Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa
File:                     323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa (raw, json)
Hash identifier:          Cr0y5ny1jQB3lqf5zIm0Ng6qxb4kAbbR31UEMJQnSXU=
Subject key identifier:   E1:0C:E8:3B:91:F2:86:A3:32:B5:6F:FD:24:B5:4D:8E:63:23:06:70
Certificate issuer:       /CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
Certificate serial:       796AC91C34D28C4BA4DCFBFCABDF693C854F1056
Authority key identifier: 6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa
Signing time:             Wed 09 Aug 2023 00:00:01 +0000
ROA not before:           Tue 08 Aug 2023 23:55:01 +0000
ROA not after:            Wed 07 Aug 2024 00:00:01 +0000
asID:                     38524
IP address blocks:        2401:de80:c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl
                          rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 12:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:6a:c9:1c:34:d2:8c:4b:a4:dc:fb:fc:ab:df:69:3c:85:4f:10:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B33A08D6452492D38FE5FC6560DF750CD283E9A
        Validity
            Not Before: Aug  8 23:55:01 2023 GMT
            Not After : Aug  7 00:00:01 2024 GMT
        Subject: CN=E10CE83B91F286A332B56FFD24B54D8E63230670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:22:f3:17:e3:1d:f9:a4:a9:c2:8a:06:df:
                    69:71:f3:1a:3d:bb:7c:46:94:02:c7:2f:27:ff:af:
                    b2:1f:11:9b:23:4d:bf:ba:be:4d:7c:c5:f0:27:c3:
                    1c:8d:fc:2e:a4:2f:5c:02:26:5f:ec:ab:30:dd:2c:
                    a1:52:f6:95:dd:29:78:e0:91:b1:59:ce:7f:9f:4f:
                    92:a6:02:ea:f9:58:72:c3:ab:d1:bf:0c:a9:25:29:
                    31:d7:f8:10:f7:b4:d8:a3:09:40:f1:7c:c7:fb:ba:
                    3b:15:1a:82:f6:36:fe:07:84:57:85:39:b2:95:46:
                    16:99:45:20:05:66:49:f0:71:4b:fb:2d:4c:fb:a8:
                    56:9d:63:18:b7:60:d4:22:95:18:67:83:9a:ca:ce:
                    0c:24:f2:a4:87:4e:87:26:e1:d3:54:57:44:d0:56:
                    5e:12:20:92:28:df:f9:d4:a4:67:27:2f:c0:21:83:
                    c6:1b:58:4f:f6:a3:a0:37:c7:33:58:1d:75:cf:14:
                    de:bd:54:0b:9f:a8:72:fc:2c:f3:7c:fc:f3:5b:86:
                    d9:68:7a:a1:b8:c2:1a:69:1a:ac:51:66:c5:c9:4e:
                    a8:f5:5b:90:f6:15:c5:57:5b:60:3c:88:49:c8:83:
                    18:b1:ce:d3:a1:be:5a:8c:ae:7a:44:39:e6:2f:9f:
                    bc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0C:E8:3B:91:F2:86:A3:32:B5:6F:FD:24:B5:4D:8E:63:23:06:70
            X509v3 Authority Key Identifier:
                keyid:6B:33:A0:8D:64:52:49:2D:38:FE:5F:C6:56:0D:F7:50:CD:28:3E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/6B33A08D6452492D38FE5FC6560DF750CD283E9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6B33A08D6452492D38FE5FC6560DF750CD283E9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ff969fc-39c7-44cd-8716-9ce4c6d5ac91/0/323430313a646538303a633a3a2f34382d3438203d3e203338353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:de80:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:34:4e:e1:d4:bf:c3:41:05:a0:05:e4:20:f3:28:cc:28:4d:
         a4:83:fd:52:bb:1f:c1:00:7f:56:9e:f1:74:76:12:37:40:d4:
         b5:79:32:a8:09:21:fc:0f:51:63:a3:a8:1b:5a:3c:b3:e8:cc:
         64:0a:d6:5c:18:1f:8c:b0:bd:89:22:83:31:51:a9:0c:31:50:
         7c:8c:5e:6e:fa:0b:27:d9:79:d9:89:17:83:65:c8:42:da:da:
         67:b3:5f:c8:68:bf:0d:ca:f4:a2:51:1d:aa:de:72:b8:d9:ca:
         92:4c:34:e1:05:fa:4c:63:7a:8c:04:38:3e:ab:07:3f:c1:d1:
         3e:99:d3:28:a7:6c:d7:46:62:ea:77:35:e2:4a:97:49:f2:2f:
         e0:a6:45:b4:27:86:86:87:33:d1:5e:1f:7e:8b:bd:4e:1a:9e:
         c0:98:b0:db:71:db:da:5d:58:85:67:06:8d:79:ff:99:f5:7a:
         65:a1:e6:6d:e7:7e:da:f3:2a:7e:32:e6:e8:d7:52:91:47:1c:
         75:59:37:4b:ed:5d:59:bb:62:e5:eb:80:06:f2:15:8b:6a:0c:
         8a:1e:bf:dd:7e:6b:28:62:f0:0a:2e:29:ae:2f:be:23:04:40:
         80:b9:23:dc:e4:84:93:45:e4:f5:28:c5:30:32:d1:61:97:be:
         28:65:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 10:27:09 2024 by rpki-client on console-ams.rpki-client.org