Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33342e302f32342d3234203d3e203338333230.roa
File:                     3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          TRdQNFvUFDZ2jZZZ77M1mhHYN7ONjLDzCGyHqv+fkck=
Subject key identifier:   0B:3F:4D:2F:47:6D:67:C1:99:69:B8:C7:BE:8C:94:97:B2:EF:B8:EF
Certificate issuer:       /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial:       47B787FEE21F573A180DA6D99B04F5EC1F3000E0
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33342e302f32342d3234203d3e203338333230.roa
Signing time:             Mon 26 Feb 2024 06:19:51 +0000
ROA not before:           Mon 26 Feb 2024 06:14:51 +0000
ROA not after:            Mon 24 Feb 2025 06:19:51 +0000
asID:                     38320
IP address blocks:        175.103.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
                          rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:b7:87:fe:e2:1f:57:3a:18:0d:a6:d9:9b:04:f5:ec:1f:30:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
        Validity
            Not Before: Feb 26 06:14:51 2024 GMT
            Not After : Feb 24 06:19:51 2025 GMT
        Subject: CN=0B3F4D2F476D67C19969B8C7BE8C9497B2EFB8EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:84:a0:0c:d0:54:e3:4b:dc:55:52:36:c7:
                    f2:0a:e4:54:ca:0d:4a:43:eb:38:6c:3f:45:71:72:
                    69:fc:88:ed:d6:5f:27:9d:ac:4d:fd:1a:8b:51:70:
                    75:02:6a:4a:a6:88:c2:66:95:0a:b8:38:2a:a1:fa:
                    65:07:45:5a:28:9c:70:10:ad:85:39:f8:d7:70:a0:
                    95:be:1b:ac:b5:80:b1:06:99:f4:23:be:02:b8:40:
                    9b:e8:05:7d:54:81:23:8a:22:3a:2b:67:0c:b5:6f:
                    60:13:7b:c1:6d:2d:3f:75:9f:f2:62:1c:02:43:1d:
                    2e:f1:ae:95:a6:f5:ab:2a:a5:f5:b9:dc:61:f4:72:
                    94:af:8a:dd:71:c9:72:2e:58:4b:11:34:bf:f7:a5:
                    e1:64:bb:73:62:60:48:87:db:98:8e:8d:36:40:d3:
                    3b:47:77:ef:45:4e:7a:77:8f:70:32:32:36:4e:58:
                    07:8d:49:81:e7:25:b1:8d:30:ea:f0:67:9b:3e:65:
                    d4:09:86:0f:95:d3:d5:e7:70:91:1f:c9:65:c3:2c:
                    33:e3:1f:d1:ed:66:88:fe:b3:89:77:d0:25:26:95:
                    c9:17:e3:4f:9e:72:66:f9:ca:3a:28:f9:b3:25:9e:
                    72:8b:75:7a:3c:4a:86:db:08:68:e7:91:2b:4e:8f:
                    4f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3F:4D:2F:47:6D:67:C1:99:69:B8:C7:BE:8C:94:97:B2:EF:B8:EF
            X509v3 Authority Key Identifier:
                keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33342e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:d1:48:2a:5a:a0:93:28:1c:2b:0a:1f:e1:61:53:18:04:c5:
         ba:26:af:53:cf:41:1c:8b:5d:b5:c8:77:bf:63:22:15:6b:20:
         99:f5:c7:27:9e:f6:ac:0e:18:39:6a:9c:fd:e3:fc:1b:3b:56:
         ea:30:70:0f:e0:52:5f:3e:47:00:0a:42:94:92:6f:74:12:e8:
         6c:6e:5d:28:23:64:62:9a:32:41:f0:4d:30:3c:ed:e5:93:70:
         60:fa:c3:14:07:e6:67:5d:8a:67:c1:36:ec:aa:8a:dd:d4:99:
         29:78:ff:11:9b:b2:d7:29:6f:06:72:f1:3a:9f:91:6a:ea:9a:
         2e:49:6d:ee:40:fc:dc:2f:8e:11:b5:75:76:04:56:89:bb:55:
         f9:b7:38:40:16:26:0e:ab:1e:4c:2b:63:30:90:09:da:bb:e2:
         39:e5:42:24:71:20:3b:fa:a6:1c:e8:f3:bf:43:d9:6f:3f:1f:
         d4:cb:be:3c:a9:5c:1c:35:a6:8f:e8:a9:40:3a:c7:b6:2c:cc:
         e0:9f:5c:bd:aa:4b:ac:eb:c6:2e:0d:83:d8:7d:33:83:5f:17:
         f8:17:62:8c:84:59:c0:6c:07:24:8d:f2:99:5d:c1:a2:f7:53:
         5e:9a:57:02:f8:48:d7:3c:b5:7e:bb:0d:df:a6:a5:79:be:ea:
         64:6e:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org