Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3231363a3a2f34382d3438203d3e20313337333239.roa
File:                     323430323a343834303a3231363a3a2f34382d3438203d3e20313337333239.roa (raw, json)
Hash identifier:          X7IrSSG9YAQPvAbaoPfRI3sQKCdFyvGY2Evc5TQUXN8=
Subject key identifier:   B5:6B:5D:FE:CE:C4:17:4A:5A:8E:60:AB:F5:7D:15:93:9B:AC:80:DC
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       6A8E48A3617E5E724EF96C76C226918951DB9AA2
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3231363a3a2f34382d3438203d3e20313337333239.roa
Signing time:             Tue 28 May 2024 19:40:52 +0000
ROA not before:           Tue 28 May 2024 19:35:52 +0000
ROA not after:            Tue 27 May 2025 19:40:52 +0000
asID:                     137329
IP address blocks:        2402:4840:216::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 11:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8e:48:a3:61:7e:5e:72:4e:f9:6c:76:c2:26:91:89:51:db:9a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: May 28 19:35:52 2024 GMT
            Not After : May 27 19:40:52 2025 GMT
        Subject: CN=B56B5DFECEC4174A5A8E60ABF57D15939BAC80DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:51:88:7f:fa:c8:16:c4:e8:bc:16:fd:77:11:
                    2f:59:7e:9d:35:3f:6b:3c:02:40:9b:78:10:c9:9a:
                    8b:16:d6:7e:6d:0e:4f:8d:cf:67:16:eb:a6:7f:67:
                    fe:b5:91:2a:30:c1:58:41:27:fd:fa:83:1f:36:2e:
                    77:8a:94:04:53:a9:28:59:67:78:7a:3d:82:31:3d:
                    d4:44:16:e1:d7:eb:62:49:56:d3:47:83:58:5d:a6:
                    b8:95:37:a1:e0:54:b3:e5:1a:b9:b3:2b:8d:fc:86:
                    6c:17:be:f5:af:3b:e7:c0:9a:ee:d3:54:51:8b:f7:
                    c3:74:5f:30:18:76:18:03:d0:46:ee:95:9a:a6:8a:
                    36:51:2e:37:d7:e8:14:2b:cd:e0:96:30:4f:55:47:
                    d6:23:7f:90:68:bc:a8:5b:7b:36:7d:18:fb:ed:11:
                    da:7e:70:e1:98:99:45:ff:1e:6d:fd:31:9a:db:69:
                    6b:db:ed:80:06:84:c5:18:c6:15:78:c2:31:61:34:
                    d0:dc:59:0f:1b:52:2d:66:08:03:be:9a:d5:1f:45:
                    db:75:4e:50:ec:5b:75:59:37:5b:ee:ad:24:6b:62:
                    1b:75:08:6c:de:47:26:01:eb:af:aa:4f:eb:fb:f1:
                    bf:17:44:20:5d:40:e5:c6:c6:f0:4f:95:47:80:a9:
                    1e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6B:5D:FE:CE:C4:17:4A:5A:8E:60:AB:F5:7D:15:93:9B:AC:80:DC
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/323430323a343834303a3231363a3a2f34382d3438203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4840:216::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:78:dd:d4:bb:80:a3:a6:d1:73:61:8a:a6:11:06:81:58:26:
         c3:12:56:af:7c:87:29:76:5a:ec:4e:c4:ed:b3:56:3e:7c:73:
         14:c1:4c:56:e6:26:b9:ec:8c:3d:2a:7c:7b:6a:1e:7d:5e:5f:
         9a:97:48:7e:9a:9c:34:53:a3:c5:a0:43:fa:54:72:f3:ab:b0:
         94:a1:a7:87:b7:52:33:7b:60:b7:2a:be:e1:fd:54:46:f1:6d:
         9d:5a:9e:92:74:04:32:87:c7:81:39:94:51:d5:02:c7:62:4a:
         b5:5c:5d:f6:5d:13:53:3a:f3:51:89:1d:a1:d3:b5:31:6f:d2:
         9c:42:14:7b:cf:6e:24:01:b1:05:0b:72:cd:0c:8d:9f:9b:5b:
         f4:66:4b:43:52:6b:0b:18:f0:76:69:be:20:98:51:58:cf:8b:
         07:40:98:5b:32:8b:5c:b1:99:36:92:6f:d0:06:a1:73:7a:5d:
         a3:7a:53:17:d2:d6:04:2f:53:ed:ca:eb:7c:3b:55:78:d7:7e:
         94:a2:83:80:1a:ce:07:76:36:5e:2b:c8:c2:f9:5b:23:7a:0f:
         89:56:a5:e2:46:8a:6d:fa:15:2b:99:6f:f6:a0:16:d1:8d:7f:
         cb:0d:a7:65:92:38:93:15:8a:ad:ce:bf:ca:3b:d4:80:a9:94:
         be:95:fc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 11:47:20 2024 by rpki-client on console-ams.rpki-client.org