Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36352e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e36352e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          6wcMkC1EpMqsmxhaZ2QE9l1t6kfaOOOGGZP7reUYloM=
Subject key identifier:   C5:4B:46:F7:7E:64:DD:86:40:D5:6D:25:E5:AB:9E:46:BA:72:8B:1C
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       5A29399B49796F17CB79D4935CA8F0F6C23184E2
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36352e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:18 +0000
ROA not before:           Mon 01 Jul 2024 00:58:18 +0000
ROA not after:            Mon 30 Jun 2025 01:03:18 +0000
asID:                     38513
IP address blocks:        182.23.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:29:39:9b:49:79:6f:17:cb:79:d4:93:5c:a8:f0:f6:c2:31:84:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:18 2024 GMT
            Not After : Jun 30 01:03:18 2025 GMT
        Subject: CN=C54B46F77E64DD8640D56D25E5AB9E46BA728B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:8b:41:fb:45:c8:b6:bb:48:6a:fa:b6:dc:
                    fa:cc:50:3c:99:13:eb:2e:27:fd:d2:84:d8:60:50:
                    5f:da:66:18:32:b7:02:01:21:12:a8:41:65:2a:b9:
                    5d:58:a1:7d:e6:0a:dd:45:a6:1c:33:45:ef:d6:cd:
                    d6:dc:a4:6d:17:7c:2b:86:68:74:3b:bf:64:ed:fc:
                    17:ad:61:52:8c:80:29:6b:aa:4a:b5:25:51:15:af:
                    ed:67:3e:6c:df:4e:b9:00:b4:36:66:19:a4:9b:73:
                    ab:f1:a1:ad:08:b5:9a:08:00:0a:ec:d2:a3:2a:b6:
                    aa:d1:c8:c5:d6:2e:62:b9:39:40:c9:60:ca:7d:d6:
                    b4:9d:5b:81:2d:39:b7:fa:fa:c6:a5:51:7a:a9:0e:
                    df:73:d8:27:f4:95:34:16:ab:70:30:c0:ff:5d:5e:
                    78:f9:6f:e0:72:fe:13:3d:b5:9a:b8:f0:53:51:bd:
                    ec:51:e2:7e:cc:99:59:e4:e5:22:06:17:1e:10:e0:
                    4c:14:15:fc:d5:fc:f1:43:b7:ab:c2:50:41:e0:85:
                    fb:f2:14:ab:45:b5:d1:a8:76:0a:80:82:67:e2:ce:
                    00:7a:4d:8c:27:cc:b5:ef:97:b5:e0:11:f8:73:f1:
                    90:70:1c:60:a0:88:19:12:78:3c:70:7d:c5:c3:c9:
                    20:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4B:46:F7:7E:64:DD:86:40:D5:6D:25:E5:AB:9E:46:BA:72:8B:1C
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36352e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:8b:d0:54:b5:03:b7:53:07:83:dc:b3:b6:51:67:d9:63:3e:
         db:16:15:78:10:96:25:02:73:2a:ec:f2:45:6e:44:0e:51:4d:
         18:b2:5d:75:76:ab:aa:0a:ed:b4:57:57:25:b3:7a:d6:61:7e:
         3f:42:2c:7d:91:cd:e4:fe:c5:67:35:1a:36:ba:b3:ac:58:09:
         a8:9e:d4:59:57:d3:42:0a:42:09:dd:8a:0f:b3:ab:f1:4d:5e:
         85:3e:92:a7:3c:ea:37:f2:8a:ca:1d:57:35:e1:ef:71:4a:47:
         82:40:60:55:5f:f5:b9:6f:93:61:5a:9e:44:3a:c5:7b:5b:5e:
         53:6d:91:e3:7c:f7:a0:75:c9:ea:16:0e:ae:2f:35:42:9e:29:
         df:2b:b2:77:98:dc:fb:50:09:24:98:50:5d:1b:9c:03:55:db:
         75:ad:51:9b:e9:fc:91:34:ff:dc:7b:64:8a:d5:49:3f:b5:57:
         3f:fe:f0:bc:3c:e0:ee:a3:26:b5:c1:3a:0a:ea:19:3d:2b:93:
         db:5b:cb:c5:62:76:30:dd:b5:16:d2:d8:de:4d:05:f8:f8:27:
         5d:d4:a9:cd:28:6f:98:37:c6:f4:f7:92:1d:c2:8f:9f:48:4a:
         d2:fb:f8:76:52:92:a7:f5:96:9b:93:49:74:18:71:f0:dd:a3:
         ff:28:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org