Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3139302e302f32342d3234203d3e203436303139.roa
File:                     3137352e34352e3139302e302f32342d3234203d3e203436303139.roa (raw, json)
Hash identifier:          VryRGELOsI57z/74R2z9aU2AAP57l/np5ZZyLcc97eI=
Subject key identifier:   F7:6D:E3:6D:07:AC:F8:12:EC:A5:E0:D2:6E:3A:29:64:8B:3E:8C:8D
Certificate issuer:       /CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
Certificate serial:       2074CDBAD8B07D9387971DBF95DB72C457E6D338
Authority key identifier: 9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3139302e302f32342d3234203d3e203436303139.roa
Signing time:             Mon 01 Jul 2024 01:02:22 +0000
ROA not before:           Mon 01 Jul 2024 00:57:22 +0000
ROA not after:            Mon 30 Jun 2025 01:02:22 +0000
asID:                     46019
IP address blocks:        175.45.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl
                          rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:74:cd:ba:d8:b0:7d:93:87:97:1d:bf:95:db:72:c4:57:e6:d3:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5
        Validity
            Not Before: Jul  1 00:57:22 2024 GMT
            Not After : Jun 30 01:02:22 2025 GMT
        Subject: CN=F76DE36D07ACF812ECA5E0D26E3A29648B3E8C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:f4:e2:08:18:27:93:ec:93:66:23:84:20:
                    2f:a3:7a:f1:8f:8e:47:88:17:28:8a:86:69:54:86:
                    b5:02:78:69:80:e8:57:ec:43:54:95:1e:73:bb:a7:
                    50:d8:af:2b:b2:f0:d3:21:fb:1b:f2:45:8d:ed:00:
                    9f:5c:69:44:2e:b1:2c:7f:f2:3b:b9:83:c5:ca:ca:
                    1f:f4:1b:d5:bd:6f:93:a0:9a:04:89:ed:e3:30:0e:
                    0d:4a:46:2c:8e:71:da:8a:2d:97:74:be:7f:a9:43:
                    9f:75:7c:e2:6a:7d:c8:88:70:34:65:6e:9c:d0:db:
                    64:05:3f:07:8a:62:60:e7:c8:eb:94:7b:ac:d1:2a:
                    f7:b5:88:a2:f0:ff:e5:5a:63:c5:78:09:f4:de:af:
                    05:56:7b:8d:a8:1c:a7:34:f2:b8:0d:2b:a7:db:5d:
                    c9:8d:c7:d1:3b:c1:00:8d:a2:08:46:3e:75:3a:e6:
                    c8:c9:92:3c:a5:e8:ac:5b:ed:8e:30:f8:69:6c:fa:
                    ca:0f:e0:b4:2e:b5:df:0c:1f:1b:7a:02:9d:b1:dd:
                    97:d3:1f:0c:4a:c2:34:e1:63:ca:83:49:9e:8a:6b:
                    c4:2c:e7:3b:1b:8c:0c:36:f1:3c:24:ee:32:1f:b7:
                    a3:b6:df:28:90:a5:c2:ba:38:1a:cd:7d:d3:80:04:
                    7a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6D:E3:6D:07:AC:F8:12:EC:A5:E0:D2:6E:3A:29:64:8B:3E:8C:8D
            X509v3 Authority Key Identifier:
                keyid:9F:56:EC:50:DA:14:D1:3D:14:9F:51:45:D6:2A:FC:5A:3F:0B:70:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F56EC50DA14D13D149F5145D62AFC5A3F0B70B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bf71c91-1624-4fc0-8c63-2efafd46fbc1/0/3137352e34352e3139302e302f32342d3234203d3e203436303139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.45.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:aa:65:e9:32:68:07:8e:5f:61:75:65:2d:e4:4e:13:7d:
         40:01:81:d2:41:36:22:c5:23:b5:ef:76:c3:74:a7:9a:16:fa:
         af:7f:c0:e1:02:e7:a6:b4:4d:60:db:44:c5:ad:95:68:31:e3:
         93:f4:5e:60:16:84:96:30:5e:25:23:e6:db:e3:91:07:fa:ec:
         8f:3d:40:e1:a8:00:df:5f:c0:a3:19:e4:51:84:22:a2:b2:0c:
         16:1c:82:e6:79:9c:21:43:98:8f:7a:14:90:f4:4a:c9:ae:3c:
         37:76:1d:9b:7c:b3:da:35:64:97:fa:42:ef:62:db:51:0e:e9:
         8d:6c:1a:4d:53:28:b8:4a:79:38:48:5f:56:ec:c3:2f:e4:5f:
         13:de:f5:f3:6f:87:94:aa:a6:f1:49:2a:7f:d9:5d:80:3d:a9:
         1a:70:58:27:56:15:81:88:42:15:9e:f5:b1:1a:3f:4a:8a:03:
         b0:90:5a:27:c2:58:a2:db:5a:1f:eb:08:2a:20:8f:64:24:da:
         1c:69:1a:36:c2:b4:8c:db:04:81:92:56:56:35:98:81:91:46:
         d1:fe:82:73:36:2e:7e:4f:21:15:a7:cf:01:31:bd:a0:52:d2:
         18:c0:85:c0:b1:74:77:8f:1d:98:8f:43:9a:a3:93:cb:22:bf:
         53:80:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org