Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa
File:                     323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa (raw, json)
Hash identifier:          K2f80uiRinIih6KL9BQ2fzO5wuFAOWEiX62GTQYcsj4=
Subject key identifier:   73:2E:5E:05:E8:AA:86:A2:00:F1:69:34:8E:29:BC:E0:C8:4F:F3:61
Certificate issuer:       /CN=C79C17C4F5C843791A7028B499932A84B65CD399
Certificate serial:       0EF67E54EFA6507AC791E02FFFE02BDCECAA6821
Authority key identifier: C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa
Signing time:             Wed 03 Jul 2024 11:27:48 +0000
ROA not before:           Wed 03 Jul 2024 11:22:48 +0000
ROA not after:            Wed 02 Jul 2025 11:27:48 +0000
asID:                     152800
IP address blocks:        2001:df3:dfc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl
                          rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f6:7e:54:ef:a6:50:7a:c7:91:e0:2f:ff:e0:2b:dc:ec:aa:68:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C79C17C4F5C843791A7028B499932A84B65CD399
        Validity
            Not Before: Jul  3 11:22:48 2024 GMT
            Not After : Jul  2 11:27:48 2025 GMT
        Subject: CN=732E5E05E8AA86A200F169348E29BCE0C84FF361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:50:55:05:b1:aa:6c:93:b3:97:37:90:38:
                    5d:84:bc:d9:a9:0c:94:d3:60:36:c2:19:b8:f9:ec:
                    f3:7c:aa:1c:26:88:25:71:97:df:c7:37:89:bd:5d:
                    a2:7c:ec:0d:8c:24:b1:20:92:fe:b7:a5:cc:2b:d1:
                    f1:78:41:50:b4:fc:45:3c:7e:d3:be:53:f9:1e:b2:
                    7c:7a:da:5b:e7:3d:56:1c:ef:12:64:57:90:16:9a:
                    24:11:25:a0:ff:e1:4e:0e:f3:44:a9:1e:19:70:ff:
                    a3:d3:c9:82:31:26:3f:c6:a7:36:40:6f:67:24:81:
                    fa:13:1c:eb:2e:d2:8b:cb:90:c6:7f:e1:39:cc:84:
                    75:7d:23:1d:89:ce:62:8e:1b:d7:4c:2c:74:5c:02:
                    e5:20:73:8c:fa:31:74:19:db:4f:fd:71:64:5a:6d:
                    1f:a3:32:b5:96:d5:28:e9:6b:bf:c6:59:23:0d:82:
                    10:22:2f:db:03:62:12:06:58:28:86:c5:ad:e4:3a:
                    ad:b7:19:45:4e:b5:de:53:03:78:9d:7e:73:ee:81:
                    97:06:47:09:0e:e6:bd:7a:02:96:14:55:f6:e4:48:
                    79:7b:19:e5:b2:54:d7:2a:54:b2:ff:59:c5:1e:e7:
                    2d:76:de:92:9f:f3:03:23:1c:97:11:25:8e:d3:1e:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2E:5E:05:E8:AA:86:A2:00:F1:69:34:8E:29:BC:E0:C8:4F:F3:61
            X509v3 Authority Key Identifier:
                keyid:C7:9C:17:C4:F5:C8:43:79:1A:70:28:B4:99:93:2A:84:B6:5C:D3:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/C79C17C4F5C843791A7028B499932A84B65CD399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C79C17C4F5C843791A7028B499932A84B65CD399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/1/323030313a6466333a646663303a3a2f34382d3438203d3e20313532383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:dfc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:39:f7:c7:c1:d7:25:69:5d:52:f5:cd:0b:58:81:c4:bd:ed:
         80:71:1d:47:fe:6f:c2:15:d8:e6:91:a3:1f:08:5d:45:e6:5b:
         27:50:71:e3:32:ad:1a:92:2a:02:79:a6:57:8e:4a:0e:05:68:
         45:e6:51:3c:d6:b5:cf:fd:02:64:b5:d9:42:7a:f3:dd:64:f6:
         4a:f0:a9:46:05:9a:b4:24:ec:f9:83:dd:6b:17:41:a0:43:3d:
         f2:55:75:11:b2:4c:63:3b:49:91:5e:e3:e5:f7:0f:35:e1:5d:
         24:44:04:0e:94:b9:4a:8f:b2:ab:47:3a:d4:ac:29:6a:1b:d4:
         c7:35:eb:2d:79:7c:55:01:68:35:30:79:6f:8f:e0:83:77:b3:
         20:43:ef:2d:6d:94:3a:fc:d3:20:b2:ce:71:0e:ea:65:85:5e:
         ec:06:34:79:fc:6e:df:92:dc:3d:eb:ee:16:5e:4c:4e:a8:d3:
         3d:a9:b0:4e:93:f8:f7:eb:4c:8b:b9:9a:77:7e:f7:a1:d4:ea:
         b9:08:41:ea:22:ca:21:44:d2:58:d9:51:16:35:bb:dc:57:d1:
         bb:76:de:31:05:69:76:5c:ea:4f:df:4c:38:dd:97:2e:e4:b9:
         f7:86:93:4c:c2:a3:af:94:29:8d:42:9c:d5:48:b5:64:4a:e2:
         a2:6a:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:29:57 2024 by rpki-client on console-fra.rpki-client.org