Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32342d3234203d3e203436303233.roa
File:                     3137352e3130362e382e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          bvgWi5KwAbxj4+qnsZngX5dz87jfKBXVEq0UZmnF738=
Subject key identifier:   DB:59:F1:1B:EC:86:6C:2E:38:AE:EA:B2:0A:6A:EE:C7:C0:05:CE:E4
Certificate issuer:       /CN=7DF6602C113DDEE922AA019C74EF4283764A4695
Certificate serial:       7D26D7C4E3FDA20290A9069B21212815DD097FF7
Authority key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32342d3234203d3e203436303233.roa
Signing time:             Mon 12 Aug 2024 15:25:26 +0000
ROA not before:           Mon 12 Aug 2024 15:20:26 +0000
ROA not after:            Mon 11 Aug 2025 15:25:26 +0000
asID:                     46023
IP address blocks:        175.106.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl
                          rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:26:d7:c4:e3:fd:a2:02:90:a9:06:9b:21:21:28:15:dd:09:7f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DF6602C113DDEE922AA019C74EF4283764A4695
        Validity
            Not Before: Aug 12 15:20:26 2024 GMT
            Not After : Aug 11 15:25:26 2025 GMT
        Subject: CN=DB59F11BEC866C2E38AEEAB20A6AEEC7C005CEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:5a:fd:22:c3:eb:17:40:68:9a:aa:c3:76:
                    73:1e:2a:50:1c:ea:1b:fb:28:40:4d:cf:fa:77:be:
                    d7:d0:0c:70:5b:7b:c5:af:4f:5b:c9:32:68:a8:01:
                    85:1c:d1:79:94:09:68:98:ba:6d:38:9e:67:31:ff:
                    54:6d:3e:8c:b2:e3:6e:cb:7c:8d:b6:17:c6:cb:d5:
                    94:f4:7a:b3:01:6d:ec:ee:8d:f5:4c:b5:19:9b:5a:
                    e9:b8:2a:45:07:22:3c:6e:ad:10:20:ec:d4:12:af:
                    9c:4c:f0:ac:4a:47:af:90:1e:6a:78:09:e5:b3:5e:
                    3b:35:fd:20:40:a2:c2:c5:b6:af:5a:e7:d6:8c:fb:
                    2a:a5:47:26:18:5f:e9:9d:71:df:46:3a:68:0c:41:
                    bb:a8:8c:45:c2:39:98:9d:eb:72:6c:a9:be:e0:16:
                    ac:dc:72:4c:19:f3:7b:54:b1:1e:a5:13:85:b9:dc:
                    0a:e9:13:df:04:5c:17:d1:a8:79:7c:bd:0a:05:fd:
                    d5:e6:55:f5:b6:0d:c7:75:13:50:c6:4c:eb:18:72:
                    be:c8:3a:a4:78:0e:9f:97:77:00:a4:89:b8:41:6d:
                    cb:80:0d:0d:a9:cb:30:35:05:c7:38:2d:92:90:14:
                    b4:b9:3b:d3:7f:a2:ec:c3:e6:07:d4:c3:da:b0:d0:
                    46:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:59:F1:1B:EC:86:6C:2E:38:AE:EA:B2:0A:6A:EE:C7:C0:05:CE:E4
            X509v3 Authority Key Identifier:
                keyid:7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/3137352e3130362e382e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.106.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:c1:26:c9:78:1d:5e:b0:f8:78:bb:b3:a7:fa:4a:da:63:b9:
         76:4f:36:e8:a6:ce:ea:6e:e9:c8:1f:ec:ae:7c:03:3f:e0:60:
         6d:d8:31:94:74:16:b4:7e:50:e7:03:7e:f6:c0:4c:86:9e:52:
         db:8b:66:95:89:cb:91:da:14:75:7a:e8:1d:c0:f0:dc:8d:da:
         9e:88:fc:7d:73:4b:d6:91:aa:8c:4d:18:a5:6f:72:ba:d4:a8:
         49:93:47:aa:c7:01:d2:ac:12:51:8b:37:ee:ff:ef:c1:72:88:
         c5:54:94:33:af:62:05:a2:a1:56:ba:a3:2b:2b:5f:7b:b7:d1:
         fc:17:bb:8b:89:50:5c:44:53:3b:c7:38:e5:9b:70:77:fa:36:
         b6:4a:42:4c:ea:04:45:bb:5d:2f:89:f6:99:96:91:b4:2d:d8:
         d9:33:fc:0e:a6:34:84:57:de:b4:48:0a:9d:4b:26:90:bc:b4:
         be:30:0c:29:67:67:16:af:24:7b:e5:f2:c2:97:c5:0b:41:bd:
         de:4e:68:dd:5e:c7:bf:23:b2:a3:af:44:a5:2c:a6:02:f2:0f:
         2f:f7:11:ec:5a:4b:8c:a2:74:4d:f6:2a:49:41:96:06:7d:e4:
         d7:6a:97:a0:61:56:6c:0d:3b:23:fb:0a:5d:b7:0d:e4:53:1a:
         0d:e8:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org