Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3139302e302f32342d3234203d3e203234353334.roa
File:                     35382e3134372e3139302e302f32342d3234203d3e203234353334.roa (raw, json)
Hash identifier:          lWUyBM4uQV65NPE7VrQpjexhjz0yEXoDhnDWSGaVDI0=
Subject key identifier:   EE:B8:A6:F7:2E:AB:85:29:8E:41:45:74:FB:4B:03:90:04:E5:15:9F
Certificate issuer:       /CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
Certificate serial:       2748645120ADF371E1978CF84D81CA3B54108B58
Authority key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3139302e302f32342d3234203d3e203234353334.roa
Signing time:             Sat 19 Aug 2023 12:00:00 +0000
ROA not before:           Sat 19 Aug 2023 11:55:00 +0000
ROA not after:            Sat 17 Aug 2024 12:00:00 +0000
asID:                     24534
IP address blocks:        58.147.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl
                          rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 23:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:48:64:51:20:ad:f3:71:e1:97:8c:f8:4d:81:ca:3b:54:10:8b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7
        Validity
            Not Before: Aug 19 11:55:00 2023 GMT
            Not After : Aug 17 12:00:00 2024 GMT
        Subject: CN=EEB8A6F72EAB85298E414574FB4B039004E5159F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:2b:47:3f:7a:77:be:86:d0:ff:9f:68:7b:
                    bf:85:8d:bc:de:5b:92:d8:6b:ff:2f:23:91:41:00:
                    80:05:bb:ef:b4:a5:33:4c:09:f6:d2:69:30:cc:d0:
                    2b:4f:1d:77:b7:53:44:05:f3:d9:f4:e1:59:40:20:
                    65:30:b3:e2:61:62:28:66:5f:75:44:1c:a4:75:d7:
                    c5:1b:78:ce:b7:16:16:1b:26:35:98:0c:ae:2f:50:
                    ad:07:2f:86:04:a9:6a:01:e7:4b:41:a5:3e:11:90:
                    82:16:6b:04:5d:ea:57:c3:aa:87:77:33:40:3b:2e:
                    bd:bf:04:e5:45:90:f8:6e:3b:57:f0:77:62:87:af:
                    bd:fd:0a:71:b1:c7:14:17:fc:db:32:ac:7d:52:44:
                    ad:4d:15:f1:7a:a7:16:b3:32:ea:e0:13:3c:fe:02:
                    ad:9b:03:78:2f:73:bd:19:60:ee:33:a9:2c:cc:4a:
                    16:6f:19:c7:f3:11:6a:a9:63:66:b5:cc:db:78:94:
                    f1:44:8a:10:52:bd:2a:71:7b:7b:51:a1:07:e4:22:
                    85:c2:ea:2f:50:f9:94:6a:98:e7:94:9d:61:5a:64:
                    a0:73:75:19:ae:66:58:eb:fc:0f:45:fe:41:89:95:
                    06:c9:e5:99:35:29:4d:03:ad:e8:99:b4:c1:4e:99:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B8:A6:F7:2E:AB:85:29:8E:41:45:74:FB:4B:03:90:04:E5:15:9F
            X509v3 Authority Key Identifier:
                keyid:DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/35382e3134372e3139302e302f32342d3234203d3e203234353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.147.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b3:ca:11:a5:75:7c:e9:13:b2:21:49:f7:bc:17:37:6d:ab:
         99:6c:1f:6f:84:d1:88:cb:6e:b2:e2:41:2c:41:a8:f0:51:4f:
         c9:86:4b:51:59:1f:6c:35:09:bf:7f:c3:76:60:d6:57:04:b6:
         d6:7a:44:1f:8c:8b:4e:f8:c1:81:11:67:0a:46:d0:26:5e:0a:
         a4:96:4b:d5:d9:80:c9:12:cd:8a:85:6e:a6:0a:b5:5c:ed:8c:
         fc:d9:07:b7:4d:8c:1d:d6:fa:10:72:c7:78:76:5b:e3:8b:d3:
         c4:7e:9c:78:2b:72:d5:dc:7f:21:b2:ed:13:4e:be:6a:f0:64:
         81:fe:77:e5:af:8b:77:54:1e:46:22:cb:eb:db:04:e9:fc:ff:
         cd:60:bc:4f:56:34:d7:a2:42:1a:35:ba:63:23:46:a1:bf:b8:
         d1:93:44:84:1d:e9:cf:b1:20:db:f7:57:ee:5f:ff:30:9e:69:
         8b:d2:9a:dc:04:4d:68:b9:6a:6f:7e:b2:cb:fe:00:b6:57:06:
         e2:34:d1:c2:9c:12:57:fc:d6:6e:9d:ac:68:f8:b5:71:8e:8f:
         bf:c8:c3:85:78:89:b3:e4:c0:e0:25:3a:87:b4:f7:b8:8c:ea:
         45:52:48:a6:ab:c1:f1:67:63:6f:da:7f:dc:bc:85:73:a7:09:
         0a:cc:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:52:40 2024 by rpki-client on console-fra.rpki-client.org