Route Origin Authorization

$ rpki-client -vvf krill.stonham.info/repo/Stonham/1/326130353a646663313a383930303a3a2f34342d3434203d3e20313939373636.roa
File:                     326130353a646663313a383930303a3a2f34342d3434203d3e20313939373636.roa (raw, json)
Hash identifier:          iLxF/lqdqwnc+i0/8u5ohe9bBl/H2AiaIxAZn8wDA3g=
Subject key identifier:   A7:16:00:F2:F8:80:7E:D2:5E:9B:18:29:DF:93:82:0F:C6:FD:17:BF
Certificate issuer:       /CN=635C29FF238CC286AC1625A68EFCC04E2E460171
Certificate serial:       5AFDDCC8809B1711BEA8FA6C2E29380F1C80FAFA
Authority key identifier: 63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
Subject info access:      rsync://krill.stonham.info/repo/Stonham/1/326130353a646663313a383930303a3a2f34342d3434203d3e20313939373636.roa
Signing time:             Fri 05 Apr 2024 22:47:55 +0000
ROA not before:           Fri 05 Apr 2024 22:42:55 +0000
ROA not after:            Fri 04 Apr 2025 22:47:55 +0000
asID:                     199766
IP address blocks:        2a05:dfc1:8900::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.crl
                          rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 07:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:fd:dc:c8:80:9b:17:11:be:a8:fa:6c:2e:29:38:0f:1c:80:fa:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635C29FF238CC286AC1625A68EFCC04E2E460171
        Validity
            Not Before: Apr  5 22:42:55 2024 GMT
            Not After : Apr  4 22:47:55 2025 GMT
        Subject: CN=A71600F2F8807ED25E9B1829DF93820FC6FD17BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:50:cb:6d:2d:f8:03:64:5b:4f:63:42:7e:f2:
                    5c:b3:5d:77:3b:9b:f0:ca:75:6e:d6:80:7a:46:f4:
                    76:eb:d6:fa:a1:11:b4:72:64:84:ca:fb:32:4e:8e:
                    e5:dc:54:79:6e:a7:a2:d7:54:9d:47:c6:65:bf:c2:
                    86:1b:fe:0e:5f:ec:46:bd:98:2a:93:08:4f:ff:43:
                    5d:f5:20:ef:f5:d2:5e:f1:1d:98:20:b1:cc:44:b1:
                    d1:6f:d6:2f:ff:86:5a:93:ce:c0:c4:87:d3:27:43:
                    94:46:9b:36:f0:44:99:11:6f:68:c3:96:0b:d5:2b:
                    0c:9e:a0:b9:e2:32:1a:4c:25:db:fb:ea:04:e0:86:
                    52:1c:35:7f:78:40:67:6c:ef:42:b8:45:9a:40:76:
                    10:7b:6f:3f:72:80:fb:7b:d9:57:20:3f:04:0c:c8:
                    cf:1c:86:58:1e:7b:11:e1:2f:2d:f1:4c:ed:3a:9b:
                    7f:db:38:e1:4c:0f:ab:8f:17:86:bd:2e:6e:33:62:
                    df:3d:bb:6e:60:6b:f4:ad:ec:2a:09:2b:aa:4b:fa:
                    23:2f:86:e7:32:c1:86:4f:0f:b3:38:85:52:25:40:
                    8f:5b:15:39:b0:40:32:8c:d3:b0:e8:f4:3b:05:4a:
                    ea:f2:15:7d:94:fd:a9:26:0f:a1:50:cb:ec:90:7e:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:16:00:F2:F8:80:7E:D2:5E:9B:18:29:DF:93:82:0F:C6:FD:17:BF
            X509v3 Authority Key Identifier:
                keyid:63:5C:29:FF:23:8C:C2:86:AC:16:25:A6:8E:FC:C0:4E:2E:46:01:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.stonham.info/repo/Stonham/1/635C29FF238CC286AC1625A68EFCC04E2E460171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/635C29FF238CC286AC1625A68EFCC04E2E460171.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.stonham.info/repo/Stonham/1/326130353a646663313a383930303a3a2f34342d3434203d3e20313939373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:8900::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:4b:e9:15:30:64:7b:bc:24:5d:4d:fa:7d:53:bb:98:03:eb:
         50:89:f6:4b:5b:52:a2:1a:78:36:91:33:ae:a2:c9:fe:73:fb:
         31:b2:e4:b7:b6:c7:21:4e:19:11:86:76:5e:a4:9f:da:31:0a:
         00:b4:05:8b:5c:2d:55:66:51:db:d1:a1:14:69:ff:e0:e5:5b:
         10:dc:9d:55:dd:ac:40:de:4e:ec:d0:80:8e:31:bf:06:6e:b9:
         11:2d:ab:61:6b:0e:fd:04:86:5f:a3:87:92:30:f5:7f:45:23:
         11:e3:01:ee:65:11:33:ff:8a:a6:06:aa:bf:45:25:fd:46:c0:
         ac:66:12:34:a0:cc:30:a0:06:36:54:d5:54:ca:d2:b0:0b:06:
         56:73:a1:23:01:2f:08:eb:0d:ae:fb:56:f8:22:f6:7a:6d:9e:
         b5:40:af:7f:78:d4:d6:db:ca:3c:52:1f:2c:92:1d:51:5f:27:
         d9:3d:68:65:fe:b1:b2:19:fa:8c:d2:f1:c8:6c:af:0d:89:07:
         9e:fb:26:8a:4f:05:39:b7:bf:95:46:e5:5b:0f:d2:ae:70:6d:
         01:be:21:3e:77:fa:24:7f:a0:55:a6:30:92:49:a0:de:8a:2a:
         b7:2f:0f:b1:0a:f7:b8:2e:62:13:01:16:04:6c:eb:e2:3b:72:
         c1:a0:c2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:26:06 2024 by rpki-client on console.sobornost.net