Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa
File:                     3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (raw, json)
Hash identifier:          uR53pbwW9P8hqVOeVN0hgPpqYO4PeD2g8LQ/VFiv7kA=
Subject key identifier:   26:82:41:F8:66:8B:EA:D9:50:30:A6:0E:A4:15:3B:33:A8:E2:59:BA
Certificate issuer:       /CN=6176447D40001B20E000D73A3B5E66B74A431374
Certificate serial:       5300201EA655722660C9C9E7945D945FEFB907F5
Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa
Signing time:             Fri 14 Jun 2024 05:45:33 +0000
ROA not before:           Fri 14 Jun 2024 05:40:33 +0000
ROA not after:            Fri 13 Jun 2025 05:45:33 +0000
asID:                     152788
IP address blocks:        160.19.144.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl
                          rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 23:47:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:00:20:1e:a6:55:72:26:60:c9:c9:e7:94:5d:94:5f:ef:b9:07:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374
        Validity
            Not Before: Jun 14 05:40:33 2024 GMT
            Not After : Jun 13 05:45:33 2025 GMT
        Subject: CN=268241F8668BEAD95030A60EA4153B33A8E259BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0e:b7:d7:20:11:f5:57:fb:14:58:f3:3c:3d:
                    b2:95:60:ed:49:6c:ef:5b:fe:09:09:e1:ca:8b:c8:
                    c3:3f:df:d8:ba:5c:06:4c:7f:69:a8:1f:13:b5:de:
                    4a:3d:a4:40:df:d8:0a:7c:91:40:b2:f9:78:78:64:
                    4e:e9:10:15:69:ec:95:31:c6:85:47:de:82:24:10:
                    f0:0a:a5:2c:1c:84:11:9c:22:ac:dc:d9:4a:e6:6f:
                    a7:48:51:9f:d4:29:86:3e:af:1e:53:d8:78:ed:a5:
                    20:fa:83:11:94:78:a1:fa:cb:95:69:1e:ee:43:e3:
                    74:56:49:9b:fb:b7:16:2e:61:d2:82:83:0a:64:41:
                    d4:c1:d5:a3:e0:14:f5:e1:5b:bb:32:a5:81:6c:1e:
                    e3:54:92:5d:86:25:da:bb:91:85:ea:f5:b9:3f:7b:
                    42:c6:2e:f8:92:c7:3d:6a:7b:4d:94:f1:fa:b0:b5:
                    8d:65:40:1d:b0:02:cc:f3:6f:34:d8:64:6b:f1:4f:
                    ee:ee:3b:2b:d6:4e:18:f6:9d:af:2b:1f:2b:26:c8:
                    74:6d:f9:84:9c:48:e9:a0:19:93:a7:82:f3:5d:e5:
                    e7:8f:ce:74:ef:e6:52:9c:4a:3e:58:48:16:56:98:
                    44:0c:83:2f:66:a3:30:13:df:7a:ae:ae:ae:a9:9f:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:82:41:F8:66:8B:EA:D9:50:30:A6:0E:A4:15:3B:33:A8:E2:59:BA
            X509v3 Authority Key Identifier:
                keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:01:7f:b6:d0:6d:17:54:27:15:bb:89:5f:64:88:6a:3e:
         e1:a9:6a:bb:81:b3:0f:00:85:9f:2c:eb:56:42:8a:88:11:b5:
         1e:5a:05:8f:b2:b5:26:27:cb:28:c8:86:ff:84:6b:94:d8:ae:
         ad:15:45:ce:24:fb:4c:4f:6b:9a:60:5f:02:ea:df:d2:a6:0b:
         ad:2c:f5:cc:29:2b:f7:c1:43:d2:3f:73:dc:a8:71:d7:9a:d8:
         1e:ab:de:8f:f3:59:85:2c:25:73:5c:14:d1:53:db:28:a2:bb:
         d0:17:62:3e:30:d2:17:15:04:07:86:5f:3b:a6:88:93:1b:de:
         a4:b4:7b:ec:14:25:7b:c4:a1:dc:07:c5:53:78:be:d6:22:ff:
         4a:f9:b6:ae:92:11:e0:3f:0a:bf:f1:98:b9:68:69:78:04:8a:
         a9:7c:8c:97:32:22:fe:6c:d5:ec:72:d4:2c:68:f3:5e:b1:ba:
         a4:a7:96:37:8f:a8:df:66:d0:8d:af:e8:2f:6a:b4:0b:65:aa:
         ef:e6:64:09:13:f9:5e:63:9a:03:1b:ae:7d:6c:52:87:32:c5:
         52:a0:b5:72:e7:44:52:9c:a2:ae:d7:56:ee:8a:ef:d8:a4:36:
         a8:8c:34:9b:86:cf:8f:e0:46:fe:b4:79:05:08:31:2e:19:89:
         36:9e:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org