Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa
File:                     323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa (raw, json)
Hash identifier:          LFXwJ0bbHlFGrcTbqpYuSr1hVevPSnpiTpdJ+P+mcY4=
Subject key identifier:   77:1A:DD:4F:18:EC:96:E2:21:C4:AD:29:E7:54:9D:2A:FE:C8:B7:6A
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       55E2E934D0384ED56F13398640A66FB79122C70F
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa
Signing time:             Fri 09 Aug 2024 09:00:01 +0000
ROA not before:           Fri 09 Aug 2024 08:55:01 +0000
ROA not after:            Fri 08 Aug 2025 09:00:01 +0000
asID:                     4800
IP address blocks:        2400:8000:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e2:e9:34:d0:38:4e:d5:6f:13:39:86:40:a6:6f:b7:91:22:c7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Aug  9 08:55:01 2024 GMT
            Not After : Aug  8 09:00:01 2025 GMT
        Subject: CN=771ADD4F18EC96E221C4AD29E7549D2AFEC8B76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:fe:42:b6:f2:52:ee:9e:f2:48:19:55:11:d0:
                    56:6c:9f:33:03:e1:e5:4f:aa:0c:bc:b5:df:b9:a8:
                    76:09:9a:46:7c:49:ce:fe:4d:d8:2d:25:2e:c4:3a:
                    c6:7a:84:3c:d8:50:bc:ea:b0:42:81:f1:41:56:f5:
                    7d:83:01:cb:e1:6b:5a:33:5d:f5:b6:02:ba:56:f1:
                    1e:37:b5:99:78:e0:dd:e9:09:80:87:59:e9:c1:c3:
                    81:e3:de:18:bc:df:89:2c:06:c5:36:1f:f8:f3:58:
                    1b:e3:fd:cc:49:ec:7f:95:2a:01:ec:cc:8f:35:84:
                    49:b9:23:98:35:65:da:c2:41:69:50:34:97:6f:af:
                    c0:67:90:e8:e6:84:a2:a0:e2:22:a6:76:00:3e:1b:
                    23:2a:f9:29:cd:1b:20:db:8e:93:dc:2c:29:e5:13:
                    0e:c1:99:88:c3:50:07:e1:b5:db:17:5a:60:e7:07:
                    69:ae:4a:8e:3e:2c:54:3e:60:2e:15:02:87:ec:b3:
                    55:68:d4:27:7a:e4:c4:c2:4d:9a:e0:c3:7b:f0:fd:
                    94:b1:8e:3b:50:74:78:34:f0:d1:ef:54:a7:69:d6:
                    6c:33:0d:ef:08:67:93:59:d5:f4:9b:91:01:29:01:
                    7a:0d:b8:22:94:ce:fe:70:75:cc:e7:b1:bd:ab:53:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1A:DD:4F:18:EC:96:E2:21:C4:AD:29:E7:54:9D:2A:FE:C8:B7:6A
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/323430303a383030303a313030313a3a2f34382d3438203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8000:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:eb:de:eb:ca:d9:df:3d:79:09:e0:2b:b8:4c:a7:9d:20:65:
         fc:d1:15:b8:2b:14:1b:5a:e7:10:0b:9e:25:2a:9e:2f:a1:9a:
         1e:45:e4:f0:35:c1:cc:b1:07:b7:20:4f:0e:6b:ce:fd:af:ef:
         84:9b:c7:57:a0:f7:9f:c6:f4:c0:f9:ad:da:94:86:de:0d:15:
         ef:3f:96:a1:ed:e0:44:fc:51:f4:21:79:98:3c:57:83:e5:9e:
         19:2e:ec:49:e1:7e:fc:6a:af:00:1f:d0:8c:5a:5d:99:1d:d3:
         eb:4e:af:a0:5b:78:ac:e6:ad:dd:10:c1:ca:2f:57:76:d0:01:
         eb:8e:12:17:5f:6a:07:1c:80:c1:de:9f:19:94:3a:df:81:cb:
         97:30:3c:a3:02:71:ee:8c:f2:1a:73:22:f5:ca:c1:ac:6d:ab:
         12:11:7f:15:90:4c:fc:52:b4:d0:2e:4a:c7:37:dc:55:6d:a6:
         06:6b:bc:81:d7:95:b6:70:19:4f:52:3b:6b:f9:d1:f4:3e:51:
         5a:b5:8d:08:1f:12:77:fb:10:ab:5c:41:9b:4a:c7:33:28:79:
         f7:16:f6:9d:55:41:a1:a3:a6:0e:ac:2b:cc:61:37:2d:bf:71:
         ec:67:fe:03:3d:0b:3c:b1:b2:3b:23:04:7e:3a:33:bc:e6:26:
         e2:30:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org