Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e20313338303839.roa
File:                     32372e3132342e38332e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          Nk9nfDWsxIJywmYhHNIEOyLCZi5H+xbwJBnaNxBmKiM=
Subject key identifier:   2F:43:9A:BF:92:CE:6B:26:BC:B8:4B:2D:A9:E3:AF:69:9E:06:02:9C
Certificate issuer:       /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial:       0ACEEDD4826336F9BE32385E8415250BD133BCC8
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e20313338303839.roa
Signing time:             Thu 08 Feb 2024 13:00:02 +0000
ROA not before:           Thu 08 Feb 2024 12:55:02 +0000
ROA not after:            Thu 06 Feb 2025 13:00:02 +0000
asID:                     138089
IP address blocks:        27.124.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
                          rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 00:40:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ce:ed:d4:82:63:36:f9:be:32:38:5e:84:15:25:0b:d1:33:bc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
        Validity
            Not Before: Feb  8 12:55:02 2024 GMT
            Not After : Feb  6 13:00:02 2025 GMT
        Subject: CN=2F439ABF92CE6B26BCB84B2DA9E3AF699E06029C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:f5:78:6f:32:12:f5:2b:61:a0:73:9b:fd:
                    5c:3b:f2:7a:18:06:1b:0f:d9:48:d2:7d:d8:8a:66:
                    25:e1:0b:41:c0:4d:d3:06:54:f2:24:e3:c0:e3:ae:
                    c7:55:b6:81:67:bd:30:55:04:a5:f3:df:2d:55:2e:
                    6e:b9:7f:73:c1:0c:0f:26:ab:78:3c:b5:4f:5c:b6:
                    c4:13:7d:57:02:57:30:2f:f5:97:97:4e:55:3d:1f:
                    3d:77:70:08:c3:22:c9:29:4a:bd:4d:0d:f0:87:84:
                    5b:5a:a8:e5:1d:38:e0:bd:0a:70:5a:96:5a:ba:f4:
                    41:e8:a0:9c:31:6d:cf:53:17:ad:bf:28:40:b5:dc:
                    f7:54:ff:61:dc:6d:2b:21:e3:8c:fd:29:6e:32:b2:
                    20:04:9a:84:e2:33:3c:0e:6e:bb:99:30:55:25:78:
                    28:ef:98:9e:de:6c:e6:c4:b8:1d:82:28:9b:38:3b:
                    11:f6:e5:d6:2d:bb:6a:e6:ae:97:f6:ec:16:51:af:
                    7a:a3:e7:a6:7a:a5:98:42:c5:26:a9:27:3e:43:fc:
                    dd:1c:12:46:91:1b:4d:82:62:ec:4a:d2:e1:35:cc:
                    0e:72:3c:c2:3b:8d:c6:de:0c:4c:54:9c:d2:41:5c:
                    c3:d5:32:0d:32:67:0d:b4:53:16:fb:85:00:40:1a:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:43:9A:BF:92:CE:6B:26:BC:B8:4B:2D:A9:E3:AF:69:9E:06:02:9C
            X509v3 Authority Key Identifier:
                keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38332e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.124.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:7b:67:3e:24:4f:81:1c:bf:14:9b:e8:f3:de:d5:45:6d:10:
         ad:66:ae:1c:47:37:06:67:73:1d:64:7c:30:21:71:43:42:a4:
         5a:a7:2b:bd:e4:1f:ee:36:c7:b5:73:44:e2:c2:7a:d7:f0:66:
         70:0c:6a:2f:37:c0:23:92:d7:8b:41:66:00:ed:a0:8b:bd:ce:
         1b:b2:d4:51:a9:a8:5e:46:8f:9d:04:ba:17:0b:ca:b2:79:24:
         d2:5c:c8:77:cf:82:98:04:8a:34:5c:eb:3a:d4:a9:5c:95:16:
         f2:f2:f1:da:b1:bb:27:47:8d:4d:8e:b8:9a:b5:81:11:b0:53:
         95:bc:1f:3e:87:d1:db:e0:39:9c:5e:9d:ad:e9:08:7c:f6:00:
         f8:ca:ac:bf:cf:fb:01:09:7d:58:8b:fc:f0:f4:8a:ac:ec:c1:
         84:91:2c:1f:48:2c:3d:30:96:51:5e:3b:69:51:6c:43:a9:bf:
         25:bd:50:01:85:e3:1a:14:d9:a3:56:90:81:d6:7c:72:4c:49:
         bd:35:51:18:2a:d1:20:f9:6a:14:63:66:d0:66:68:b4:c8:e8:
         cd:48:87:96:fe:c7:85:fd:24:0b:ab:ff:08:cc:dd:a2:5c:89:
         e5:64:f9:a6:d4:49:1d:5d:27:05:b7:cf:69:82:04:79:5d:1c:
         29:b2:e4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:39:53 2024 by rpki-client on console-fra.rpki-client.org