Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e35362e302f32342d3234203d3e203535363637.roa
File:                     34392e3135362e35362e302f32342d3234203d3e203535363637.roa (raw, json)
Hash identifier:          nwE4egVuBWgMCKw3YCKh6VmNh2jKygK5nst6ZKFNdIE=
Subject key identifier:   25:19:B0:CE:5D:08:3A:6B:54:12:A8:DE:4C:7F:3E:6F:8E:EE:CA:3E
Certificate issuer:       /CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060
Certificate serial:       4717033BE7A93B73ACA68B3B334CAF25F91612E5
Authority key identifier: 5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e35362e302f32342d3234203d3e203535363637.roa
Signing time:             Thu 03 Oct 2024 08:03:07 +0000
ROA not before:           Thu 03 Oct 2024 07:58:07 +0000
ROA not after:            Thu 02 Oct 2025 08:03:07 +0000
asID:                     55667
IP address blocks:        49.156.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl
                          rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:17:03:3b:e7:a9:3b:73:ac:a6:8b:3b:33:4c:af:25:f9:16:12:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060
        Validity
            Not Before: Oct  3 07:58:07 2024 GMT
            Not After : Oct  2 08:03:07 2025 GMT
        Subject: CN=2519B0CE5D083A6B5412A8DE4C7F3E6F8EEECA3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:ff:ab:b8:9d:9f:c6:ac:45:d2:70:78:35:
                    52:ee:1a:d3:50:c3:e9:11:68:56:56:29:06:c0:0b:
                    8e:60:4a:ec:4e:4b:64:84:ae:bb:4e:8e:6f:c7:ee:
                    7f:f7:78:74:67:3c:14:72:c9:1c:24:a2:e1:8a:68:
                    2d:94:5b:d4:2d:00:b2:c3:db:4a:b0:ca:9b:19:ee:
                    63:9d:ee:70:36:74:8a:de:05:27:69:10:af:fc:bf:
                    f6:0b:1d:0e:23:dc:4f:65:9a:53:94:b9:97:02:4d:
                    f6:05:0f:c3:82:28:3a:aa:7e:6d:7a:92:c6:9c:3c:
                    2b:5a:db:9a:85:fe:3f:98:db:b3:a5:cf:a1:a5:4f:
                    c8:c2:39:5f:2c:4c:50:3e:32:88:75:de:f0:13:c9:
                    40:13:06:8b:90:b1:1f:9c:06:eb:bc:2d:4d:35:b5:
                    d6:7b:70:9c:86:f8:ac:1f:a7:9f:29:69:4d:18:6e:
                    1a:73:02:a5:7f:5c:b7:34:43:d6:0b:8e:7e:30:e1:
                    4d:9e:23:7a:07:e8:15:86:2f:bf:52:9c:eb:31:32:
                    22:7a:4e:4c:cc:8b:69:5d:73:8a:d4:a4:2c:97:dd:
                    75:5a:a2:f3:a4:df:51:51:2d:7f:94:2e:06:3c:00:
                    28:6c:54:17:09:6f:8d:0c:3e:9a:0f:b0:33:e3:e9:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:19:B0:CE:5D:08:3A:6B:54:12:A8:DE:4C:7F:3E:6F:8E:EE:CA:3E
            X509v3 Authority Key Identifier:
                keyid:5D:DD:CC:DF:3A:FC:49:2F:6C:C4:87:1D:60:72:A5:AF:A9:73:A0:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5DDDCCDF3AFC492F6CC4871D6072A5AFA973A060.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6206cf50-a3d1-4cc9-9260-987b2ca0c927/0/34392e3135362e35362e302f32342d3234203d3e203535363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.156.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ae:b3:b3:3a:be:52:b9:7a:4c:a9:5d:9c:9c:5c:38:ea:4e:
         32:17:b3:24:78:d7:b7:4b:d7:47:50:91:a0:0a:3b:bc:c8:be:
         b5:9a:f9:0e:9b:a2:0a:ab:22:c0:e9:0b:a7:ea:e0:f9:c3:57:
         ca:bb:db:a4:28:55:ef:0a:2d:d9:cc:4b:d2:fb:28:e9:97:47:
         6e:19:40:82:8e:0a:07:9f:8b:4d:f1:1b:f9:a5:c0:c6:e5:f8:
         eb:21:4c:be:16:98:6b:f6:22:49:96:8b:ee:2f:7f:ac:33:b9:
         5c:dd:83:5e:66:34:83:76:42:03:00:ae:0d:3b:12:21:f2:e3:
         f5:03:88:ab:e0:e6:98:f6:fa:33:94:73:15:4d:74:75:dc:3d:
         0b:fc:25:62:41:b6:8a:91:b5:c1:04:b3:f5:0d:3c:48:a3:d4:
         6a:73:e7:16:b3:1c:c2:f7:f1:16:7c:9f:7e:fa:0a:43:de:f9:
         cf:1e:af:0c:41:e2:9e:ae:30:75:75:6f:a8:9b:30:39:fa:65:
         65:9b:bf:6b:07:77:80:34:b8:ce:21:eb:c9:bb:ce:c3:4d:f8:
         5a:39:6d:2e:84:6d:39:01:f8:06:67:6b:fe:5b:4e:b9:1b:80:
         53:7c:65:c0:46:44:3f:2e:d7:32:ec:b0:ef:e7:a7:9c:ca:4b:
         9d:bf:e9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:44 2024 by rpki-client on console-fra.rpki-client.org