Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa
File:                     326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa (raw, json)
Hash identifier:          iTb04aO1BMGaSLDC3asTwY2ZRYrbTl7Ocrr3rHizQyw=
Subject key identifier:   B4:B4:6F:5F:34:91:37:98:97:0A:C1:2E:96:BB:54:60:73:0E:B3:45
Certificate issuer:       /CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
Certificate serial:       7E807571676258E87FE0D6E733300C88327EBFD1
Authority key identifier: 06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa
Signing time:             Sun 08 Jun 2025 19:42:24 +0000
ROA not before:           Sun 08 Jun 2025 19:37:24 +0000
ROA not after:            Sun 07 Jun 2026 19:42:24 +0000
asID:                     216373
IP address blocks:        2a11:f2c0:ffc4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 23:46:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:80:75:71:67:62:58:e8:7f:e0:d6:e7:33:30:0c:88:32:7e:bf:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=067DBC6BCF0F9582DF78366389AEAF5965565EF5
        Validity
            Not Before: Jun  8 19:37:24 2025 GMT
            Not After : Jun  7 19:42:24 2026 GMT
        Subject: CN=B4B46F5F34913798970AC12E96BB5460730EB345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:42:4b:24:ac:e9:9a:2f:a5:5b:c9:8a:fb:f8:
                    7e:34:6c:3f:f6:d5:ac:6f:52:8c:6a:2e:02:a5:14:
                    96:a6:47:06:9c:36:2e:c5:4a:c0:99:1e:42:9a:5b:
                    b5:e8:52:52:7c:aa:03:22:b6:a2:81:88:16:04:dd:
                    ea:0d:f4:e0:9d:d8:8f:ec:c0:97:99:9e:63:8f:fd:
                    c0:23:d4:f3:08:02:f1:12:2d:9b:87:32:53:91:a6:
                    d7:2a:79:4f:bd:5e:1e:e1:e8:f8:55:08:5f:8c:4d:
                    97:b0:ca:79:bb:67:af:93:0f:c8:28:5e:69:b0:df:
                    b2:7a:43:d9:40:99:74:14:af:26:88:ab:0c:3c:cc:
                    a1:b9:24:ea:6c:28:1e:d8:0b:5b:ed:c9:7d:61:b1:
                    9c:1d:16:37:42:01:9d:1b:fc:05:cf:e9:38:25:39:
                    5e:89:4c:1b:5d:70:57:74:f2:7f:e0:58:41:8d:aa:
                    16:7b:13:b9:37:fe:01:c5:8a:01:14:e4:16:4a:fc:
                    c9:58:d8:ad:28:3a:0d:49:c5:18:a3:40:08:30:92:
                    c3:7b:9d:4c:96:89:d9:e7:86:b3:4a:23:4c:22:cc:
                    26:d3:55:e1:3d:ad:8c:ab:1d:e5:a3:f6:1b:99:14:
                    b2:49:44:fc:26:79:ec:7a:8f:a3:41:5b:96:8d:8d:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B4:6F:5F:34:91:37:98:97:0A:C1:2E:96:BB:54:60:73:0E:B3:45
            X509v3 Authority Key Identifier:
                keyid:06:7D:BC:6B:CF:0F:95:82:DF:78:36:63:89:AE:AF:59:65:56:5E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/067DBC6BCF0F9582DF78366389AEAF5965565EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/067DBC6BCF0F9582DF78366389AEAF5965565EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_014b9208b5464ff1aeac1fc829ad0343/0/326131313a663263303a666663343a3a2f34382d3438203d3e20323136333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:ffc4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:6e:8c:62:f4:4e:ee:cd:4d:7c:01:de:0b:0f:0e:45:ef:
         19:19:ea:a4:be:9b:60:e1:ee:92:cd:bf:5d:e8:cd:e8:4e:0d:
         eb:b1:3b:e2:18:02:7c:f8:a3:07:ab:2b:ae:7b:75:9a:6b:e2:
         d5:12:5f:c2:37:05:55:01:5f:81:dd:53:37:0c:67:06:22:2d:
         e4:55:b5:29:63:0d:94:18:96:85:f9:4f:0a:e3:71:2c:70:23:
         8b:31:f5:3a:91:46:b0:c6:4f:38:b7:08:3f:67:9a:96:da:29:
         41:4f:60:2b:aa:47:39:a6:da:1e:fb:2b:da:50:cb:5e:dc:2a:
         60:6e:44:fd:02:bd:d3:34:a1:a4:5f:0a:7d:3b:30:e7:09:9d:
         3f:be:28:02:5c:76:10:19:fc:b8:11:01:32:a1:2b:07:86:f3:
         6f:48:59:5b:f0:06:27:61:45:90:2c:81:c8:05:79:ca:f9:b7:
         1f:92:b2:7f:d3:61:98:2a:ed:c9:e7:2f:ba:d6:94:03:85:3d:
         3e:4e:04:8c:d8:64:71:b4:8a:4e:f5:98:f7:4e:91:74:f9:6d:
         0f:ab:cf:40:d2:23:bf:af:6e:86:e4:08:02:75:b5:d1:35:c5:
         e5:15:77:6c:0c:69:f0:16:47:37:51:99:cc:34:fa:3c:18:8c:
         40:af:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:18:26 2025 by rpki-client