Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138352e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3138352e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          VunTC57fyUgPc9mYFkKXldo1vLVNqsaWzWL+TllcbWs=
Subject key identifier:   6F:CB:5D:50:5E:5A:8E:47:CE:35:85:A3:12:27:CF:4E:47:D0:69:8B
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       4FDB83CE8800EBE62A549E5C5CDBFE97406CD756
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138352e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 01 Jul 2024 01:02:23 +0000
ROA not before:           Mon 01 Jul 2024 00:57:23 +0000
ROA not after:            Mon 30 Jun 2025 01:02:23 +0000
asID:                     46019
IP address blocks:        175.45.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:db:83:ce:88:00:eb:e6:2a:54:9e:5c:5c:db:fe:97:40:6c:d7:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jul  1 00:57:23 2024 GMT
            Not After : Jun 30 01:02:23 2025 GMT
        Subject: CN=6FCB5D505E5A8E47CE3585A31227CF4E47D0698B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:70:54:1a:e0:81:09:9e:77:5d:34:ea:6e:
                    3e:58:bb:4c:05:8f:04:b7:7e:c0:94:eb:6e:36:1b:
                    9c:f7:21:af:5e:23:4e:0c:49:a1:93:fd:cf:23:87:
                    12:03:42:39:75:96:47:c8:5f:52:0c:1b:06:d4:f3:
                    bd:65:67:c3:35:52:f1:80:f8:59:a0:dc:00:28:9e:
                    dc:ba:da:3d:fb:e6:a0:bc:e5:8c:6c:6b:28:3a:e2:
                    29:39:1f:f5:8a:d2:21:17:c8:b2:e1:ee:28:6c:1a:
                    cc:35:28:8b:44:06:80:06:e3:b3:05:70:d8:86:5c:
                    c9:c6:c4:dd:ff:be:5b:73:1a:d2:5f:5d:fc:49:e0:
                    a4:77:22:7e:0f:68:c0:01:4c:47:d9:5f:92:1d:27:
                    f1:c8:8e:e7:2d:27:93:9f:97:7a:26:6b:61:7f:6f:
                    b5:cb:c2:06:93:0e:b8:a5:35:1e:43:b6:a4:27:50:
                    d1:53:b0:3f:18:98:5c:b5:25:0c:9d:df:2a:31:f0:
                    56:df:02:1b:50:e7:0b:88:79:6a:ac:fa:95:b8:e1:
                    a2:74:43:b1:fe:af:5d:c2:a1:a2:be:55:45:e4:00:
                    c4:80:56:9d:3a:45:25:41:31:b2:66:92:3a:bf:27:
                    fd:ee:7a:ca:ca:2a:66:6f:0a:a9:f1:11:65:c7:00:
                    52:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CB:5D:50:5E:5A:8E:47:CE:35:85:A3:12:27:CF:4E:47:D0:69:8B
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3138352e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:67:97:98:f6:71:4d:01:3e:b7:5b:04:53:d8:cf:37:24:60:
         bd:ba:88:0d:f5:e9:57:1d:8c:9e:c4:1c:5a:d8:4b:3c:0d:ec:
         57:ce:a7:4c:30:70:4d:46:db:05:7b:ba:b3:fc:6c:91:16:6d:
         6f:a1:a0:3e:61:48:8e:59:b6:94:94:b2:64:5a:91:cf:d5:46:
         be:26:b5:21:94:59:1a:30:dd:fe:66:22:c3:16:fd:7c:52:b0:
         71:00:ab:a8:34:ff:e8:f0:15:ec:92:ae:af:89:dd:4e:9d:ce:
         d7:26:e1:7a:3e:08:8c:32:0e:9f:14:77:06:3e:0c:44:bb:ca:
         13:8c:ee:18:a4:c6:f0:d6:bb:29:ef:68:de:86:ef:17:b5:b6:
         15:fe:29:43:17:99:8c:9a:23:ec:c0:69:03:68:6c:2c:be:47:
         fe:62:10:75:03:4e:1a:19:35:5d:dd:68:18:54:86:7a:a5:28:
         e9:af:b0:34:d5:21:1e:75:4c:be:2f:c8:39:10:22:01:39:d5:
         c1:94:61:74:3b:4c:a5:21:09:f1:7b:91:59:da:1a:4b:f8:64:
         1a:93:f8:ed:a5:87:53:d9:ed:63:9d:05:9f:2e:1f:57:7d:13:
         03:20:2b:f3:5f:45:07:d3:2c:5c:c5:33:d6:8b:a5:a9:cc:8f:
         20:5d:63:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org