Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa
File:                     323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa (raw, json)
Hash identifier:          +VlXS2VIlTc73nto/y+qtk4ed7kZckDuKss6oKks8D0=
Subject key identifier:   EA:AF:BB:2E:F4:FE:54:8F:69:49:F6:2B:B9:DF:98:CB:AD:7F:78:5B
Certificate issuer:       /CN=580F61C23A4857BE23095E060FE36642F86DA6E8
Certificate serial:       5C5620F72F3CFFEAD809CBB95E0FD0B6515B2551
Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa
Signing time:             Sat 30 Sep 2023 18:00:01 +0000
ROA not before:           Sat 30 Sep 2023 17:55:01 +0000
ROA not after:            Sat 28 Sep 2024 18:00:01 +0000
asID:                     147087
IP address blocks:        2001:df7:c180::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl
                          rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 23:38:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:56:20:f7:2f:3c:ff:ea:d8:09:cb:b9:5e:0f:d0:b6:51:5b:25:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8
        Validity
            Not Before: Sep 30 17:55:01 2023 GMT
            Not After : Sep 28 18:00:01 2024 GMT
        Subject: CN=EAAFBB2EF4FE548F6949F62BB9DF98CBAD7F785B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:08:df:f8:9d:ee:c9:fa:e6:c3:77:09:11:fb:
                    08:a7:28:2f:74:2a:ff:77:64:1e:39:41:a1:ae:14:
                    f4:31:cf:cf:08:b8:58:56:bf:23:19:d1:83:08:23:
                    8c:c2:61:78:e2:9f:06:73:f9:7c:aa:44:48:6c:33:
                    1c:19:06:5e:c1:7d:df:26:da:6a:14:79:c5:5e:49:
                    fa:6b:53:63:35:22:8a:58:22:e8:b7:ed:a2:9b:b6:
                    f8:c5:ed:77:f1:a5:70:8a:78:97:b2:01:92:b5:2e:
                    4b:f9:9f:51:48:72:28:f6:9a:2c:ef:8c:c5:9b:c6:
                    ad:29:51:44:e7:6b:14:74:9f:56:04:e0:90:b4:5b:
                    6a:e9:34:a6:4d:6d:4b:d1:c3:b6:9e:cd:d3:07:85:
                    16:c4:90:ab:41:a3:47:44:74:f9:dc:d9:29:f5:93:
                    0b:b8:54:20:d7:64:24:b2:ae:13:4e:95:95:8a:ab:
                    d7:0a:01:ce:e9:18:00:1b:43:b6:d1:31:57:4d:ed:
                    09:4f:4b:c8:8a:23:9f:04:c5:27:17:9c:e1:67:d9:
                    07:0a:6e:5a:8c:7c:9b:68:17:1b:20:ea:6e:28:84:
                    8b:62:1e:a9:22:64:4b:a5:a3:2f:0b:f8:b3:5c:69:
                    4f:57:cd:38:20:27:03:aa:2d:2d:85:d0:57:53:44:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AF:BB:2E:F4:FE:54:8F:69:49:F6:2B:B9:DF:98:CB:AD:7F:78:5B
            X509v3 Authority Key Identifier:
                keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/323030313a6466373a633138303a3a2f34382d3438203d3e20313437303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:c180::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:51:4b:1d:53:18:eb:d8:f3:77:03:92:ae:7c:b2:04:03:ca:
         a3:b4:bf:71:f1:d1:75:41:16:e9:4e:c3:6d:8f:5c:42:b1:93:
         ff:ff:6a:e1:f3:cf:65:76:ad:fb:da:7f:83:2e:60:f0:8e:cf:
         f7:17:a9:3d:c2:27:fb:a3:74:1e:c9:26:24:79:8d:6e:bc:63:
         30:a5:88:6d:58:a3:a8:30:d0:da:a7:34:8a:45:2a:e7:45:1c:
         d2:bb:d3:01:2b:75:4f:c5:a9:d8:58:19:65:63:e7:89:4b:e6:
         bd:24:fd:0d:c8:78:e6:49:91:a7:44:a0:eb:a6:bb:1a:62:a1:
         77:6c:ec:8f:9e:b1:fd:8a:da:6b:be:06:9a:07:3e:42:83:37:
         24:da:50:f4:97:34:2c:7f:c8:1b:20:1b:cd:ac:3d:82:d8:a2:
         f4:c2:7c:56:4c:5c:3d:ea:22:4f:a9:9e:1c:67:33:9e:f0:fa:
         57:a7:b3:67:c8:1f:31:12:c7:24:da:90:8b:b0:bf:1a:9a:7f:
         85:50:fc:b4:0d:be:0c:77:2e:ea:f4:cd:bd:97:18:07:dd:47:
         2d:c8:4f:f1:26:6e:53:2f:e2:4d:6e:30:22:52:f5:9b:a0:a3:
         2c:e6:f7:3d:0e:f6:6f:71:fa:11:f0:fc:40:af:45:d7:14:2d:
         fc:68:d8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 23:52:40 2024 by rpki-client on console-fra.rpki-client.org