Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138352e302f32342d3234203d3e203234353334.roa
File:                     35382e3134372e3138352e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier:          Yk5CgCCvisbk0uLeUnXr6EVQjemgm+3OFkbZfT24bHA=
Subject key identifier:   54:54:8C:C0:CF:84:77:91:2D:41:C0:D9:87:81:6F:8B:0B:24:F0:72
Certificate issuer:       /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial:       432172EA3F61E7F75D99447C86E8DFF2A13E71D8
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138352e302f32342d3234203d3e203234353334.roa
Signing time:             Sat 19 Aug 2023 11:00:01 +0000
ROA not before:           Sat 19 Aug 2023 10:55:01 +0000
ROA not after:            Sat 17 Aug 2024 11:00:01 +0000
asID:                     24534
IP address blocks:        58.147.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
                          rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:21:72:ea:3f:61:e7:f7:5d:99:44:7c:86:e8:df:f2:a1:3e:71:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
        Validity
            Not Before: Aug 19 10:55:01 2023 GMT
            Not After : Aug 17 11:00:01 2024 GMT
        Subject: CN=54548CC0CF8477912D41C0D987816F8B0B24F072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:5e:e5:34:9d:ce:ad:77:75:bb:a6:e3:1f:
                    da:d0:76:ed:9b:8e:58:32:52:7d:6f:71:c0:5a:35:
                    16:6b:84:dc:7c:50:28:49:e0:68:50:74:62:8f:c1:
                    3b:76:dc:0e:86:f9:4a:89:da:91:4e:9b:5f:cc:00:
                    09:b9:48:01:a0:49:06:d6:ee:ac:3d:5f:b3:25:43:
                    ed:26:b4:a8:d0:14:4d:9e:b0:29:0c:42:94:b0:d9:
                    54:80:77:8a:86:b1:79:d9:37:bb:5f:08:c8:6b:2d:
                    f6:02:56:32:16:d9:6d:51:de:cc:58:ed:ef:0b:ee:
                    9f:9e:be:e6:cd:f4:f6:71:60:10:f4:a5:e6:0b:f6:
                    95:b3:73:04:79:8d:e6:f2:aa:47:c6:fb:70:c9:09:
                    8a:ff:ae:d0:c1:57:d7:d4:33:a5:ba:ae:b3:23:82:
                    fc:7e:a3:c0:40:ba:45:4e:e1:8d:81:43:82:c1:93:
                    e5:28:67:ae:1a:8a:20:73:72:3a:46:b8:37:57:4e:
                    17:ef:d4:96:bb:6a:c1:6b:5a:f0:ef:b6:75:8b:f3:
                    78:a9:68:50:fb:2d:bb:e2:a4:93:67:a2:26:31:a1:
                    8a:be:da:9e:2b:1c:7e:6d:f0:e9:43:cb:19:80:91:
                    2b:1d:ee:41:84:9f:41:40:eb:9f:90:07:b3:c0:94:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:54:8C:C0:CF:84:77:91:2D:41:C0:D9:87:81:6F:8B:0B:24:F0:72
            X509v3 Authority Key Identifier:
                keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3138352e302f32342d3234203d3e203234353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:52:1d:ab:ad:0f:0c:54:30:03:e3:43:62:8e:c1:75:a6:d3:
         65:3d:61:62:20:9d:e2:5d:79:b8:d4:3e:8d:3b:63:c4:87:43:
         2f:f8:44:57:45:84:06:57:ce:db:59:50:03:7c:13:94:0d:25:
         b0:d6:91:9b:c8:53:44:26:73:46:e7:8e:f3:dc:11:78:28:1f:
         7b:38:04:57:f4:8b:b4:7d:8c:21:03:53:3a:53:bd:6a:dc:7f:
         53:1e:63:b5:fc:e7:0f:4c:0c:b8:12:1e:76:f4:9c:b0:11:78:
         98:64:d4:a9:1e:39:83:4c:78:b9:ea:24:d5:bb:78:b6:46:e1:
         78:21:5d:f8:c6:15:18:89:c1:7e:95:21:df:46:b6:15:57:85:
         d0:bc:4d:84:e9:d7:7b:eb:d3:c1:db:66:ff:fc:44:96:84:97:
         d2:67:4c:1f:2a:b9:76:77:9d:9b:15:cd:65:f0:33:7a:32:7d:
         a7:64:ad:cf:a8:9c:96:f3:66:45:e1:4a:4b:27:67:b5:a2:e5:
         db:e3:e7:c9:0d:77:54:ba:63:79:df:57:c8:4f:b4:7e:f2:9c:
         c5:bb:bb:1a:d6:14:46:0f:a5:44:c8:c1:83:41:f2:7a:f2:5e:
         f3:58:8e:07:c4:ed:b9:4b:18:97:be:0a:3a:25:8c:7b:d0:ee:
         c1:6c:b6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 02:20:23 2024 by rpki-client on console-fra.rpki-client.org