Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa
File:                     32372e35342e3131372e302f32342d3234203d3e203538333936.roa (raw, json)
Hash identifier:          rIx6Bk5fA7i4DMtKMuGnAoOJsm/ssWHdcZrIdGBvULc=
Subject key identifier:   2A:A0:B3:58:71:DF:05:8D:FE:ED:26:E9:09:72:17:5D:80:97:76:D6
Certificate issuer:       /CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
Certificate serial:       7084EF93E71EBF00755850B4FA9608E902694D3F
Authority key identifier: 01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa
Signing time:             Wed 03 Jan 2024 08:02:04 +0000
ROA not before:           Wed 03 Jan 2024 07:57:04 +0000
ROA not after:            Wed 01 Jan 2025 08:02:04 +0000
asID:                     58396
IP address blocks:        27.54.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl
                          rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 11:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:84:ef:93:e7:1e:bf:00:75:58:50:b4:fa:96:08:e9:02:69:4d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=019C4E26EEC252EA61FBB09FD856CDD057CEAD8C
        Validity
            Not Before: Jan  3 07:57:04 2024 GMT
            Not After : Jan  1 08:02:04 2025 GMT
        Subject: CN=2AA0B35871DF058DFEED26E90972175D809776D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:35:61:5a:5e:76:d0:07:72:6a:41:59:5a:7b:
                    e8:c5:0e:18:10:39:33:69:a5:a7:58:e9:49:e6:e6:
                    ea:10:59:35:90:24:54:36:ac:80:34:d4:6d:19:ed:
                    ca:d6:5b:5e:aa:1c:72:7f:03:e0:a0:b4:3b:0d:74:
                    dd:c2:7c:0b:89:88:cb:4e:d1:9a:45:4f:4a:e0:e1:
                    b3:af:05:6e:5e:12:91:9f:e7:e0:a4:c4:e6:20:8b:
                    d2:2e:ab:83:e3:c5:99:3e:8c:0b:40:0e:23:b9:3f:
                    4b:a0:a5:cd:dd:83:dc:28:f8:9b:3a:00:c4:ce:32:
                    cf:9c:a2:00:75:c1:84:62:fb:38:31:b6:56:01:66:
                    30:5b:23:10:a0:36:37:63:36:fb:df:57:20:0b:75:
                    d9:9e:ca:e7:b9:c0:d4:e4:b8:51:f1:ec:0f:72:a2:
                    8b:21:ac:de:a9:10:b0:ef:8f:cc:d8:59:bc:56:d8:
                    36:b5:64:22:16:d3:fe:41:9e:a6:6f:4e:9e:33:53:
                    47:1e:be:d0:6c:f3:9d:21:99:ab:aa:9a:47:ae:f9:
                    e4:da:49:65:5a:ab:6e:8d:37:48:85:9d:16:84:32:
                    ea:0a:ea:77:bc:a6:5b:f9:41:38:c9:d9:f6:6d:e6:
                    f0:91:42:13:8b:0a:fd:29:2c:ed:28:14:a3:b5:8b:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A0:B3:58:71:DF:05:8D:FE:ED:26:E9:09:72:17:5D:80:97:76:D6
            X509v3 Authority Key Identifier:
                keyid:01:9C:4E:26:EE:C2:52:EA:61:FB:B0:9F:D8:56:CD:D0:57:CE:AD:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/019C4E26EEC252EA61FBB09FD856CDD057CEAD8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd5c4715-282e-457f-b89e-041bf9110af8/0/32372e35342e3131372e302f32342d3234203d3e203538333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.54.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:79:01:a1:85:a9:2c:a4:36:bd:00:b1:d3:74:2b:96:1e:
         3d:7c:9b:7e:c4:4c:ca:ff:04:ae:87:8a:55:73:5e:c7:b0:82:
         6f:46:7d:89:b1:e8:94:59:e6:26:1e:16:b0:e9:59:78:10:cf:
         28:14:d4:98:89:12:ad:88:91:62:dd:f6:60:67:7b:32:37:26:
         a5:86:7a:a9:7e:c0:40:63:be:c0:d4:89:1e:11:25:47:0b:8b:
         c0:be:ca:66:f5:55:cf:28:eb:2d:79:47:90:7e:26:43:bd:b1:
         7e:8c:c2:15:81:8f:a3:db:a2:68:c9:6e:6a:5f:41:e1:20:0d:
         7c:2b:d8:1a:cd:78:12:bb:a0:3a:31:1f:68:14:e3:49:64:30:
         43:b0:0a:54:fa:fd:a6:86:e3:a6:1d:b4:e9:a2:89:68:61:53:
         ca:dc:22:f8:02:40:b5:72:39:8d:38:1e:17:c8:94:b4:af:84:
         cf:01:7d:a8:68:52:36:97:d3:5a:ee:95:98:f5:52:d2:65:d0:
         67:3d:ea:00:9f:a8:e6:91:17:bc:66:98:d2:b0:34:db:d6:04:
         bc:b0:3b:86:8b:86:a1:15:71:fa:4b:f2:f3:a0:c6:d7:4e:b5:
         c1:1a:32:3c:15:d3:60:46:16:b6:d9:ed:72:9b:db:5a:d0:a5:
         f5:64:2c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:41 2024 by rpki-client on console-ams.rpki-client.org