Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa
File:                     3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (raw, json)
Hash identifier:          9x98XoLgB5n+u7mpQXGTvRK2RowXcZ6wi/CQh+FfyR8=
Subject key identifier:   2C:50:D1:A7:0C:10:E8:7C:2C:DE:77:97:8D:3E:ED:5A:CB:48:A4:85
Certificate issuer:       /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
Certificate serial:       75869CEA7711B086C0E29C7646E812EE467B7753
Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa
Signing time:             Mon 01 Jul 2024 01:02:26 +0000
ROA not before:           Mon 01 Jul 2024 00:57:26 +0000
ROA not after:            Mon 30 Jun 2025 01:02:26 +0000
asID:                     45287
IP address blocks:        175.176.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl
                          rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:86:9c:ea:77:11:b0:86:c0:e2:9c:76:46:e8:12:ee:46:7b:77:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7
        Validity
            Not Before: Jul  1 00:57:26 2024 GMT
            Not After : Jun 30 01:02:26 2025 GMT
        Subject: CN=2C50D1A70C10E87C2CDE77978D3EED5ACB48A485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ff:de:17:77:48:68:45:5f:40:20:c3:5a:d0:
                    af:8a:eb:4f:cb:7f:28:40:a8:36:6b:5a:ab:c6:1c:
                    3c:ca:9d:6a:53:48:45:a6:e4:90:c3:9c:35:ac:d8:
                    6e:7b:c6:3a:d5:69:c8:1e:d0:64:d9:b6:ee:d0:db:
                    d1:71:c3:38:76:30:e7:b7:66:dc:d1:da:f6:dd:a8:
                    b2:67:e7:ae:35:7b:fb:9e:ac:06:72:c1:fe:59:7b:
                    b5:41:28:c3:07:11:3e:40:99:fd:e5:d9:f6:ca:b9:
                    df:75:8d:42:2e:77:d7:03:0a:79:19:85:77:36:0a:
                    7f:89:86:ce:a4:d1:0d:85:d5:b8:e8:ec:4a:18:d2:
                    ce:59:3e:14:b3:a0:30:e8:0d:6b:b9:fe:b7:23:40:
                    32:c6:0d:26:a5:a5:97:17:06:ab:8e:49:1f:98:26:
                    a2:f4:b1:f8:33:52:42:72:01:ed:08:76:1a:c2:22:
                    66:ed:d7:fc:b5:ad:b3:59:91:d9:ff:a5:cb:3a:e6:
                    0d:f3:b3:cc:32:0c:18:8d:a5:5d:ad:c5:da:02:78:
                    2e:55:30:a5:44:8f:e2:65:b2:55:49:2a:f1:5d:f8:
                    48:2f:26:d9:b7:e5:27:23:1e:3b:00:6e:df:a9:18:
                    ee:b9:ab:5a:f1:2e:d6:e0:2e:e2:9f:65:71:b9:8e:
                    5f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:50:D1:A7:0C:10:E8:7C:2C:DE:77:97:8D:3E:ED:5A:CB:48:A4:85
            X509v3 Authority Key Identifier:
                keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.176.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:b7:09:76:6e:43:3a:06:35:48:12:50:ac:a5:df:8b:ed:
         f4:88:c2:5a:e7:9d:13:bb:13:69:0c:9b:9c:cc:4f:01:2c:87:
         a2:e3:4d:a7:01:1e:11:f2:9d:93:a6:90:e5:74:78:df:81:14:
         e1:5d:8b:64:b2:09:30:4b:cb:f8:89:ac:3f:2b:1d:0a:c4:bc:
         22:20:a6:cb:05:f7:78:31:53:54:6c:6f:9f:58:c9:61:ad:cf:
         e9:16:b1:63:1a:d7:ff:a7:95:6d:75:fb:71:9d:3a:dc:76:08:
         19:f5:05:6d:83:08:08:80:63:16:06:56:a5:2b:85:a6:98:00:
         c3:97:92:da:49:c2:aa:62:ea:c6:96:4f:4e:25:80:bb:10:ce:
         71:be:fd:65:01:1b:ee:9e:4e:e6:bb:80:c5:a7:09:aa:3c:e5:
         69:80:dd:a2:5d:41:9d:e7:00:41:bc:cb:32:d8:75:51:5b:f1:
         b6:60:5f:e3:4b:f5:97:85:01:0e:1d:0a:52:ab:af:5a:c6:ad:
         74:e2:1a:07:f4:36:76:e0:2b:22:a6:d0:1e:71:ec:5d:b4:50:
         ee:6c:49:8b:2b:1e:8e:86:9f:d0:f1:21:90:70:01:58:d1:86:
         f9:5e:bc:9f:44:83:eb:b1:80:f5:1d:ba:b4:8e:f4:bc:1f:d3:
         05:ff:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:06 2024 by rpki-client on console-ams.rpki-client.org