Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa
File:                     3137352e3135382e33322e302f32322d3234203d3e2034373837.roa (raw, json)
Hash identifier:          uZQkOk+CpUIXDZqH2BmXwSFTNgck/jA2xelBBArMP0k=
Subject key identifier:   61:D3:5E:AF:4F:35:33:78:0A:31:7A:DD:AF:56:C3:12:4F:D3:EB:85
Certificate issuer:       /CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
Certificate serial:       25C8EA07C720787B18E5EAF06622E0DA48C2CBC7
Authority key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa
Signing time:             Sat 02 Nov 2024 08:00:06 +0000
ROA not before:           Sat 02 Nov 2024 07:55:06 +0000
ROA not after:            Sat 01 Nov 2025 08:00:06 +0000
asID:                     4787
IP address blocks:        175.158.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl
                          rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c8:ea:07:c7:20:78:7b:18:e5:ea:f0:66:22:e0:da:48:c2:cb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E
        Validity
            Not Before: Nov  2 07:55:06 2024 GMT
            Not After : Nov  1 08:00:06 2025 GMT
        Subject: CN=61D35EAF4F3533780A317ADDAF56C3124FD3EB85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:c3:ed:02:7a:2a:13:05:40:60:df:0d:b0:
                    ce:84:aa:b1:57:b1:56:8b:ce:45:1a:52:cd:39:89:
                    e6:48:3b:8a:13:78:dd:a2:9a:59:f4:3b:57:83:03:
                    3d:8f:0c:ff:d5:1b:80:16:4a:0c:44:fe:29:cb:bc:
                    45:6b:58:7f:50:b4:75:ac:23:c4:6c:73:bd:df:2e:
                    5a:1d:9e:c0:81:7c:e4:cd:8d:79:e6:a4:59:54:75:
                    4e:72:0c:b8:b7:42:75:ac:85:98:6d:79:84:81:d2:
                    4b:83:c5:fc:11:dc:16:7d:01:d4:6d:d5:c1:9b:c8:
                    ee:af:32:d8:46:8c:bc:c8:d0:14:a0:d9:ca:76:03:
                    5b:e0:bf:28:7e:87:fa:5f:e3:ad:d4:df:28:c4:07:
                    95:45:61:83:c2:62:c2:83:bf:11:02:ee:43:1e:4d:
                    b0:07:86:e3:6b:4a:df:48:74:02:b4:a3:29:81:60:
                    40:d9:cc:f3:41:b3:c8:95:9c:b8:66:b5:d0:c1:3b:
                    c8:0f:8a:43:da:90:ae:e0:be:7e:73:84:32:bc:a4:
                    66:bd:b2:ea:15:af:fe:4e:c7:b2:2b:50:d9:6d:1b:
                    a3:bb:9e:c0:01:48:c6:04:af:27:90:1b:18:03:be:
                    51:88:a9:ab:63:f8:b6:48:fe:ea:4b:9a:c7:3b:80:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D3:5E:AF:4F:35:33:78:0A:31:7A:DD:AF:56:C3:12:4F:D3:EB:85
            X509v3 Authority Key Identifier:
                keyid:FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/3137352e3135382e33322e302f32322d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.158.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:84:47:ad:12:c8:07:09:69:dc:8b:1a:f4:d9:d2:7d:57:f4:
         40:2d:61:68:db:3f:72:9d:ef:b6:01:dc:00:77:6b:af:9f:16:
         e2:a7:f6:96:d3:38:76:3f:87:8b:f9:35:dd:bb:79:03:31:c5:
         b8:bf:eb:47:05:b6:f2:01:13:f0:21:5b:99:a1:72:7e:a7:66:
         b4:27:cc:09:cb:e3:3e:16:dd:c2:a0:83:0d:ab:24:11:26:77:
         f3:64:be:e2:cd:07:16:f9:d8:90:03:69:5c:aa:fb:c3:4e:6f:
         5c:6c:5a:9d:31:50:1f:58:b8:89:8d:ee:53:9e:1b:ed:38:4a:
         27:29:bb:54:84:d6:be:ab:49:20:20:95:0b:f5:32:e6:49:06:
         8d:97:db:4d:2d:bd:34:7e:ca:f5:c4:19:72:58:70:76:5e:39:
         41:93:62:29:07:c7:b0:46:07:c5:a4:ac:a5:c5:db:f1:cb:f0:
         fa:0c:cd:90:4f:e8:0f:f8:af:c0:86:b9:39:ad:46:ce:46:17:
         74:1e:ce:a8:22:2c:68:32:61:2c:f6:92:12:da:67:dc:99:8d:
         51:dc:2f:71:0b:dc:a4:de:58:e0:9e:ba:e6:f0:ae:07:a6:f3:
         ce:ad:c4:8f:8b:77:17:03:d0:b4:2b:38:41:f1:ae:a9:7f:e0:
         ef:83:9a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org