Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/34352e36342e3130302e302f32322d3234203d3e203435373836.roa
File:                     34352e36342e3130302e302f32322d3234203d3e203435373836.roa (raw, json)
Hash identifier:          8OTk2fEdLcSoD9zh1rudeXM7WMcvxjF/J2dkVN6+H1Y=
Subject key identifier:   5F:DE:23:C7:FA:EA:C2:6A:7D:0F:AE:C6:80:B6:10:02:12:4A:7F:AA
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       4644031C71D9013FCB6FCB07649D9A57707CA319
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/34352e36342e3130302e302f32322d3234203d3e203435373836.roa
Signing time:             Thu 21 Sep 2023 08:01:41 +0000
ROA not before:           Thu 21 Sep 2023 07:56:41 +0000
ROA not after:            Thu 19 Sep 2024 08:01:41 +0000
asID:                     45786
IP address blocks:        45.64.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 May 2024 15:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:44:03:1c:71:d9:01:3f:cb:6f:cb:07:64:9d:9a:57:70:7c:a3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Sep 21 07:56:41 2023 GMT
            Not After : Sep 19 08:01:41 2024 GMT
        Subject: CN=5FDE23C7FAEAC26A7D0FAEC680B61002124A7FAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e6:0a:d5:0f:7d:aa:6d:e2:04:3f:02:25:3c:
                    5d:4f:c8:6c:ed:1b:c1:79:6e:8e:b8:c7:d2:58:e5:
                    a9:c6:e3:2c:0c:c9:fa:ce:51:de:8a:8e:c3:fe:0f:
                    db:5a:65:1a:00:cf:50:70:01:85:69:97:fe:a6:6e:
                    4f:fd:02:cb:e7:8e:11:5b:17:3a:0a:c6:be:af:76:
                    f0:5b:51:d5:a7:28:35:c5:7a:87:c3:c1:e1:c3:7b:
                    fe:8a:e9:a1:50:ca:03:e2:16:c2:bf:f8:6c:61:f1:
                    07:d8:ec:40:3c:e3:f8:0d:0a:97:c4:3b:1e:9a:df:
                    ee:cc:8b:13:ac:24:cd:09:1c:9c:99:c4:46:4b:eb:
                    fe:4b:67:f4:1e:43:cb:f8:ce:5a:fb:2d:d7:9c:11:
                    04:f5:a8:e9:8e:0b:b6:39:8b:40:51:0d:d9:1b:af:
                    ee:24:81:e6:ab:81:27:f8:1e:a4:56:c2:2f:37:33:
                    be:08:3f:10:30:08:4b:24:a1:56:ae:10:14:ef:09:
                    ce:e3:1f:10:7a:35:21:9a:f6:6e:e6:98:c5:79:10:
                    9e:55:3c:f4:78:57:13:9a:32:9e:3e:60:f8:8b:e1:
                    2f:e8:0e:ac:ff:56:ca:8d:01:d7:d7:d3:83:59:bb:
                    de:2e:52:1a:c8:61:26:f8:64:55:ad:ef:69:94:2e:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DE:23:C7:FA:EA:C2:6A:7D:0F:AE:C6:80:B6:10:02:12:4A:7F:AA
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/34352e36342e3130302e302f32322d3234203d3e203435373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.64.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:c7:ed:b2:ef:fc:e3:9a:fe:dd:b0:6c:28:fd:3d:b2:ca:39:
         c5:96:13:f6:f3:35:ad:21:55:74:1c:65:59:b6:2b:dc:de:57:
         06:62:1d:7e:0c:ce:de:1b:88:1e:0e:03:ec:a0:52:f0:28:d4:
         68:32:f5:f2:ee:f6:d8:02:21:6d:c7:a2:b5:c6:f0:78:5e:a8:
         4c:b1:55:a4:d2:6d:ce:a2:36:a3:c8:d8:2e:a0:f5:1e:5b:b2:
         c3:3f:d0:6f:fc:e7:2c:29:91:e9:92:1d:bd:2a:da:de:3b:24:
         d2:d0:5c:21:d0:fd:43:19:14:38:00:ff:ce:a3:61:5d:64:ed:
         75:ba:b1:5f:11:c1:56:7b:51:4d:30:30:54:f6:f7:77:5c:c4:
         9d:ee:16:4a:18:95:ad:76:e1:7f:dd:4c:65:30:e6:42:38:ae:
         24:af:38:ff:b9:6c:09:74:d8:61:28:a9:78:7f:c4:8a:b2:8f:
         31:4e:06:56:c9:54:1f:da:af:19:91:2f:87:a4:eb:bd:ff:e3:
         80:f1:bc:4b:ed:5a:21:9f:87:c6:96:ca:76:f1:6c:e4:6c:4e:
         28:c5:2c:1e:3d:a7:eb:be:39:c8:1d:65:42:0f:92:7f:0d:14:
         08:b0:bb:8f:24:fd:1f:a5:c7:4e:c3:5f:ab:e2:b0:2f:bf:ff:
         14:30:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 16:58:50 2024 by rpki-client on console-fra.rpki-client.org