Route Origin Authorization

$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa
File:                     326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa (raw, json)
Hash identifier:          MdiZ+9TbSNzfNPtu/3qU2TdQ6jBsbjIkWQpbqOwaXo4=
Subject key identifier:   C2:BE:1A:F7:B8:1B:12:1A:A5:B2:E3:31:0B:5E:90:37:ED:AE:4B:D7
Certificate issuer:       /CN=6482EA67DB858D1440DD67B955223E4341BA4E97
Certificate serial:       5FB73E045D31975E2A2CF249E44726B8E94036EC
Authority key identifier: 64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
Subject info access:      rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa
Signing time:             Sun 08 Jun 2025 19:46:26 +0000
ROA not before:           Sun 08 Jun 2025 19:41:26 +0000
ROA not after:            Sun 07 Jun 2026 19:46:26 +0000
asID:                     204725
IP address blocks:        2a11:f2c0:fff9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl
                          rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 13:15:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b7:3e:04:5d:31:97:5e:2a:2c:f2:49:e4:47:26:b8:e9:40:36:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6482EA67DB858D1440DD67B955223E4341BA4E97
        Validity
            Not Before: Jun  8 19:41:26 2025 GMT
            Not After : Jun  7 19:46:26 2026 GMT
        Subject: CN=C2BE1AF7B81B121AA5B2E3310B5E9037EDAE4BD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2c:52:15:e0:43:31:a3:8e:28:15:a8:93:94:
                    38:ce:ee:be:e6:6a:e2:4f:25:a1:4f:c9:8c:ca:32:
                    cc:e2:d4:65:18:f5:9f:b8:71:c4:2b:ad:7c:5f:10:
                    c5:1f:bc:67:59:78:64:38:90:3b:8d:33:bb:76:c4:
                    7d:38:fb:c3:cf:e9:72:ce:32:8d:82:be:5d:15:04:
                    78:c0:ee:2a:ac:fe:09:2d:62:d9:98:05:d4:77:ce:
                    cd:c6:31:73:98:60:37:d1:5b:0e:98:34:9e:96:75:
                    bc:2c:75:03:f1:a0:76:cf:6d:20:0f:dd:77:be:8c:
                    a9:87:1e:8a:0e:96:68:70:c3:f2:cb:13:b4:a6:3e:
                    74:f8:79:49:90:75:72:a5:3b:7a:bd:37:85:ff:ba:
                    79:34:3b:5c:e8:20:ba:97:05:71:fa:7d:37:05:04:
                    d3:6f:4e:f8:8c:db:03:60:18:42:20:fd:f6:12:76:
                    30:e5:35:13:43:e3:67:12:c8:a8:1e:bf:50:0b:a2:
                    22:7e:d0:dd:84:26:04:70:c4:06:7e:ac:ac:92:ca:
                    30:82:df:53:92:53:8b:c6:2f:05:cc:d1:24:c8:76:
                    04:1e:bc:5d:c2:11:67:93:62:dd:bc:53:21:84:81:
                    83:4c:c0:a9:08:d7:71:4f:63:41:a2:14:01:ca:cc:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BE:1A:F7:B8:1B:12:1A:A5:B2:E3:31:0B:5E:90:37:ED:AE:4B:D7
            X509v3 Authority Key Identifier:
                keyid:64:82:EA:67:DB:85:8D:14:40:DD:67:B9:55:22:3E:43:41:BA:4E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/6482EA67DB858D1440DD67B955223E4341BA4E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/6482EA67DB858D1440DD67B955223E4341BA4E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/0/326131313a663263303a666666393a3a2f34382d3438203d3e20323034373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a11:f2c0:fff9::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:18:67:4a:c2:e9:1f:b5:89:24:6c:e2:41:cd:5e:5a:1f:ec:
         d5:cd:42:72:d4:af:b9:b9:67:8b:43:72:03:2e:e3:88:9f:3f:
         cd:3b:c6:0c:06:5e:bb:1a:04:10:f8:66:3c:05:a9:4a:f0:2e:
         f2:cc:af:f1:14:c9:ae:9e:2f:11:29:98:b4:76:b4:3a:c3:a3:
         72:30:35:6c:c7:cb:af:0e:09:37:98:ce:77:93:71:e0:cd:b9:
         a7:37:c0:de:03:79:b7:33:9a:59:9e:74:97:fc:bc:78:7e:0b:
         45:59:43:a2:9e:56:38:05:63:3a:8f:e8:87:a1:0d:cf:6b:7a:
         46:14:fd:f5:18:f4:6a:cf:ba:45:d5:52:54:44:65:a2:c8:40:
         05:0a:d2:82:a4:ab:3e:21:d4:6c:4a:3f:91:7e:1e:3e:69:2a:
         fc:79:66:22:4a:3c:c4:ef:dd:c2:b4:27:ce:fa:9f:c3:c5:f3:
         15:64:da:ba:75:2f:d8:da:bb:45:29:6b:bd:3e:34:db:eb:a1:
         bd:71:0a:9c:8b:dd:c5:6b:50:34:1c:f6:5a:24:6a:03:c1:45:
         82:1d:e2:37:46:05:ad:b0:3b:5e:33:7e:2d:21:47:ca:f4:96:
         c5:99:bb:26:00:47:93:86:5c:04:db:97:48:af:23:5e:f6:5c:
         48:82:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:16 2025 by rpki-client