Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa
File:                     323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa (raw, json)
Hash identifier:          u+fthsBwoket5WEkCazKb6WuPFz2wCYHFQa3CP7W0Dk=
Subject key identifier:   9B:F2:B4:B3:A3:A3:66:D1:D2:92:A0:E6:23:C3:32:9E:8A:4A:33:99
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       2340ABF9CE16420172FFB6C8E23BF4149370E51C
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa
Signing time:             Tue 13 Aug 2024 01:23:52 +0000
ROA not before:           Tue 13 Aug 2024 01:18:52 +0000
ROA not after:            Tue 12 Aug 2025 01:23:52 +0000
asID:                     136079
IP address blocks:        2405:2cc0:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 09:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:40:ab:f9:ce:16:42:01:72:ff:b6:c8:e2:3b:f4:14:93:70:e5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Aug 13 01:18:52 2024 GMT
            Not After : Aug 12 01:23:52 2025 GMT
        Subject: CN=9BF2B4B3A3A366D1D292A0E623C3329E8A4A3399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:83:24:be:98:e0:bb:5c:ee:94:e4:6d:32:
                    1d:99:6d:fe:04:f7:06:cf:3e:e1:fb:27:2b:08:cd:
                    b1:c4:6d:a4:c7:8e:99:c5:df:a5:9e:d1:32:89:8b:
                    c6:1f:10:1c:9d:5c:60:ae:49:90:a1:2b:78:0f:ed:
                    14:c9:99:a7:3a:5f:aa:8a:39:26:d4:56:b3:8c:eb:
                    41:6d:2f:85:85:1a:84:2e:87:f5:79:f6:b8:32:8b:
                    43:ff:17:86:5a:f5:fb:48:b0:d4:57:0e:3a:23:e2:
                    1c:ee:bd:86:75:c5:ba:62:a9:ae:38:6f:b7:d3:91:
                    f7:79:8a:f4:b4:d0:54:53:7f:bd:a5:a2:e5:64:4d:
                    0e:11:94:42:d2:97:6e:70:50:d1:32:55:03:0c:0d:
                    64:59:ed:59:24:02:b1:de:97:a5:86:15:0a:7b:7c:
                    97:87:3e:17:3a:84:b1:a0:76:ef:df:36:c1:6c:3f:
                    20:7a:42:da:4f:0f:00:95:8a:8f:82:25:c1:cc:57:
                    f9:18:7d:83:1e:cc:a0:0b:dc:0c:03:2e:72:a1:ca:
                    71:b7:4a:40:7d:aa:aa:8a:0d:18:e9:cb:bd:af:b5:
                    d7:78:f0:50:8f:0b:dc:70:62:7f:81:92:ff:4f:fa:
                    4f:92:ec:64:e1:b9:75:e8:18:c1:c3:e7:9b:38:c3:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F2:B4:B3:A3:A3:66:D1:D2:92:A0:E6:23:C3:32:9E:8A:4A:33:99
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/323430353a326363303a323a3a2f34382d3438203d3e20313336303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:2cc0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:7c:a4:88:3e:a1:82:58:cc:da:e9:94:5c:28:d3:40:ed:2a:
         b5:e9:00:94:c0:c8:45:b2:80:24:82:e9:1c:7e:45:37:b1:4e:
         4a:4a:b2:22:38:90:35:49:b7:92:79:0d:ec:c2:cd:73:5b:98:
         a5:cd:06:9e:e8:3a:a2:28:32:e5:0f:f1:95:84:f1:b3:e5:21:
         ca:b7:dc:a6:b3:ba:dd:45:77:ef:cf:eb:f2:3a:7b:0c:5b:3f:
         97:f5:e3:b6:70:af:6a:c2:56:ee:f3:08:bb:bd:5a:62:b7:11:
         c6:2f:95:55:64:60:6e:e8:2f:3a:f7:36:f0:ac:9b:64:9d:35:
         1b:63:31:ce:e2:8e:49:e3:91:8b:db:35:a9:15:69:e6:6a:62:
         a5:37:d6:27:3f:72:86:38:a1:9d:36:ce:31:4b:21:1b:38:05:
         2a:9a:87:df:f8:73:4e:a7:f8:0f:db:2c:96:21:c9:5e:44:25:
         89:5b:63:e3:44:72:d5:b0:75:ce:d0:54:32:45:ff:79:9b:c1:
         28:11:4f:96:54:33:74:d3:5e:ed:0d:b4:d8:d6:dd:8d:12:d9:
         2c:0a:d6:9f:6d:6d:38:cb:06:1b:c3:c7:2f:2a:fd:ee:0b:31:
         f3:88:61:2e:e7:74:c3:52:df:81:9a:4e:f0:e5:53:d9:99:5e:
         bd:41:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:56 2024 by rpki-client on console-ams.rpki-client.org