Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32332d3234203d3e203436303233.roa
File:                     3137352e3130362e382e302f32332d3234203d3e203436303233.roa (raw, json)
Hash identifier:          0W78QEYgt2qNQvfLVjzJT8NbEXFj2jT+sOumKp5AIYs=
Subject key identifier:   A7:77:88:3E:54:2C:B9:2F:3A:C2:32:3E:94:46:0A:7F:64:63:53:8C
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       6673549B4989DE66825BE9758D1C29DF281521AC
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32332d3234203d3e203436303233.roa
Signing time:             Tue 12 Nov 2024 15:04:37 +0000
ROA not before:           Tue 12 Nov 2024 14:59:37 +0000
ROA not after:            Tue 11 Nov 2025 15:04:37 +0000
asID:                     46023
IP address blocks:        175.106.8.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
                          rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:73:54:9b:49:89:de:66:82:5b:e9:75:8d:1c:29:df:28:15:21:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Nov 12 14:59:37 2024 GMT
            Not After : Nov 11 15:04:37 2025 GMT
        Subject: CN=A777883E542CB92F3AC2323E94460A7F6463538C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:b4:c8:4e:cd:da:77:ae:3d:28:af:60:40:
                    b1:9f:98:95:c5:18:c9:79:d9:18:e3:bc:a2:25:17:
                    98:65:fd:26:39:17:32:e8:0c:d3:0f:17:88:71:6a:
                    fe:b9:e0:49:94:67:8f:95:fd:d9:22:f1:5d:0f:96:
                    2b:b7:fe:72:e1:d1:a1:85:64:d4:5a:b0:87:47:ea:
                    00:cc:fa:5b:a2:ce:fd:fe:2e:f7:d2:7e:4b:30:62:
                    ac:23:f3:c1:e3:e9:3a:56:ff:0b:ac:88:1f:9f:f2:
                    05:da:fa:ec:61:9c:b6:e9:79:04:44:28:52:44:05:
                    17:47:b8:7c:8d:47:b4:8e:fa:5e:c8:57:7e:a5:02:
                    be:cd:d0:88:1c:4b:72:c5:26:64:d7:5a:fe:ab:4c:
                    31:f8:50:ca:ee:8e:92:a3:77:0b:a8:97:84:23:89:
                    d2:af:34:31:0c:f3:9f:25:2c:ee:3e:ae:93:1b:bd:
                    cb:0b:f9:07:e9:8a:47:eb:8a:06:37:e8:f4:43:b7:
                    7b:df:ab:72:8b:75:4b:9e:4c:6f:38:94:93:20:53:
                    18:c5:44:8a:81:08:75:74:74:ca:ff:f3:25:f7:dc:
                    c8:9a:d0:ed:92:0f:78:69:2a:f3:4f:d5:94:83:c3:
                    19:53:a6:48:f7:7f:a6:24:75:9c:93:88:45:e8:93:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:77:88:3E:54:2C:B9:2F:3A:C2:32:3E:94:46:0A:7F:64:63:53:8C
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32332d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:af:05:b1:4b:3a:3c:7a:31:d1:e8:bf:39:af:6f:5d:3b:24:
         82:20:15:d9:a8:89:42:8e:2d:81:f6:4d:1f:91:8b:9b:46:f8:
         d4:8a:4d:e4:27:dd:63:0e:4a:3a:ec:15:62:54:1f:6b:15:fe:
         5b:cf:d4:4c:51:54:f3:4f:c8:7a:d3:c2:76:22:51:23:f3:81:
         e8:7b:3d:83:f4:c6:a4:24:42:a6:30:94:2c:fd:7f:75:28:f5:
         f6:49:32:16:7b:8f:c9:3a:c4:75:01:c7:04:4c:9c:a0:ca:2a:
         5e:24:08:12:c6:2f:fe:2b:83:8d:26:0b:1f:04:fe:04:f6:2e:
         00:ca:c1:99:8d:0c:fd:63:05:e2:bc:c9:fc:07:18:3d:bd:81:
         ea:ff:ff:f9:e2:fd:45:76:05:5e:c8:b9:f8:2a:7a:43:26:55:
         bc:21:4d:d1:cd:02:6c:13:b1:80:16:be:fe:84:58:dc:60:e5:
         82:11:f7:48:60:14:38:8f:7d:96:4d:ce:11:73:5d:62:2b:4d:
         b7:dd:80:0f:71:d7:a5:00:e0:45:08:1e:b5:96:0f:3d:1a:b5:
         4d:3c:23:fb:19:b8:01:2e:bc:38:ac:b0:b3:7b:fc:63:40:91:
         86:2e:40:d3:46:cc:5a:6a:39:2b:d9:fb:57:cb:72:8e:2e:30:
         7c:2d:1c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org