Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e302e302f31372d3234203d3e2034383030.roa
File:                     3138322e32332e302e302f31372d3234203d3e2034383030.roa (raw, json)
Hash identifier:          hpV5OVwmXFjAOn07WIjlYuYxtTKuXKsFbAC45XxsIHA=
Subject key identifier:   EE:97:7A:57:2E:10:1A:72:56:CD:43:CC:6B:28:39:73:EC:4C:DC:57
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       7A6887F218633C92E1B7316850F7E6129102E8B1
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e302e302f31372d3234203d3e2034383030.roa
Signing time:             Mon 01 Jul 2024 01:03:20 +0000
ROA not before:           Mon 01 Jul 2024 00:58:20 +0000
ROA not after:            Mon 30 Jun 2025 01:03:20 +0000
asID:                     4800
IP address blocks:        182.23.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:68:87:f2:18:63:3c:92:e1:b7:31:68:50:f7:e6:12:91:02:e8:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:20 2024 GMT
            Not After : Jun 30 01:03:20 2025 GMT
        Subject: CN=EE977A572E101A7256CD43CC6B283973EC4CDC57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:54:6b:13:81:3c:fa:e7:1b:f7:f7:f2:ba:
                    11:eb:b4:f8:33:59:67:29:11:d4:50:74:dd:1f:77:
                    26:e8:bc:82:d0:a7:d6:f7:13:2d:7f:e6:2c:67:47:
                    53:03:b8:54:82:d1:4f:3a:7e:da:e7:a2:8b:ca:49:
                    ad:f7:49:c3:19:8d:85:e9:1f:57:c8:0c:55:9e:b5:
                    88:a1:66:75:4a:8e:bd:91:04:46:be:b1:ce:1f:aa:
                    38:3e:a5:ba:29:cc:af:cd:58:c0:0c:3c:7a:68:e9:
                    2f:cd:af:a0:1d:0f:04:01:c2:ea:6a:bc:20:27:56:
                    aa:8c:97:56:08:15:ac:19:01:76:be:8c:ec:57:c5:
                    82:7a:4e:2f:54:19:5e:0e:91:4c:58:ec:bc:c3:7d:
                    8f:2e:da:fa:d3:e2:65:df:bc:6f:e3:e4:88:57:26:
                    32:d5:46:a1:ac:cf:69:36:b5:c8:eb:22:9e:24:a8:
                    72:4c:b9:67:d1:99:30:a0:2b:0f:80:b5:ea:e0:9f:
                    84:93:75:0f:93:6e:8c:5e:43:40:4b:75:ee:dd:53:
                    6c:44:86:31:fd:3a:cc:f9:43:d2:ce:ad:06:9a:c1:
                    fb:45:5e:48:0b:97:d8:5a:4a:0f:5f:18:af:1e:03:
                    62:47:71:54:ae:8c:73:07:ed:2c:36:55:ba:88:b7:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:97:7A:57:2E:10:1A:72:56:CD:43:CC:6B:28:39:73:EC:4C:DC:57
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e302e302f31372d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         8e:fd:df:79:d8:e1:1f:85:de:dd:79:2c:53:c2:5b:1e:6d:93:
         00:a0:02:56:44:59:36:f0:ac:1a:fd:d2:02:94:cf:99:ce:db:
         49:66:25:ac:db:99:8b:e4:25:03:a1:a5:4b:2a:80:e5:2e:66:
         f8:8e:44:b7:3d:00:2b:86:2c:3d:69:1e:10:e9:b4:3b:1b:b3:
         a1:9d:12:59:45:6d:ca:6d:51:ac:7a:c4:dc:10:31:31:a2:9d:
         81:52:03:a7:28:56:fe:25:c6:9a:4f:99:3c:11:1d:9a:8c:57:
         7c:81:4c:d4:c5:a0:78:35:67:85:db:f9:a8:8e:05:1c:5e:af:
         6a:e2:0b:9f:5d:a1:06:11:b3:05:f9:8b:d1:ee:9e:de:cc:f1:
         2a:16:6b:89:74:84:a2:f8:22:8d:4c:0e:9b:72:3e:58:15:ff:
         ec:97:1b:ca:f7:b7:93:f1:62:53:d9:b3:ee:13:19:33:c9:01:
         e6:46:0f:79:d5:3d:c2:d8:99:eb:ff:89:35:01:67:29:cf:3b:
         d9:dc:31:82:b5:ff:44:e4:d6:4b:c9:56:3e:2d:80:84:b4:8e:
         ed:3c:8d:a4:34:a1:84:d5:59:1a:f0:90:a6:bb:de:9f:72:8f:
         fb:1c:93:81:e3:67:ca:48:a5:af:a0:61:3d:f7:01:ac:f2:f8:
         46:e2:5c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org