Route Origin Authorization

$ rpki-client -vvf rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a3a2f34342d3438203d3e2034383432.roa
File:                     326131333a313830303a3a2f34342d3438203d3e2034383432.roa (raw, json)
Hash identifier:          IEwSaCiGRKw+GYOBeKLvB4VFwnhFNmZcA0UMMrCtaSc=
Subject key identifier:   F0:DB:91:C7:79:51:18:89:D3:40:CF:B0:C4:FC:9D:5B:57:7C:41:92
Certificate issuer:       /CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
Certificate serial:       0691AB7345A43B2BC94D8B75D2AE3E12454E3D73
Authority key identifier: 3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
Subject info access:      rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a3a2f34342d3438203d3e2034383432.roa
Signing time:             Tue 04 Jul 2023 18:54:06 +0000
ROA not before:           Tue 04 Jul 2023 18:49:06 +0000
ROA not after:            Tue 02 Jul 2024 18:54:06 +0000
asID:                     4842
IP address blocks:        2a13:1800::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl
                          rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:91:ab:73:45:a4:3b:2b:c9:4d:8b:75:d2:ae:3e:12:45:4e:3d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdec27384aade5ca0809fd6f16d2bca18beb659
        Validity
            Not Before: Jul  4 18:49:06 2023 GMT
            Not After : Jul  2 18:54:06 2024 GMT
        Subject: CN=F0DB91C779511889D340CFB0C4FC9D5B577C4192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:23:e9:c3:69:94:10:dd:17:05:59:13:3a:
                    91:68:a1:5c:b3:79:3e:7d:2c:a4:e8:e8:7e:ae:56:
                    ff:e2:49:87:12:7f:a8:46:f0:d5:4b:dc:89:46:b5:
                    00:b2:49:a6:23:a3:40:b2:22:3d:3e:c8:2b:83:92:
                    d2:15:52:63:28:1c:23:e4:31:04:50:59:ce:bb:34:
                    77:66:cc:e6:a7:b0:d6:a8:dd:15:1c:5f:5f:a5:e4:
                    4b:99:ae:9a:cf:6a:9c:23:04:5c:8f:0f:ed:29:b5:
                    30:71:3a:9f:8a:a3:48:30:c2:09:7e:05:da:fb:e1:
                    47:ed:49:3d:2f:8c:fa:31:2e:89:f3:34:ab:8b:fa:
                    0b:c0:b2:d0:5a:0e:7c:fe:e9:b1:5f:b7:90:7d:b4:
                    83:78:ae:da:ca:e6:a9:59:eb:ae:d6:70:0d:c5:10:
                    46:04:4d:00:31:7f:76:ce:91:e4:09:ec:0a:ef:de:
                    4f:c4:69:c3:f5:25:c9:73:bd:5f:91:51:80:6a:0b:
                    48:42:8f:32:84:aa:4e:87:f7:72:00:a2:0a:ed:a8:
                    47:b4:5b:cc:21:8f:33:59:10:0d:b5:08:e7:27:86:
                    bb:3e:7b:58:58:af:fd:a9:0c:2e:7f:4f:07:d3:71:
                    59:dc:3c:f5:dd:86:47:2e:fd:0c:c6:07:0f:e7:15:
                    28:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DB:91:C7:79:51:18:89:D3:40:CF:B0:C4:FC:9D:5B:57:7C:41:92
            X509v3 Authority Key Identifier:
                keyid:3C:DE:C2:73:84:AA:DE:5C:A0:80:9F:D6:F1:6D:2B:CA:18:BE:B6:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/3CDEC27384AADE5CA0809FD6F16D2BCA18BEB659.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN7Cc4Sq3lyggJ_W8W0ryhi-tlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rpki.tianhai.link/repo/TianhaiRpki/0/326131333a313830303a3a2f34342d3438203d3e2034383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:1800::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:77:ce:6f:ad:d6:b7:6c:f9:ad:23:1e:b5:6f:07:d3:68:e9:
         b6:4c:ab:78:3d:bf:a4:50:e4:2d:f2:5a:7b:37:0a:93:af:5e:
         91:41:42:c0:3f:0f:65:5d:21:e9:00:f5:48:c8:e6:dc:dc:ff:
         80:04:ae:b2:3f:d5:84:38:28:86:18:f0:11:7a:62:fc:5a:7b:
         f3:3b:1f:3f:2a:b9:e5:53:4a:d3:0e:92:4c:0d:40:8a:b4:10:
         9a:8f:9f:47:61:98:16:6d:d4:c1:0e:46:3b:82:1c:f1:53:4f:
         49:b5:d9:eb:f6:8e:46:af:e9:4a:3b:42:b5:3a:fd:f5:e7:33:
         d4:75:e8:e2:72:23:93:77:78:83:bd:06:fb:1a:be:04:41:b7:
         7a:e8:b5:1d:f5:c1:8c:3a:25:03:82:c5:5d:a3:ff:95:ae:4c:
         48:79:64:9a:ba:96:22:ca:78:2d:64:8d:78:36:7a:c6:c7:c9:
         74:ed:8c:27:66:18:3d:0f:e8:42:61:7b:ac:96:dd:2b:3e:d9:
         5d:bf:82:9d:76:9c:c5:8d:4b:0a:19:96:f1:82:7d:6b:10:85:
         48:0a:d9:4e:0e:50:64:fe:49:ba:cb:e6:50:78:9f:f0:7d:24:
         25:92:c1:90:bc:c3:4d:1c:32:92:d8:1c:9b:a3:b0:f5:55:06:
         c3:28:5b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:31:52 2024 by rpki-client on console-fra.rpki-client.org