26 Jan 2024 22:28:09 +0000
ROA not after:            Fri 24 Jan 2025 22:33:09 +0000
asID:                     31898
IP address blocks:        2a06:1285:ad55::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.crl
                          rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:9f:1c:9b:a9:a1:d4:3e:1b:66:a6:76:be:c9:eb:88:ed:a1:ba:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954
        Validity
            Not Before: Jan 26 22:28:09 2024 GMT
            Not After : Jan 24 22:33:09 2025 GMT
        Subject: CN=5948CF74D485052DB8F42204387E104BF71592DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:b6:e9:b2:c5:38:10:af:06:91:ad:5f:bc:
                    a8:84:77:35:a3:f4:06:ca:b0:0d:4f:ed:b5:a2:18:
                    3a:23:ab:d3:ca:80:17:90:a1:1f:e9:39:58:ce:22:
                    41:3d:62:e0:6d:85:1d:75:c3:09:bb:63:48:0e:c0:
                    b8:d4:6c:fb:83:bd:60:a8:b4:6d:e6:64:a7:35:bf:
                    11:0d:3f:e2:e9:5e:e1:1c:eb:d7:1d:39:9d:1e:84:
                    42:43:b5:ea:8e:0a:04:c7:f5:e7:26:70:4c:43:2e:
                    e0:c1:81:bf:78:f6:dc:86:51:2e:50:f8:dc:19:ee:
                    3a:2f:cb:ca:d3:8b:b3:6e:84:05:05:77:1f:f5:9c:
                    fe:57:13:29:0c:21:c7:89:90:36:3c:59:2d:61:58:
                    6e:dd:c8:d8:7a:d9:bf:05:f3:d2:ee:e2:34:82:f7:
                    27:5d:56:51:f4:cc:6e:1d:b8:5e:e3:2d:bd:5e:d8:
                    86:5f:8b:f3:19:f4:2f:4b:38:10:34:53:ae:c6:dc:
                    af:aa:6b:53:81:71:9c:4c:a5:96:2b:6d:a8:b1:b0:
                    62:6f:16:6b:3c:4f:19:d1:af:8d:29:f8:77:b4:77:
                    09:7c:1c:ca:2e:2c:e8:c0:1f:33:c3:6f:9c:7e:a6:
                    83:24:a2:7d:19:da:60:cf:1f:9b:ae:0a:8f:b1:f5:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:48:CF:74:D4:85:05:2D:B8:F4:22:04:38:7E:10:4B:F7:15:92:DD
            X509v3 Authority Key Identifier:
                keyid:F9:2C:0C:A8:60:03:BE:2D:96:91:2F:0C:F0:E9:0F:AF:0D:6C:F9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/326130363a313238353a616435353a3a2f34382d3438203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1285:ad55::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:f1:c8:84:2b:74:09:93:b6:95:14:83:ec:03:db:bb:03:
         b4:ec:74:38:6b:cc:8c:1d:54:d4:a1:b3:2b:2d:a1:20:a9:28:
         75:ea:be:f5:6d:07:2b:98:f9:c9:ec:87:4c:b7:5a:cb:0a:cf:
         62:47:b0:9a:24:c8:53:3f:24:55:82:7f:fa:a2:bc:b9:3b:a7:
         5e:8a:30:12:16:35:48:23:aa:de:16:8b:22:85:ef:1e:0d:02:
         d9:88:d7:c0:64:99:4d:97:29:64:63:7c:ef:c1:54:d1:f4:ab:
         a2:64:8a:52:21:b1:6a:18:62:9e:4f:fb:ae:ff:79:db:1a:fd:
         3c:e6:c1:49:de:fd:ff:f4:25:64:29:03:14:fd:51:b9:10:37:
         3d:1e:d0:ad:b0:c7:3e:58:00:5b:2f:c4:11:2c:4a:52:a4:cb:
         4b:12:e6:3e:e3:37:22:a8:a7:e2:29:ae:2a:f6:44:7c:d0:e8:
         e2:31:69:73:14:8c:77:de:08:2a:9e:d3:8c:ea:31:0d:9e:f8:
         54:e2:25:dd:41:d0:35:51:98:f3:fd:15:5d:b3:e5:99:32:04:
         88:3a:9d:20:e1:4a:60:1f:9b:66:2b:68:7c:9a:49:0d:15:7d:
         1b:15:9d:08:c9:2b:70:f1:e0:ac:a2:b5:7d:55:96:e0:d4:6b:
         93:a2:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:35 2024 by rpki-client on console-ams.rpki-client.org