Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32322d3234203d3e203436303233.roa
File:                     3137352e3130362e382e302f32322d3234203d3e203436303233.roa (raw, json)
Hash identifier:          +UZ4X6o1F6EL5roKaCeOhxG1kawlmtHDGSCS3FAi6TM=
Subject key identifier:   BB:7E:AE:1D:CF:3B:48:35:B5:DD:5D:9C:B7:31:55:81:F0:8B:73:1D
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       6CA5393364321B3BE20EC47A312ECF6F65424783
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32322d3234203d3e203436303233.roa
Signing time:             Tue 12 Nov 2024 15:04:16 +0000
ROA not before:           Tue 12 Nov 2024 14:59:16 +0000
ROA not after:            Tue 11 Nov 2025 15:04:16 +0000
asID:                     46023
IP address blocks:        175.106.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
                          rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a5:39:33:64:32:1b:3b:e2:0e:c4:7a:31:2e:cf:6f:65:42:47:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Nov 12 14:59:16 2024 GMT
            Not After : Nov 11 15:04:16 2025 GMT
        Subject: CN=BB7EAE1DCF3B4835B5DD5D9CB7315581F08B731D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8e:3f:8f:bf:61:db:d0:34:08:78:6e:1c:e2:
                    54:ae:b2:a0:b5:b1:48:0a:9f:f0:f2:4f:b3:82:2b:
                    0a:d8:a1:e5:f5:59:04:d8:8c:8a:d3:81:a4:ee:78:
                    ff:fe:fe:fc:16:f4:1b:bb:01:f9:2a:22:90:0c:3c:
                    30:c5:82:9f:dc:8d:83:32:89:e0:2d:09:fb:88:61:
                    38:f4:1e:0c:53:2e:d5:ba:b6:17:79:cb:7a:25:ab:
                    a4:75:2a:19:f1:f6:26:50:99:d2:6f:8c:74:0b:74:
                    6b:17:94:b4:d3:ad:c5:cb:3a:38:fa:28:40:0b:a3:
                    f9:9f:59:c0:90:b0:89:a8:d5:29:49:b4:7d:c3:70:
                    39:55:d8:cb:0b:99:f8:cc:c0:5a:52:9a:f7:75:39:
                    ba:fe:60:8a:65:15:71:3a:d6:4d:92:c8:cf:37:1a:
                    9e:14:85:d2:79:03:e3:fb:ab:30:72:d6:6a:1e:48:
                    5e:77:82:4b:5b:95:0f:77:3d:8e:21:a4:1d:2b:7e:
                    a3:a7:9a:13:7f:66:11:c8:fb:80:8a:8a:1a:47:c8:
                    55:5d:b9:f2:29:80:5c:c6:74:12:d7:bd:73:c6:ce:
                    91:41:c2:d5:49:ca:d8:50:d6:45:70:8f:22:a9:86:
                    5b:3d:06:75:13:f2:8c:f5:b6:6f:fc:4b:85:f7:2c:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:AE:1D:CF:3B:48:35:B5:DD:5D:9C:B7:31:55:81:F0:8B:73:1D
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32322d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:44:b4:1b:15:7e:51:5d:56:16:ea:8c:7f:f6:4b:66:d1:5e:
         bf:58:0a:5f:39:41:a9:f5:20:5e:e7:bd:64:fd:74:47:98:50:
         7c:46:04:89:29:fd:d0:c9:aa:77:d7:63:96:1d:18:7b:cc:1a:
         c1:3e:e4:77:e0:a7:45:7b:8b:ca:2a:7a:49:c0:34:51:92:02:
         29:ed:2e:f2:8d:f2:eb:e3:a1:17:98:e2:5b:e8:0f:98:4a:18:
         d8:8c:0a:50:b6:e9:6a:ef:f9:ce:64:b2:87:24:4b:d1:24:53:
         af:fa:e2:d3:ff:08:8a:8f:51:2b:00:35:76:9e:f5:1b:51:73:
         83:aa:64:3f:a1:a0:98:c2:8d:6c:46:f3:aa:9d:c6:eb:fa:1c:
         4a:73:ed:af:16:89:7f:3d:9a:a0:5f:8a:9c:66:cb:da:a2:8b:
         08:14:d1:cc:f5:2b:23:73:fc:aa:53:9b:c0:bc:28:c1:da:fb:
         79:19:18:c5:cc:62:a4:b7:7f:19:8e:5f:2d:e4:90:f4:6e:40:
         6e:6e:eb:e1:3e:db:d9:f5:98:8e:71:3a:2b:17:9c:95:53:43:
         3d:5f:fb:a4:c5:68:cf:d6:3e:62:b0:e6:39:aa:fd:46:3e:22:
         98:18:63:3f:96:79:03:76:39:f6:d2:1d:d0:1d:b0:b2:a1:78:
         5e:ec:fb:28
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbKU5M2QyGzviDsR6MS7Pb2VCR4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3
NjRBNDY5NTAeFw0yNDExMTIxNDU5MTZaFw0yNTExMTExNTA0MTZaMDMxMTAvBgNV
BAMTKEJCN0VBRTFEQ0YzQjQ4MzVCNURENUQ5Q0I3MzE1NTgxRjA4QjczMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjj+Pv2Hb0DQIeG4c4lSusqC1
sUgKn/DyT7OCKwrYoeX1WQTYjIrTgaTueP/+/vwW9Bu7AfkqIpAMPDDFgp/cjYMy
ieAtCfuIYTj0HgxTLtW6thd5y3olq6R1Khnx9iZQmdJvjHQLdGsXlLTTrcXLOjj6
KEALo/mfWcCQsImo1SlJtH3DcDlV2MsLmfjMwFpSmvd1Obr+YIplFXE61k2SyM83
Gp4UhdJ5A+P7qzBy1moeSF53gktblQ93PY4hpB0rfqOnmhN/ZhHI+4CKihpHyFVd
ufIpgFzGdBLXvXPGzpFBwtVJythQ1kVwjyKphls9BnUT8oz1tm/8S4X3LAcBAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUu36uHc87SDW13V2ctzFVgfCLcx0wHwYDVR0j
BBgwFoAUffZgLBE93ukiqgGcdO9Cg3ZKRpUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMC83REY2NjAyQzEx
M0RERUU5MjJBQTAxOUM3NEVGNDI4Mzc2NEE0Njk1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0RGNjYwMkMxMTNEREVFOTIyQUEwMTlDNzRFRjQyODM3NjRB
NDY5NS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIwLWUxN2EtNDIxYi05
NjU1LTAzMjQ1YTAxYWVmOC8wLzMxMzczNTJlMzEzMDM2MmUzODJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM0MzYzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKvaggwDQYJKoZIhvcN
AQELBQADggEBAINEtBsVflFdVhbqjH/2S2bRXr9YCl85Qan1IF7nvWT9dEeYUHxG
BIkp/dDJqnfXY5YdGHvMGsE+5Hfgp0V7i8oqeknANFGSAintLvKN8uvjoReY4lvo
D5hKGNiMClC26Wrv+c5ksockS9EkU6/64tP/CIqPUSsANXae9RtRc4OqZD+hoJjC
jWxG86qdxuv6HEpz7a8WiX89mqBfipxmy9qiiwgU0cz1KyNz/KpTm8C8KMHa+3kZ
GMXMYqS3fxmOXy3kkPRuQG5u6+E+29n1mI5xOisXnJVTQz1f+6TFaM/WPmKw5jmq
/UY+IpgYYz+WeQN2OfbSHdAdsLKheF7s+yg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:01 2024 by rpki-client on console-fra.rpki-client.org