Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa
File:                     323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (raw, json)
Hash identifier:          2Yejf2TO5nElHp7FxuVEDkIuxrfFmsnyZagtKDJIO88=
Subject key identifier:   8E:E3:51:CE:5F:32:C8:28:20:5C:A2:0D:9E:06:3F:49:4B:BE:B4:BD
Certificate issuer:       /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16
Certificate serial:       284F8C27F73BDF0535ADE76E9AD5C9ACF4872598
Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa
Signing time:             Mon 01 Jul 2024 01:05:19 +0000
ROA not before:           Mon 01 Jul 2024 01:00:19 +0000
ROA not after:            Mon 30 Jun 2025 01:05:19 +0000
asID:                     139457
IP address blocks:        2001:df2:4b80::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl
                          rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 08:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:4f:8c:27:f7:3b:df:05:35:ad:e7:6e:9a:d5:c9:ac:f4:87:25:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16
        Validity
            Not Before: Jul  1 01:00:19 2024 GMT
            Not After : Jun 30 01:05:19 2025 GMT
        Subject: CN=8EE351CE5F32C828205CA20D9E063F494BBEB4BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c4:93:f7:99:ba:ab:62:8a:5f:f2:f8:3c:cf:
                    e2:4a:af:40:c3:c2:00:d0:9d:de:fc:cc:f5:26:7b:
                    db:02:49:9c:7f:69:cb:18:90:f7:61:80:40:12:60:
                    23:84:a3:1e:d9:b4:fd:28:72:34:cd:51:ca:e8:15:
                    5d:e5:26:50:48:de:7d:46:97:bf:9f:2e:d4:9d:26:
                    ce:12:c8:2f:fc:2e:00:3c:34:14:d4:9b:35:5c:6c:
                    87:21:f2:c0:89:e9:12:25:7f:87:87:55:ae:bb:28:
                    5a:06:1a:1d:ee:92:69:73:2b:ef:50:10:cb:3d:88:
                    14:e5:80:94:28:ad:94:19:ae:ba:f2:24:03:ae:40:
                    cf:8e:ce:e1:45:67:49:2c:65:cb:76:b1:7c:be:ac:
                    9b:48:a2:62:5c:d6:43:1b:3f:41:05:71:32:66:c1:
                    e8:15:0f:77:95:e2:8e:f7:0f:84:f6:14:c2:d5:01:
                    f2:f8:d6:60:99:60:43:31:01:13:83:fa:49:85:87:
                    6b:c3:c9:82:1f:b3:58:79:27:d4:2f:c5:0b:d7:a2:
                    5f:b5:43:27:d8:08:80:ce:95:dd:76:20:30:e6:bf:
                    4d:b1:59:00:2d:ef:4c:57:4e:63:2a:7c:15:ff:cd:
                    64:6c:06:fc:9e:af:31:a8:1c:a3:03:64:78:c7:cc:
                    c3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E3:51:CE:5F:32:C8:28:20:5C:A2:0D:9E:06:3F:49:4B:BE:B4:BD
            X509v3 Authority Key Identifier:
                keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:4b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:d5:45:de:07:0c:8b:f4:c4:9e:ef:54:74:97:64:a1:37:0d:
         49:1d:fc:75:ed:6d:cf:b8:ca:20:f1:60:81:b3:70:69:76:82:
         ed:27:11:63:9c:f3:dd:d4:8b:c3:60:b9:d0:e4:d4:ea:f7:d7:
         ed:a3:d3:e6:08:0d:6d:f4:cf:17:a0:60:64:ec:77:46:11:8e:
         ae:6e:5f:89:6e:5d:f6:67:92:a1:56:06:2e:58:ca:73:36:27:
         01:44:5d:7d:2e:9b:1b:7d:e0:e8:4d:66:71:2f:8e:4d:3c:06:
         c0:fa:72:24:7b:d7:2f:5b:32:9c:4f:34:47:37:37:b0:7b:57:
         83:e0:4c:b3:34:d2:f3:18:2e:8b:fc:8f:1a:f3:ae:a0:e0:87:
         bb:80:97:4a:32:7c:8f:9d:a2:eb:75:ff:a1:2c:05:07:0f:f8:
         d8:b5:6f:51:b9:3d:50:0e:c8:dd:1a:cc:ef:99:8e:98:a8:c4:
         f2:7d:be:7f:ca:c8:cb:bb:e6:8e:e2:cb:23:49:64:24:99:b4:
         9c:2a:2d:15:63:d8:45:de:7b:de:03:5c:8c:e8:ad:c1:09:ff:
         5a:70:6e:b3:52:44:4a:b2:8c:fc:f9:09:42:d0:84:79:0d:7a:
         6b:21:2f:69:25:f4:67:ab:1e:a6:e7:12:88:b5:1d:f4:3b:7a:
         5a:4c:44:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org