Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32332d3233203d3e203338373533.roa
File:                     34352e3131352e36362e302f32332d3233203d3e203338373533.roa (raw, json)
Hash identifier:          Ooj1ChW8XvXVlHBNJ7rnMWwA/6ys4mLotG+xY2Vzq+U=
Subject key identifier:   4D:EB:6C:37:85:40:95:23:32:96:D2:CA:5D:C7:53:F5:45:6B:15:B9
Certificate issuer:       /CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
Certificate serial:       435933F2048DFF80672E43C646A50095312792B1
Authority key identifier: 11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32332d3233203d3e203338373533.roa
Signing time:             Tue 02 Jul 2024 08:03:18 +0000
ROA not before:           Tue 02 Jul 2024 07:58:18 +0000
ROA not after:            Tue 01 Jul 2025 08:03:18 +0000
asID:                     38753
IP address blocks:        45.115.66.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl
                          rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:59:33:f2:04:8d:ff:80:67:2e:43:c6:46:a5:00:95:31:27:92:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C9BA28534BA44999B4BA5D6B0F28E568DF6E14
        Validity
            Not Before: Jul  2 07:58:18 2024 GMT
            Not After : Jul  1 08:03:18 2025 GMT
        Subject: CN=4DEB6C37854095233296D2CA5DC753F5456B15B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:35:6a:02:1c:ec:09:8d:28:00:0c:76:58:35:
                    56:53:1e:55:67:d4:41:b1:51:fe:ee:12:50:cf:48:
                    8f:ab:5d:f3:bf:61:8f:4f:86:df:1d:b4:30:d0:77:
                    e3:ba:b7:a8:6c:f2:1d:62:15:06:53:c5:8e:4e:d9:
                    d5:a9:43:2c:61:a0:3c:8e:13:73:7a:f9:e9:90:4b:
                    4b:9f:47:6d:e8:08:32:7f:eb:47:94:e0:39:12:9b:
                    15:95:27:95:12:69:52:74:18:e6:8d:e5:14:52:d2:
                    c4:3e:59:2e:36:e7:f8:e0:21:eb:69:1c:95:dc:5b:
                    f1:f3:ea:47:a0:62:18:fc:ab:1b:cb:6e:18:eb:af:
                    67:ae:99:bf:11:94:d3:8d:49:06:57:c1:37:9d:35:
                    71:00:fc:f8:34:c5:72:45:3c:30:c5:e7:15:64:5a:
                    9b:23:d8:bf:bb:f5:a0:d0:a4:0a:a8:62:ac:e5:47:
                    96:a3:6a:75:f4:ef:84:f6:ac:b8:e0:02:d7:44:c4:
                    4b:a3:09:d7:bf:dd:a9:29:f6:c0:67:48:b2:5d:7e:
                    8f:73:3f:33:b7:5f:3e:81:bb:c7:7f:9a:a4:08:5e:
                    c4:fa:ac:20:5b:ce:7b:89:90:d2:bc:60:1e:67:d3:
                    81:ee:26:26:fc:ae:b5:b8:67:8f:9f:16:e8:96:88:
                    33:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:6C:37:85:40:95:23:32:96:D2:CA:5D:C7:53:F5:45:6B:15:B9
            X509v3 Authority Key Identifier:
                keyid:11:C9:BA:28:53:4B:A4:49:99:B4:BA:5D:6B:0F:28:E5:68:DF:6E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11C9BA28534BA44999B4BA5D6B0F28E568DF6E14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a06b6673-47a1-45e5-b6c2-42ab8b476249/0/34352e3131352e36362e302f32332d3233203d3e203338373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:12:ff:02:62:c1:7d:b7:c9:da:ce:bd:32:7f:76:c4:77:0d:
         10:9f:75:b5:8f:d2:87:51:75:3b:d9:7e:3d:84:11:67:23:4f:
         d9:03:8e:f3:6a:bd:3d:ff:0b:94:26:e4:fb:13:2f:fa:4a:88:
         30:c0:7e:1f:a4:72:a4:c6:0c:a2:d2:59:1a:f5:12:a0:9f:17:
         6c:4f:b2:15:d2:5f:f7:dc:39:70:82:d7:ab:7a:6c:a8:46:13:
         3b:78:7c:ec:8f:6e:b6:8d:ae:63:c4:c4:f5:7f:a6:3f:5f:f5:
         d9:91:db:4b:46:75:5b:f8:c9:26:fd:8c:a5:e4:52:39:78:10:
         ea:cd:3d:aa:04:85:67:d5:1e:db:74:cf:62:83:21:a0:51:80:
         25:29:22:ef:dd:48:5d:74:22:25:b1:a0:b8:bd:91:c8:b2:ac:
         9f:88:fd:2c:f2:6e:8b:fa:a9:c8:a3:d3:a1:f2:c6:ab:1d:81:
         c4:dd:fa:f0:38:81:d0:65:fd:91:59:be:f5:fa:19:37:bf:1f:
         64:1e:3e:80:5b:75:7d:39:df:1e:e2:f2:30:9a:6c:68:d7:dd:
         ec:84:77:e4:cf:fb:a2:eb:d6:25:b5:49:40:36:44:df:7f:ca:
         07:c1:65:17:6d:ce:4c:16:9a:1a:e7:5f:1d:f5:cd:d2:d1:60:
         bc:45:88:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org