Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa
File:                     323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa (raw, json)
Hash identifier:          OAIh9gK+pac8lAtPFCjKrcFgPierGjzjUHaEjKP5rL8=
Subject key identifier:   60:61:D9:24:89:43:05:D3:B6:3A:40:F0:26:41:4B:EF:D3:63:86:E2
Certificate issuer:       /CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
Certificate serial:       52FCCB6477823BF8369606CA7A8442C6D3151051
Authority key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa
Signing time:             Fri 17 Nov 2023 09:15:04 +0000
ROA not before:           Fri 17 Nov 2023 09:10:04 +0000
ROA not after:            Fri 15 Nov 2024 09:15:04 +0000
asID:                     149881
IP address blocks:        2001:df1:9ec0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl
                          rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 07:48:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fc:cb:64:77:82:3b:f8:36:96:06:ca:7a:84:42:c6:d3:15:10:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2
        Validity
            Not Before: Nov 17 09:10:04 2023 GMT
            Not After : Nov 15 09:15:04 2024 GMT
        Subject: CN=6061D924894305D3B63A40F026414BEFD36386E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5b:c8:87:57:ab:11:63:e9:8b:c0:f4:79:6d:
                    64:f9:b9:35:4c:ff:f9:3e:d0:8c:e4:d6:92:78:3d:
                    89:13:a4:cb:02:48:65:da:9c:02:94:e2:af:9d:fb:
                    e8:52:6e:be:42:3a:d6:ed:29:95:02:84:a2:83:c7:
                    35:c1:52:f7:52:fe:0d:d7:4e:e8:e6:99:7c:3b:0b:
                    fa:65:2d:b7:07:2c:58:d0:c1:41:ef:4a:08:6f:44:
                    89:4b:10:02:46:ee:77:58:b5:fd:76:2c:f3:30:83:
                    23:0e:fc:11:f9:15:90:89:a6:1d:b5:96:c7:07:18:
                    5d:dd:b7:01:1e:d5:c2:7f:47:c1:4a:01:9b:0f:52:
                    19:25:ba:44:a2:a9:24:15:ef:82:7d:d2:9e:8f:24:
                    73:2a:77:2b:ae:35:6f:ef:23:6f:35:68:2d:9e:ce:
                    2f:c2:de:f7:45:65:ea:1a:8a:e0:81:64:9b:5f:77:
                    cd:8a:c9:37:ed:a8:e5:4a:a9:29:09:a5:35:91:b2:
                    13:80:c8:50:80:e3:d2:54:ae:e9:99:35:87:f5:55:
                    54:76:85:83:c4:ff:0d:36:fd:33:6d:27:c5:12:6b:
                    c9:c2:98:77:7c:ad:a0:d0:10:47:59:38:58:e4:ae:
                    98:92:00:11:3f:97:a5:f1:d3:a3:d1:6f:e5:8a:61:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:61:D9:24:89:43:05:D3:B6:3A:40:F0:26:41:4B:EF:D3:63:86:E2
            X509v3 Authority Key Identifier:
                keyid:E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/323030313a6466313a396563303a3a2f34382d3438203d3e20313439383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:9ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:4d:26:ae:9e:34:34:ff:46:c6:07:2c:5d:de:0d:57:f1:
         4e:ca:00:0d:d9:4e:46:f4:3c:16:81:f2:e2:17:d9:a2:32:5c:
         42:28:00:36:1c:d6:d5:ff:46:50:4b:d4:f5:85:f1:a9:ae:b3:
         c9:8f:2e:ff:23:89:47:60:68:d3:8c:b0:cf:2c:a9:28:86:d4:
         69:59:a0:46:8d:85:34:4c:b6:1f:37:b5:44:a0:67:d4:e6:97:
         52:f8:fd:71:68:ce:b4:78:fe:5c:0d:d9:89:b7:a4:85:63:00:
         7b:d5:da:4e:47:00:9b:4c:4e:35:b8:ad:3c:16:f0:a5:fe:76:
         a2:b3:f3:6a:b0:89:2a:61:80:40:7b:8c:06:43:6c:e7:34:80:
         97:17:16:08:89:52:80:ff:47:59:67:72:98:76:60:5e:3c:c2:
         d2:fc:75:6f:e3:d8:33:ad:a5:ed:c7:5a:97:40:fa:34:04:f9:
         e9:30:44:a5:8c:89:bf:3f:db:0c:32:86:90:2c:90:7b:45:fa:
         11:0c:33:17:b2:48:83:2e:b6:da:f6:7c:03:3c:2c:03:95:81:
         88:95:ef:06:7c:e3:26:e9:db:71:25:75:27:66:c2:cb:6e:2d:
         3c:33:f1:3b:a7:ae:b0:0e:b8:8b:0b:7e:12:4f:56:fa:61:5f:
         00:86:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 02:54:54 2024 by rpki-client on console-fra.rpki-client.org