Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa
File:                     3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa (raw, json)
Hash identifier:          AjQWrzHL79ZgGYoMIgBN0STrzOvHGkHtvWRV6Sqos+E=
Subject key identifier:   27:7A:78:93:8C:AB:73:DB:E4:DA:CF:3A:0C:6C:F6:24:2A:55:A8:9B
Certificate issuer:       /CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441
Certificate serial:       12FE89DF4378A87FF0E68C530509C77A75093E3B
Authority key identifier: 92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa
Signing time:             Tue 10 Dec 2024 02:06:26 +0000
ROA not before:           Tue 10 Dec 2024 02:01:26 +0000
ROA not after:            Tue 09 Dec 2025 02:06:26 +0000
asID:                     153082
IP address blocks:        160.22.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl
                          rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:fe:89:df:43:78:a8:7f:f0:e6:8c:53:05:09:c7:7a:75:09:3e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BD4E7FB69716E8F64947A59903AFF77CCBE441
        Validity
            Not Before: Dec 10 02:01:26 2024 GMT
            Not After : Dec  9 02:06:26 2025 GMT
        Subject: CN=277A78938CAB73DBE4DACF3A0C6CF6242A55A89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:26:aa:a5:49:91:40:b8:b4:fd:14:e2:f0:
                    ad:73:84:77:07:e2:dd:02:2d:e7:16:b3:9a:a6:c4:
                    bf:b4:90:9f:16:5e:99:d8:92:4b:0f:98:d5:ff:7c:
                    87:31:90:bc:f8:94:41:98:43:f1:72:aa:88:68:5b:
                    a2:7b:74:15:2c:89:e8:70:d5:c0:17:8d:89:47:eb:
                    59:ab:26:bd:7c:bb:17:ab:e0:10:f2:46:b5:8e:6c:
                    7d:d7:d0:20:68:48:d8:a6:93:86:c1:83:68:ce:27:
                    e1:a7:af:e2:91:2c:43:26:04:3b:36:ac:b2:48:be:
                    26:df:38:3e:e8:15:ab:d5:1f:1b:70:ec:8f:a0:6f:
                    55:97:15:23:cf:41:af:6b:28:df:32:52:d6:e1:2b:
                    c0:aa:0c:56:2a:f9:32:a1:f8:a3:03:8c:85:43:b1:
                    ab:a3:33:8e:a4:8c:ef:fe:e7:04:fe:90:83:9e:36:
                    7d:c1:98:29:84:27:33:2d:6b:0c:f8:45:28:c0:e9:
                    90:37:6f:aa:a1:27:82:3b:e8:44:c0:0c:2c:ad:d8:
                    db:5d:07:46:a4:95:6f:16:e7:1c:2a:b9:0a:3e:e7:
                    ad:d7:b5:9e:dd:09:2e:86:77:77:ed:37:57:92:05:
                    22:2a:4b:45:5f:c0:fb:7d:1c:81:01:17:c7:d5:32:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:78:93:8C:AB:73:DB:E4:DA:CF:3A:0C:6C:F6:24:2A:55:A8:9B
            X509v3 Authority Key Identifier:
                keyid:92:BD:4E:7F:B6:97:16:E8:F6:49:47:A5:99:03:AF:F7:7C:CB:E4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/92BD4E7FB69716E8F64947A59903AFF77CCBE441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/92BD4E7FB69716E8F64947A59903AFF77CCBE441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acdb2bf8-beb3-4cc9-83ad-2c9d575f94af/0/3136302e32322e3231392e302f32342d3234203d3e20313533303832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:2a:5c:6a:08:f3:25:8e:a0:a5:3d:a4:14:6f:fb:25:90:
         e3:58:17:18:dd:7a:01:77:41:87:4b:a0:7e:cb:e3:bb:a1:43:
         d7:a0:13:ed:61:05:08:6b:95:19:7c:f8:50:04:ab:59:6a:c5:
         dc:4b:2d:a3:d2:bd:d3:f3:91:34:4c:21:eb:27:ab:72:c8:c0:
         f8:7f:8d:39:bf:ff:2b:e6:98:03:30:3b:30:91:59:e7:60:e6:
         99:d8:1d:4b:83:c7:7c:7b:a8:5b:3a:1e:d6:56:76:aa:5f:b3:
         f4:fd:ec:f2:5a:31:54:09:f9:6f:3e:3b:00:29:e8:8f:38:e5:
         2c:7f:cd:5a:67:5b:ff:80:d1:4d:7c:e1:74:b9:c4:65:d2:5f:
         9f:41:1d:0c:4a:7a:81:54:9f:07:24:35:24:30:0a:92:f4:1a:
         18:b8:e0:e3:bb:b3:51:ff:57:94:54:c4:56:5d:58:41:f9:7b:
         be:aa:95:28:0c:49:a3:a0:d8:97:b6:c2:07:41:45:cc:4c:bc:
         fa:b6:23:ac:1d:b8:e9:bf:f4:22:b6:55:c3:df:46:6a:e0:0a:
         24:d3:8e:7b:4c:d8:59:21:06:8f:65:c4:e9:8b:a2:5a:29:66:
         f0:50:7a:22:cb:6c:ed:60:8e:14:fc:5f:44:a7:52:24:7f:fe:
         b7:aa:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:36:52 2025 by rpki-client on console.sobornost.net