Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa
File:                     323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa (raw, json)
Hash identifier:          e+Kb04avWKuWDW267Nz2n9AP7oyT8KXyK1iwLy/osmc=
Subject key identifier:   77:C5:EE:AB:C7:0B:93:EE:1F:BD:4B:9C:CC:CE:16:EC:0D:CA:F2:81
Certificate issuer:       /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63
Certificate serial:       6AFC5CBA58507CCBFCE6816FD41E80EF262B3A8D
Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa
Signing time:             Thu 18 Jan 2024 12:35:19 +0000
ROA not before:           Thu 18 Jan 2024 12:30:19 +0000
ROA not after:            Thu 16 Jan 2025 12:35:19 +0000
asID:                     138142
IP address blocks:        2001:df7:af00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl
                          rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 14:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fc:5c:ba:58:50:7c:cb:fc:e6:81:6f:d4:1e:80:ef:26:2b:3a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63
        Validity
            Not Before: Jan 18 12:30:19 2024 GMT
            Not After : Jan 16 12:35:19 2025 GMT
        Subject: CN=77C5EEABC70B93EE1FBD4B9CCCCE16EC0DCAF281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:b5:b0:28:4f:e7:2a:2d:0f:1a:0c:ca:a0:
                    ab:f1:2a:70:c0:3f:83:5a:f5:ee:89:72:0c:87:6a:
                    e3:4e:af:98:72:d4:93:2a:fd:b2:70:42:72:4f:4c:
                    e6:d8:4f:1f:4f:3b:ec:9c:9f:dc:cf:af:83:e4:c9:
                    ac:d0:1d:d0:9d:b2:16:2e:ae:c5:39:f8:e4:c9:6d:
                    8c:c9:84:d4:90:ae:27:60:c0:78:67:2c:f0:7e:78:
                    cc:63:eb:d8:15:d9:48:ea:e7:98:7c:e5:13:5c:74:
                    4f:4f:f0:56:07:4a:d5:79:3b:49:15:6c:da:1e:f7:
                    9a:f6:ff:5f:4c:07:06:52:8c:3c:88:33:2e:c7:77:
                    50:2d:16:d2:f0:0f:de:73:eb:7f:c4:22:c1:6c:ce:
                    06:dc:29:ed:2d:22:f3:66:d2:cd:e2:b3:cc:0d:2d:
                    96:71:26:87:dd:39:a6:d3:98:c5:47:7e:13:7b:4e:
                    e1:46:4e:b8:5b:b9:0a:2f:aa:c0:09:e1:0d:d0:8d:
                    1c:b4:77:d1:be:5d:15:62:e7:ea:68:d3:3e:58:9b:
                    47:5c:61:a1:a2:2a:7d:7d:37:c0:da:e5:f9:a8:be:
                    e8:1d:83:06:fb:99:b0:96:34:7d:54:f8:f3:93:99:
                    d4:41:73:4a:64:24:b2:fe:2c:c5:76:1a:98:c0:7b:
                    63:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C5:EE:AB:C7:0B:93:EE:1F:BD:4B:9C:CC:CE:16:EC:0D:CA:F2:81
            X509v3 Authority Key Identifier:
                keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/323030313a6466373a616630303a3a2f34382d3438203d3e20313338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:af00::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:1a:63:91:fe:c5:eb:07:58:ea:65:5c:d1:bc:92:a1:ed:37:
         07:05:1d:5d:cd:be:61:dc:9e:b7:50:51:c6:55:98:1f:29:45:
         0b:ac:01:52:6a:d7:06:9e:43:ba:a1:ff:24:1d:ab:b5:1e:87:
         22:c3:6d:b6:fa:41:3d:f6:e1:ee:eb:9b:ee:c5:ff:31:3d:34:
         70:68:47:c7:13:62:6e:92:99:09:d2:eb:bc:66:ca:38:d9:ca:
         39:1c:35:a9:7d:7d:63:ce:b5:5e:06:f6:82:f8:cb:0b:57:61:
         bf:29:8e:d7:98:8f:a3:76:32:fc:de:01:42:9f:a2:30:9b:3d:
         f0:41:51:41:fc:24:45:86:aa:26:27:96:fa:29:58:a6:26:af:
         0e:37:5c:e0:9b:51:0c:77:66:81:1d:1c:08:ce:f9:fa:6e:78:
         71:14:75:75:16:30:1f:8c:80:ba:88:24:c6:d9:4c:18:82:76:
         90:bf:b4:73:69:23:0a:4f:ba:20:95:14:09:16:8e:4b:c0:46:
         85:93:82:df:a4:2b:98:05:e9:4f:af:da:de:53:04:56:29:ba:
         2d:10:ee:9e:33:7b:9e:91:d7:59:13:ec:b4:59:92:85:3b:40:
         f8:59:5e:57:7f:2b:71:2e:cd:e7:bf:d6:a6:c1:fb:7b:ca:c0:
         bc:a2:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:31 2024 by rpki-client on console-fra.rpki-client.org