Route Origin Authorization

$ rpki-client -vvf rpki.zappiehost.com/repo/TERITUM_UID_18858/0/326130363a313238353a623030623a3a2f34382d3438203d3e2030.roa
File:                     326130363a313238353a623030623a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          7Nsx19sJW9YLcKZxM9/yFqLJmASl0SAun+3NhR1MPtQ=
Subject key identifier:   60:F2:C7:F4:B4:76:5C:8B:AD:80:82:EB:1E:DF:2B:DA:2D:D7:88:95
Certificate issuer:       /CN=F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954
Certificate serial:       50FAF217796C43F7B63D9C8E915700C7E76BE113
Authority key identifier: F9:2C:0C:A8:60:03:BE:2D:96:91:2F:0C:F0:E9:0F:AF:0D:6C:F9:54
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer
Subject info access:      rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/326130363a313238353a623030623a3a2f34382d3438203d3e2030.roa
Signing time:             Tue 09 Jul 2024 23:12:58 +0000
ROA not before:           Tue 09 Jul 2024 23:07:58 +0000
ROA not after:            Tue 08 Jul 2025 23:12:58 +0000
asID:                     0
IP address blocks:        2a06:1285:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.crl
                          rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fa:f2:17:79:6c:43:f7:b6:3d:9c:8e:91:57:00:c7:e7:6b:e1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954
        Validity
            Not Before: Jul  9 23:07:58 2024 GMT
            Not After : Jul  8 23:12:58 2025 GMT
        Subject: CN=60F2C7F4B4765C8BAD8082EB1EDF2BDA2DD78895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:55:b8:93:24:c3:0a:93:fa:8a:f6:ee:a3:d7:
                    96:91:5d:eb:cd:15:eb:11:99:e8:8b:6b:75:41:a9:
                    87:3a:e0:3e:b2:c0:bc:65:cd:a8:48:06:08:ec:d5:
                    2a:af:80:12:df:c3:ae:6e:9b:2c:81:84:42:8b:db:
                    0a:79:ef:18:7b:43:1a:82:cc:d0:4d:e9:eb:fd:8d:
                    b3:fc:3c:32:fa:3c:0c:b3:fb:45:80:14:72:16:e4:
                    be:0a:e7:a1:b7:07:11:92:0c:99:e0:d5:ff:5a:da:
                    fc:5e:eb:d4:b4:95:12:a4:29:a2:c7:ab:76:9f:0f:
                    98:1b:7d:b0:a9:03:36:ef:6d:95:94:55:e5:ac:94:
                    b1:dd:50:b1:41:72:d9:70:da:22:ec:57:30:3f:09:
                    1b:d6:ac:b5:52:a1:70:8c:82:03:ba:60:bc:ba:d6:
                    3a:c0:09:e0:d1:99:72:a3:49:ca:f3:03:9c:62:e3:
                    17:1e:53:00:d1:50:e9:d4:e2:b9:45:f9:fa:40:d1:
                    09:f1:2a:da:22:ba:b6:2f:f4:df:cb:00:62:48:85:
                    ac:9f:1e:b9:8b:70:ce:d3:1c:aa:e6:24:67:0d:7c:
                    97:d1:42:b3:44:d3:33:ba:6a:76:6f:27:ff:c6:95:
                    6a:99:44:90:65:46:a3:02:a1:36:5a:c9:03:34:c5:
                    ac:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F2:C7:F4:B4:76:5C:8B:AD:80:82:EB:1E:DF:2B:DA:2D:D7:88:95
            X509v3 Authority Key Identifier:
                keyid:F9:2C:0C:A8:60:03:BE:2D:96:91:2F:0C:F0:E9:0F:AF:0D:6C:F9:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/F92C0CA86003BE2D96912F0CF0E90FAF0D6CF954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.zappiehost.com/repo/TERITUM_UID_18858/0/326130363a313238353a623030623a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1285:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:50:d5:b8:43:63:f9:0d:3a:20:8f:16:58:13:c0:3e:55:2b:
         92:ad:a9:b2:b8:47:8f:fd:68:c2:b3:87:00:d7:75:50:e2:74:
         78:55:11:6c:6c:b7:a8:47:51:8e:82:fd:18:a3:44:11:63:13:
         e7:40:7e:60:82:55:8b:be:73:5c:b0:7a:6d:c5:5b:75:6e:4a:
         ee:15:af:25:07:41:aa:e2:f4:f9:f6:23:30:9b:fd:5e:9c:8c:
         b0:69:b1:72:f4:08:d2:0d:6f:7c:e2:d1:dd:cc:84:0e:fe:32:
         cf:1c:d1:f7:15:0e:b3:10:14:58:a5:83:28:6e:ad:a1:f9:5d:
         cb:cf:6f:d4:99:84:a4:98:2a:ec:78:11:f0:c2:58:34:98:07:
         cd:be:78:ac:43:be:a7:1a:98:32:5f:e4:81:2f:43:68:1d:d4:
         46:0b:5a:cf:5e:02:10:2d:fa:88:cc:ca:8b:5c:c0:bc:39:34:
         ff:af:30:00:fc:78:02:96:d9:20:ff:80:85:71:6b:6b:3b:cd:
         f3:ef:5a:a5:18:7a:84:d5:fe:e2:c4:6a:d7:c5:df:35:48:fa:
         11:c1:e1:27:31:19:c8:1c:ed:e9:81:43:e0:76:96:f4:85:3b:
         3f:19:af:00:2c:bd:71:8f:5b:a0:68:9c:04:13:3a:ad:4f:91:
         18:4c:1b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:34 2024 by rpki-client on console-fra.rpki-client.org