Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa
File:                     AS45493.roa (raw, json)
Hash identifier:          LUAAO71mQwsLtRLWyoHb0w0ifRn30AFZP2ZxQ05wNSM=
Subject key identifier:   84:27:55:43:EC:DF:1E:8B:6C:C1:4F:D1:62:A8:73:86:DF:2D:DE:50
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6B292B47642502E41A17368C7767CA43B32447DE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa
Signing time:             Tue 23 Jan 2024 10:00:36 +0000
ROA not before:           Tue 23 Jan 2024 09:55:36 +0000
ROA not after:            Tue 21 Jan 2025 10:00:36 +0000
asID:                     45493
IP address blocks:        182.253.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
                          rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:2b:47:64:25:02:e4:1a:17:36:8c:77:67:ca:43:b3:24:47:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan 23 09:55:36 2024 GMT
            Not After : Jan 21 10:00:36 2025 GMT
        Subject: CN=84275543ECDF1E8B6CC14FD162A87386DF2DDE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:a2:d5:16:57:2b:68:a7:f0:c4:75:8f:76:
                    ac:2d:1d:2d:69:3a:da:d8:32:8c:89:ba:17:af:c5:
                    20:19:d8:3a:94:e6:db:53:b5:29:25:45:6d:10:e0:
                    e5:64:e3:3f:f5:ab:b8:c9:27:2f:8c:c4:8b:06:5c:
                    05:76:ed:25:9a:19:34:ad:fd:b9:6a:9b:6b:f1:8d:
                    f2:06:b0:d1:a4:e8:9c:cf:19:1e:c3:fe:fc:3e:4e:
                    68:60:85:ba:2e:4f:96:db:d2:2f:cc:04:fe:16:4a:
                    d5:97:e1:d2:c2:c5:db:48:3a:79:92:17:cf:a8:e1:
                    6e:9e:d1:d7:51:30:52:55:b5:f8:09:2a:72:74:40:
                    a4:50:6b:45:b2:c8:71:c1:0e:d8:3c:65:cf:1a:3d:
                    88:a8:80:ad:b9:57:fd:2b:5e:7a:70:31:1c:61:48:
                    67:5d:18:38:61:ec:63:75:71:97:c2:c2:7b:9a:1d:
                    ca:f1:09:20:49:a1:77:f0:0d:17:dd:12:08:90:6a:
                    93:69:0c:55:83:ce:27:61:d1:d3:f6:ea:4a:cf:d7:
                    0d:5f:fe:84:f1:d3:65:7c:8b:20:a5:6e:2a:03:fb:
                    9f:ea:46:4c:14:35:65:67:d3:48:a8:8a:16:b2:a0:
                    fe:5a:51:53:08:32:a2:8e:ff:46:d1:27:12:a8:57:
                    fe:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:27:55:43:EC:DF:1E:8B:6C:C1:4F:D1:62:A8:73:86:DF:2D:DE:50
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AS45493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:70:3c:fa:50:1e:79:60:7a:88:db:ea:8d:a2:06:21:7f:2c:
         8b:14:42:0c:10:08:81:74:e4:1c:d8:71:18:71:6d:b6:0d:b9:
         35:b2:04:62:28:5b:59:b5:68:ba:54:b6:f3:63:02:62:6c:df:
         95:e2:0f:59:1a:2c:33:4e:24:2a:f9:a4:fb:7a:7d:d4:0c:a3:
         05:2c:e9:81:e3:be:02:56:7a:c9:94:f7:58:f0:9c:de:da:5e:
         75:be:27:ef:8c:b3:1e:9c:03:f8:e2:62:f0:e1:53:c2:44:98:
         f4:8e:4a:9f:05:95:c1:c7:71:80:cf:28:27:7a:ff:64:c9:45:
         6a:16:41:78:f4:69:fb:ff:52:1c:94:f0:21:32:e7:a6:55:ad:
         b3:e0:a4:0f:22:bf:ad:b3:fa:8c:ed:6b:89:6d:47:4c:ed:a1:
         74:30:bd:4d:fe:89:75:e5:44:83:32:11:d8:49:cb:54:69:a2:
         ff:44:f1:28:c5:51:25:8b:82:b5:f8:33:85:28:3e:f6:de:0a:
         2f:bc:96:c7:8f:d0:a0:6d:dc:4c:f8:18:16:ea:f7:33:a6:40:
         05:0c:a3:3e:f2:c7:ef:bd:5f:51:67:04:3f:7b:3b:63:cd:6f:
         ac:97:96:58:5f:1c:9c:eb:b4:3e:8b:89:fc:4e:91:42:13:db:
         2b:c0:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:26 2024 by rpki-client on console-fra.rpki-client.org