Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa
File:                     3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa (raw, json)
Hash identifier:          VYWAk8iGSZzF5g6fTa7RhmuP4rGT675f8tCJgCmKW00=
Subject key identifier:   AB:2E:68:AE:94:24:97:1E:9F:5B:AD:02:6E:F5:F1:80:EB:3E:AA:49
Certificate issuer:       /CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF
Certificate serial:       083B2C505A69B9027B49F5BDB7C4C3B5FC878A0A
Authority key identifier: AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa
Signing time:             Wed 25 Sep 2024 08:45:35 +0000
ROA not before:           Wed 25 Sep 2024 08:40:35 +0000
ROA not after:            Wed 24 Sep 2025 08:45:35 +0000
asID:                     153117
IP address blocks:        160.187.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl
                          rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3b:2c:50:5a:69:b9:02:7b:49:f5:bd:b7:c4:c3:b5:fc:87:8a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AED8CB33E789DD342182B8DD6D16D95A45B981EF
        Validity
            Not Before: Sep 25 08:40:35 2024 GMT
            Not After : Sep 24 08:45:35 2025 GMT
        Subject: CN=AB2E68AE9424971E9F5BAD026EF5F180EB3EAA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:82:9b:30:7d:0d:b3:e3:34:d2:7e:a2:40:3b:
                    4d:38:96:4d:1d:6a:a0:e2:42:37:f7:d3:9e:69:15:
                    fa:19:3f:38:0e:e3:6f:13:2b:99:21:22:8a:c0:60:
                    28:bf:5d:2d:73:52:79:b4:a4:96:a2:4f:b8:75:8c:
                    20:95:b5:82:a4:18:00:06:e4:fa:86:68:b3:5e:66:
                    bf:29:0d:3c:1c:b6:88:a4:45:37:84:21:22:34:08:
                    45:6c:87:c4:00:5f:a8:69:f7:90:6e:fb:1a:3f:30:
                    26:a7:ef:1c:dc:16:41:d9:b1:5d:49:1f:0f:9b:0b:
                    02:0c:87:bd:22:9b:2c:c7:71:4c:d3:61:45:47:8f:
                    d7:b4:5e:4a:cc:2f:70:1a:3f:2a:1c:ba:4f:07:65:
                    5f:bb:a2:19:b4:86:48:cd:f6:76:23:35:3a:4b:58:
                    97:1c:1f:07:a4:02:2c:91:e8:c5:0b:3a:82:b0:84:
                    01:0f:18:7f:ff:23:57:8b:cf:1a:2a:57:34:bc:6f:
                    a3:ad:bc:bf:1f:b0:f7:13:a4:d2:ff:7d:ce:08:ec:
                    d5:6d:8e:32:5d:be:cd:d2:c4:35:fa:61:39:3c:2b:
                    71:f3:1b:82:ba:22:55:55:07:6d:c9:f5:12:50:a1:
                    6d:3d:32:87:55:76:a4:f1:9f:5b:28:03:47:75:7f:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:68:AE:94:24:97:1E:9F:5B:AD:02:6E:F5:F1:80:EB:3E:AA:49
            X509v3 Authority Key Identifier:
                keyid:AE:D8:CB:33:E7:89:DD:34:21:82:B8:DD:6D:16:D9:5A:45:B9:81:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/AED8CB33E789DD342182B8DD6D16D95A45B981EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AED8CB33E789DD342182B8DD6D16D95A45B981EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59b07a9e-62df-4808-9d2a-a6e6884bcbbb/0/3136302e3138372e35352e302f32342d3234203d3e20313533313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:df:72:a8:ee:80:c1:08:d0:49:9a:56:41:20:22:95:ac:28:
         a5:e6:3d:cc:68:a6:eb:35:5b:4a:c9:51:90:6c:91:99:d0:b5:
         a3:01:fd:2d:db:49:da:e0:6c:4d:59:23:54:4c:82:d5:0f:d0:
         50:2a:cb:eb:e2:3b:93:6b:66:f7:9f:b2:f4:62:b1:9f:71:a1:
         27:60:cc:b4:ac:de:db:11:fd:b1:c3:da:b2:82:c3:20:8e:67:
         ba:08:26:35:91:47:ab:04:e9:e0:0f:94:11:00:af:30:19:e6:
         d0:24:b1:ab:c8:aa:64:c8:90:bc:81:63:0b:e7:a1:6a:48:98:
         c5:70:c6:aa:87:c1:3c:a7:f9:8a:56:53:b2:c2:b6:e7:43:0f:
         82:7d:70:ac:a8:9d:ee:9b:1d:b7:13:a3:1f:27:6e:47:8b:aa:
         3f:3d:50:cb:c0:bc:24:0c:75:32:eb:52:9f:3d:00:46:b5:ac:
         27:48:f5:d3:95:63:07:7b:46:e9:4d:d2:4c:80:dd:a1:0c:af:
         94:b8:b2:cb:b3:e2:f3:f8:e4:29:99:44:ba:20:91:d8:ef:40:
         58:a9:cd:bc:f6:b2:57:f6:c0:c3:92:16:a6:70:7c:3e:78:b2:
         9c:48:cd:22:70:55:a5:36:ac:e0:2a:41:49:46:77:84:4c:ea:
         24:29:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org