Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e36372e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          V94RxsB40oUOeMboL2fLcSIWQBoR7yGqD7Hzg8j8Y/g=
Subject key identifier:   5D:DB:32:57:EA:31:6F:F9:6A:CE:04:A3:43:57:19:83:B0:AB:71:5E
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       48A0C0E2F8CF5C1F0E10642111066AB7FE2C00AC
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:22 +0000
ROA not before:           Mon 01 Jul 2024 00:58:22 +0000
ROA not after:            Mon 30 Jun 2025 01:03:22 +0000
asID:                     38513
IP address blocks:        182.23.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a0:c0:e2:f8:cf:5c:1f:0e:10:64:21:11:06:6a:b7:fe:2c:00:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:22 2024 GMT
            Not After : Jun 30 01:03:22 2025 GMT
        Subject: CN=5DDB3257EA316FF96ACE04A343571983B0AB715E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:98:e7:97:19:8b:49:c4:6d:8d:99:c5:9c:
                    bb:45:33:41:70:6c:72:ed:2e:04:66:c5:e0:87:89:
                    4e:9d:94:11:92:9c:ae:df:6b:4f:ca:c4:52:1f:fc:
                    9a:65:1f:09:1c:39:e7:e6:91:26:48:9a:51:6d:88:
                    fd:28:e9:21:81:53:d8:95:16:fc:b3:8a:d2:0a:87:
                    95:d0:31:7b:d2:d8:fd:0f:5a:37:73:07:23:79:35:
                    cc:9a:ef:58:c3:8c:88:3b:17:97:74:e3:df:4c:21:
                    ea:3f:e3:11:4a:d1:88:40:8c:15:20:5f:95:b1:9d:
                    4d:50:a5:36:87:c9:0d:7e:22:b7:a8:ae:ff:29:c7:
                    95:07:ca:0c:18:6c:1a:2b:67:f7:23:4d:f8:2d:53:
                    a9:bc:c1:34:db:8e:bf:2f:48:ec:d2:80:b9:f2:57:
                    42:a3:b7:bd:b8:49:db:b5:5d:52:d1:87:26:72:9a:
                    ee:24:ee:1b:23:97:e7:69:0b:7f:21:ab:d9:8a:cb:
                    62:7a:4e:8e:f1:4c:96:84:02:71:10:21:f5:1e:4a:
                    1a:08:88:9c:d3:05:64:67:f1:1e:f7:bd:a1:9e:c7:
                    7e:da:d3:af:6b:9f:7c:87:a0:8c:89:96:2f:59:d4:
                    38:58:dd:6b:b5:ed:63:8a:72:c8:f4:0f:ee:d0:0f:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DB:32:57:EA:31:6F:F9:6A:CE:04:A3:43:57:19:83:B0:AB:71:5E
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e36372e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9e:fd:87:67:9b:78:ec:0e:c5:79:06:7c:cf:91:5f:3c:d4:
         d4:8f:f4:b7:15:32:6e:a1:54:b3:04:6d:83:48:f2:0c:08:85:
         29:b7:8e:f9:c4:7e:26:1b:16:81:4c:df:27:8b:f9:ca:8c:e2:
         2d:23:88:9e:7c:46:20:dc:50:02:c8:92:7b:85:7b:6f:16:07:
         1f:c5:44:ad:ec:cb:70:24:3a:1f:bd:66:7f:6b:07:9f:4f:a0:
         ca:95:bb:52:f0:4f:06:26:5a:91:1a:54:ba:11:f1:84:ab:29:
         e5:ee:08:d8:86:77:87:26:2b:82:d5:ed:c7:1d:b2:b4:10:7c:
         5c:0b:55:06:3c:35:bb:a0:7d:b0:22:83:17:04:00:ff:16:c7:
         cc:69:eb:f4:44:a1:74:a5:d9:f3:6d:b5:a7:27:9c:bc:fd:02:
         57:59:87:b6:61:a8:07:e8:4e:2b:74:14:dd:7d:c5:d4:49:b3:
         28:7c:27:1b:ce:c9:db:ae:33:2d:15:1c:c4:e3:4e:e9:d3:3b:
         3d:f8:35:3b:4e:23:64:46:ae:55:00:9c:51:92:23:e3:3b:6e:
         9b:dc:95:f3:d7:54:71:41:93:a6:61:b0:d5:ca:36:a6:bf:03:
         2d:eb:cc:74:82:78:56:ed:22:5f:c3:ee:7f:22:9e:22:48:ef:
         9f:fe:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org