Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37302e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e37302e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          BfgEVZ4Z6M2R8XtUeMqd3TPzY7dHkjriuiLrvnwBjB0=
Subject key identifier:   6B:50:09:A2:D2:18:FD:04:8A:F0:C2:BA:D4:C2:2C:37:25:C0:72:E6
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       423D02538A5B6C8201F749F21CF6ABC6B1E9A608
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37302e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:18 +0000
ROA not before:           Mon 01 Jul 2024 00:58:18 +0000
ROA not after:            Mon 30 Jun 2025 01:03:18 +0000
asID:                     38513
IP address blocks:        182.23.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3d:02:53:8a:5b:6c:82:01:f7:49:f2:1c:f6:ab:c6:b1:e9:a6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:18 2024 GMT
            Not After : Jun 30 01:03:18 2025 GMT
        Subject: CN=6B5009A2D218FD048AF0C2BAD4C22C3725C072E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:87:f3:f9:a8:92:b0:9f:d9:62:e4:7f:02:d7:
                    2d:5b:7f:11:7d:71:d5:42:ac:ae:93:e2:9b:38:79:
                    9f:1f:1d:b1:ab:93:77:cc:6b:c2:3e:f4:84:c6:39:
                    e8:47:9f:3d:08:e3:6d:34:5b:80:e3:b0:26:c1:ac:
                    27:62:50:1f:58:c8:56:f5:84:43:24:0a:a0:23:72:
                    04:37:94:eb:ea:5e:e8:c8:ef:18:f2:df:6c:b5:28:
                    c9:2a:a4:07:42:dd:c6:33:b7:d8:36:5e:70:1e:5c:
                    32:a3:94:0c:ed:f2:2f:66:3a:a7:c9:dd:71:9c:07:
                    b6:0d:0e:62:4e:43:a1:64:b1:3d:3e:8f:b0:f6:ec:
                    84:b3:f3:46:e0:0c:7f:d2:00:17:12:dd:fc:b2:56:
                    a9:24:ab:73:c8:53:30:67:fa:23:92:d4:1f:0c:52:
                    f0:d7:b9:e0:c2:86:6f:20:67:b2:6d:0c:57:d0:f9:
                    90:af:e6:b1:0d:29:88:4b:35:d9:97:33:b1:02:86:
                    3e:a4:84:16:8b:47:69:31:29:e4:c2:0a:57:7c:fd:
                    12:d7:2f:4d:23:dd:81:63:be:f9:53:5a:3a:76:ad:
                    8f:c8:62:2e:c2:d5:4c:b8:2e:6d:01:b3:6e:c1:45:
                    e4:eb:49:37:8b:2f:35:06:95:5d:46:d6:22:33:3a:
                    1b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:09:A2:D2:18:FD:04:8A:F0:C2:BA:D4:C2:2C:37:25:C0:72:E6
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37302e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:73:50:e7:ac:2d:25:30:eb:2f:91:34:c0:a6:5b:8f:bc:ea:
         cb:4d:9f:c1:cb:8b:8c:7a:29:1a:7b:e4:f4:57:74:3f:63:c0:
         c5:a3:15:27:af:1d:06:a4:33:3c:25:1f:00:0f:81:d7:22:24:
         f5:5e:ac:71:e1:a4:6e:16:2a:d3:8a:9c:a9:e3:e7:e4:94:d7:
         b2:a9:03:d5:d8:bd:b4:f1:94:42:75:d1:73:54:30:ae:c3:29:
         11:71:7a:ea:f3:7d:78:9a:f1:2d:6f:e3:ae:5a:f0:e7:f6:2c:
         e6:39:9a:87:b5:7d:89:6d:e4:86:bb:16:63:20:e5:f9:ed:b9:
         06:41:96:43:79:a5:8d:d5:d6:45:f2:c8:fc:d3:f6:68:1b:58:
         1f:68:f2:19:8c:3b:57:30:ed:04:6c:ee:18:1a:fc:23:a0:6d:
         41:68:4a:74:7f:01:25:73:a5:f0:4c:3b:38:4f:2a:19:0c:63:
         18:49:3d:a5:39:9a:1c:36:0c:25:11:bb:6f:0c:d1:bc:be:28:
         ee:cb:4c:10:bf:81:7a:a5:dc:95:ad:0f:b9:2c:06:06:3e:63:
         31:f7:a1:a3:60:6a:2f:d4:82:f2:23:9f:ad:62:71:51:df:55:
         74:7c:44:3e:d0:a2:3a:49:d0:73:1f:99:c0:00:4d:6f:0f:de:
         97:aa:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org