Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa
File:                     3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa (raw, json)
Hash identifier:          y+OLW0S40JnM0nnggLpDz5UkWp+12bD+wlHLd3fhXkg=
Subject key identifier:   D3:79:DD:CF:13:EF:08:02:A4:DD:95:7E:1B:7C:AE:5A:66:30:D6:68
Certificate issuer:       /CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
Certificate serial:       3FDC1DCA74C52189A88297D8A04E553E99C0CB
Authority key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa
Signing time:             Mon 31 Jul 2023 00:02:35 +0000
ROA not before:           Sun 30 Jul 2023 23:57:35 +0000
ROA not after:            Mon 29 Jul 2024 00:02:35 +0000
asID:                     46026
IP address blocks:        175.111.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl
                          rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:dc:1d:ca:74:c5:21:89:a8:82:97:d8:a0:4e:55:3e:99:c0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17
        Validity
            Not Before: Jul 30 23:57:35 2023 GMT
            Not After : Jul 29 00:02:35 2024 GMT
        Subject: CN=D379DDCF13EF0802A4DD957E1B7CAE5A6630D668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:05:80:75:80:24:31:1a:ac:dd:56:15:2e:07:
                    58:0d:4c:e2:69:ec:f3:86:a6:77:fd:93:43:e7:f9:
                    32:db:1f:55:93:c0:06:16:9d:a8:b0:f6:47:b7:21:
                    29:14:66:e5:54:04:3a:df:16:dc:1e:89:84:0c:ac:
                    d1:47:9e:8b:ce:ca:20:a8:ad:e6:b3:be:52:5b:f2:
                    c4:b2:65:6a:12:29:fa:1b:98:3c:63:bc:6b:ec:d3:
                    4a:a2:69:66:ff:cb:61:12:04:5b:37:a9:35:a9:64:
                    6e:f9:eb:cd:16:27:84:05:2c:94:04:30:d0:17:26:
                    b4:d8:6d:11:b7:12:7b:b0:00:62:c0:49:ce:3c:d6:
                    54:34:32:49:9f:dd:86:78:e1:c0:ba:1c:56:04:b1:
                    17:a8:12:8e:b3:ec:67:55:b4:99:62:fd:32:cb:46:
                    32:6d:e7:c1:ce:86:de:cf:96:a9:66:e3:2d:90:dc:
                    67:7d:b1:b2:29:ec:92:71:1d:e2:4f:9d:90:2e:50:
                    63:de:5b:cb:67:ea:f8:1a:b6:2a:a3:11:51:b2:e1:
                    99:44:a5:12:77:eb:1a:5a:fe:1c:a2:66:d8:64:04:
                    63:09:2f:52:64:a3:18:40:6d:3b:90:1a:1d:ef:ad:
                    45:eb:30:68:3c:34:a4:4e:11:0b:cc:76:2f:bf:ea:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:79:DD:CF:13:EF:08:02:A4:DD:95:7E:1B:7C:AE:5A:66:30:D6:68
            X509v3 Authority Key Identifier:
                keyid:F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/3137352e3131312e3131352e302f32342d3234203d3e203436303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:30:b8:c8:8e:cc:62:ec:80:70:8e:31:2d:cf:b7:6c:c4:56:
         77:2b:33:7e:af:85:9e:42:19:16:54:96:4c:91:11:30:e2:c9:
         cd:45:52:7c:44:91:88:3e:26:17:ad:40:9b:d3:98:2b:11:4c:
         5c:11:8b:23:ce:8e:ed:bc:b7:6a:54:04:2d:33:8a:2d:d3:14:
         e7:04:fa:78:89:6c:dd:8d:12:9a:26:09:d6:05:0f:6e:8f:04:
         7a:bf:20:65:c1:7c:a0:7b:e4:21:e0:a9:4a:2b:86:b8:ae:33:
         1f:eb:d6:f6:de:26:8d:83:d9:b1:a7:a3:1a:b4:7b:bd:3b:72:
         65:01:bf:07:3d:74:68:f3:6d:9d:3d:19:74:e8:88:a5:48:44:
         68:08:31:12:df:bd:68:06:25:21:30:42:38:c9:1e:7a:bf:84:
         01:3f:14:44:7a:d3:f4:13:5d:14:ec:5a:57:7b:6f:82:e2:01:
         a9:5a:be:10:91:ba:bf:a0:ee:d2:fc:a7:37:97:93:00:19:be:
         0a:32:e8:68:9c:4d:8c:34:e1:08:e0:7f:69:ee:ab:a7:a7:f1:
         96:ee:34:0d:8f:e5:f6:81:55:0a:0b:f9:0c:27:06:ca:4d:cc:
         fa:a5:af:00:20:0c:3c:5e:e6:74:c5:a6:61:28:13:d4:0f:16:
         22:8c:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 01:00:27 2024 by rpki-client on console-fra.rpki-client.org