Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
File:                     33362e35302e39372e302f32342d3234203d3e20313532333939.roa (raw, json)
Hash identifier:          EuWDRw74O+k8JEJvK09P76kFiPDImOnN/O3rdBgN6mY=
Subject key identifier:   25:62:C8:74:AA:71:71:9F:EF:76:1D:D1:CC:4C:26:2B:1E:25:DE:FE
Certificate issuer:       /CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
Certificate serial:       6569F8542D231A2DAAF84D868851234E9C70C854
Authority key identifier: 32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa
Signing time:             Fri 08 Mar 2024 06:52:36 +0000
ROA not before:           Fri 08 Mar 2024 06:47:36 +0000
ROA not after:            Fri 07 Mar 2025 06:52:36 +0000
asID:                     152399
IP address blocks:        36.50.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl
                          rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 20:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:69:f8:54:2d:23:1a:2d:aa:f8:4d:86:88:51:23:4e:9c:70:c8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3241D89371FF3D3AFC0BA911E316A825484B3FDA
        Validity
            Not Before: Mar  8 06:47:36 2024 GMT
            Not After : Mar  7 06:52:36 2025 GMT
        Subject: CN=2562C874AA71719FEF761DD1CC4C262B1E25DEFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:36:91:67:dc:c7:63:1c:e2:be:5e:85:bf:
                    c3:09:60:f2:f3:45:61:3e:3d:6c:a7:3e:89:e0:9f:
                    8d:72:61:46:a5:17:05:54:b3:40:5e:48:e4:1e:97:
                    a1:d1:7a:05:ca:23:20:4b:32:d3:4f:4f:41:5a:a1:
                    a4:12:41:ca:11:04:a8:f8:fc:b3:db:70:b1:f9:1c:
                    3d:34:52:fc:48:56:0f:a8:20:07:08:79:29:4b:52:
                    29:ed:27:89:4e:d9:83:09:d9:22:88:b0:b1:f0:c0:
                    8e:42:7e:1d:7d:e4:d2:3e:f5:70:e7:24:d0:28:6e:
                    22:ac:20:8f:52:de:6e:78:e8:57:f6:24:73:2c:e1:
                    5d:02:8b:fe:7b:52:25:e4:3c:f9:80:41:a9:5f:15:
                    c0:59:b1:64:89:7e:cb:3c:80:83:06:57:44:88:1a:
                    b3:0d:40:e5:43:33:61:15:7b:5b:45:35:33:3e:e0:
                    d9:a5:45:08:f9:9b:00:29:2f:9e:af:40:2d:d2:7b:
                    94:57:56:b5:3a:03:9f:08:9a:7d:c0:12:0a:48:c0:
                    ce:e8:80:ca:0a:da:f7:c1:d7:40:d4:81:8d:db:2c:
                    c9:3e:5d:7e:fe:25:5a:5c:d8:7f:9d:a8:83:89:f9:
                    d3:ec:03:17:fa:30:79:91:d1:00:1b:0c:f0:e2:e7:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:62:C8:74:AA:71:71:9F:EF:76:1D:D1:CC:4C:26:2B:1E:25:DE:FE
            X509v3 Authority Key Identifier:
                keyid:32:41:D8:93:71:FF:3D:3A:FC:0B:A9:11:E3:16:A8:25:48:4B:3F:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/3241D89371FF3D3AFC0BA911E316A825484B3FDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3241D89371FF3D3AFC0BA911E316A825484B3FDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48c07441-cd9d-4d85-aab4-65f5dd4ed7e0/0/33362e35302e39372e302f32342d3234203d3e20313532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:a0:c3:0c:5b:aa:0c:65:67:35:a7:d1:af:9e:ca:a5:22:b9:
         94:5e:18:44:aa:05:84:cd:8c:93:22:c6:92:b6:94:4b:e4:92:
         3c:77:83:3f:b2:c8:56:06:86:60:36:ef:72:92:59:0d:18:47:
         71:11:04:87:1e:45:fd:92:d0:d6:76:9b:8d:4b:60:6c:e3:5a:
         28:a4:76:bf:b7:3a:86:41:77:05:cd:1d:2c:b6:e2:72:84:de:
         45:22:56:4f:4a:e9:9d:3f:b2:e2:20:c8:6d:8d:d6:b1:a5:75:
         b9:73:0c:f0:fe:2f:c8:9f:e1:d7:53:22:0f:4f:6a:0c:3c:81:
         f5:a8:ca:c5:b5:a2:99:20:75:37:df:6d:fb:51:68:a6:36:d0:
         cf:39:60:a0:2c:5f:ca:1a:d3:bb:fa:f8:c8:86:fd:7b:da:8a:
         7e:2e:3f:0f:ff:40:44:a4:96:cf:1d:53:83:ab:07:db:5f:7b:
         68:30:e9:42:93:10:7b:6d:8f:f6:c9:ae:70:d0:26:70:2a:25:
         5a:f3:75:94:53:aa:64:49:b0:f0:95:7c:41:77:29:46:39:84:
         2c:51:03:01:ce:6f:e4:7d:54:9a:47:85:44:a5:a8:e8:16:90:
         b4:52:62:a3:3b:d2:4c:f5:31:26:15:81:72:4b:48:86:25:7f:
         27:17:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:09 2024 by rpki-client on console-fra.rpki-client.org