Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37322e302f32342d3234203d3e203338353133.roa
File:                     3138322e32332e37322e302f32342d3234203d3e203338353133.roa (raw, json)
Hash identifier:          I40b81RleU6ZraI4Nv2bR+EsXk0BgHbRb7OeoqgYpCM=
Subject key identifier:   19:5D:D1:A6:42:37:F4:F8:66:3A:AE:6F:2F:DE:B4:FA:02:30:94:B5
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       6E3E9E65C802BD925A21651CC7FAD1AB14713063
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37322e302f32342d3234203d3e203338353133.roa
Signing time:             Mon 01 Jul 2024 01:03:21 +0000
ROA not before:           Mon 01 Jul 2024 00:58:21 +0000
ROA not after:            Mon 30 Jun 2025 01:03:21 +0000
asID:                     38513
IP address blocks:        182.23.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3e:9e:65:c8:02:bd:92:5a:21:65:1c:c7:fa:d1:ab:14:71:30:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul  1 00:58:21 2024 GMT
            Not After : Jun 30 01:03:21 2025 GMT
        Subject: CN=195DD1A64237F4F8663AAE6F2FDEB4FA023094B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:82:88:6e:b5:33:55:19:24:19:16:fb:16:29:
                    a5:cc:97:12:76:78:d3:10:d6:a0:d4:a2:93:e4:86:
                    c9:b8:c8:a2:1d:1d:6f:e8:07:14:b2:0f:ce:3d:5c:
                    e3:1a:4f:64:a1:83:83:0e:f2:dd:3d:14:29:31:66:
                    bb:8c:e3:93:8a:1a:36:d3:1f:be:fb:bd:37:e6:3f:
                    7e:a4:27:19:a2:e7:9b:90:2a:11:96:af:28:80:52:
                    f9:35:bd:a1:1d:ad:78:be:7e:05:da:9a:74:31:c2:
                    71:81:f7:35:a7:eb:99:10:e5:82:c0:df:52:51:90:
                    27:f8:43:f4:1f:e1:43:6a:0c:4a:7a:84:54:5a:27:
                    b8:87:cf:26:f8:91:1e:d7:66:60:ca:61:1b:8c:cf:
                    3e:f3:33:c6:ff:b2:bf:4a:56:d2:20:32:dc:25:87:
                    cd:5d:c7:80:9b:c0:29:fc:02:cb:43:45:53:1d:b5:
                    b0:66:d3:ae:fd:a4:ee:60:0e:6f:4e:4a:67:8e:19:
                    2b:b2:43:db:93:81:a1:04:f4:04:a2:e7:cc:21:7f:
                    7f:0a:d9:7d:db:35:d3:20:a6:a1:3f:b5:d2:02:73:
                    10:dd:eb:10:a6:b8:2b:d7:72:b6:74:89:a2:92:36:
                    89:7d:34:66:71:a7:fd:f9:a5:ce:04:1b:6c:fc:33:
                    10:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5D:D1:A6:42:37:F4:F8:66:3A:AE:6F:2F:DE:B4:FA:02:30:94:B5
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3138322e32332e37322e302f32342d3234203d3e203338353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.23.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:09:a7:c9:1c:86:ce:01:53:ef:83:43:21:b2:11:55:79:a7:
         30:59:54:17:7c:c0:a2:b5:ad:8b:6b:fd:9d:b5:1d:8f:a4:36:
         62:e1:5e:35:48:1c:6c:6c:ca:c3:fd:40:be:db:a4:f1:48:bf:
         b1:ee:58:03:a5:e7:4b:c5:6c:1d:e8:a5:18:57:c8:44:94:23:
         64:44:44:34:97:66:9e:89:ef:7e:5b:f7:12:ee:6e:96:d7:58:
         e5:cb:79:ab:07:13:8a:64:09:0a:fa:af:1d:f0:c7:98:d5:c2:
         14:7d:d8:f8:71:7d:d0:61:f2:27:7b:8b:57:56:d3:1f:85:1c:
         5b:58:db:e7:b2:05:48:6b:1e:0c:fb:c5:24:c1:c4:2a:d0:8a:
         2a:1b:39:bb:45:2f:b8:29:ac:48:b9:06:c0:fb:8f:ab:e3:23:
         83:eb:d4:b0:11:ca:4c:11:8a:43:e2:a5:6e:3c:0b:1e:da:e0:
         d6:6c:51:50:37:9e:47:47:af:e0:7d:da:01:72:31:38:cf:c1:
         8a:00:a5:7a:27:00:75:de:5a:97:d7:b7:79:d2:48:79:57:a2:
         ac:9c:be:01:d0:f1:e9:26:30:45:0f:5e:17:eb:04:21:01:25:
         31:9c:a2:d3:c5:c5:59:bb:2c:5a:19:33:84:11:ca:cc:3e:6d:
         f0:b3:e6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org