Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS57483.roa
File:                     AS57483.roa (raw, json)
Hash identifier:          Ughe9X3S4AKgA4txVjay4io6n0Oin1poVe9+ndTieMU=
Subject key identifier:   7C:C9:4D:F5:B8:D8:FD:B8:26:80:CE:8F:D4:24:51:6A:48:3D:47:BA
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       72E1A1D8CD72336B84B55504CFC6B75EECDB85C2
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS57483.roa
Signing time:             Mon 28 Oct 2024 11:51:11 +0000
ROA not before:           Mon 28 Oct 2024 11:46:11 +0000
ROA not after:            Mon 27 Oct 2025 11:51:11 +0000
asID:                     57483
IP address blocks:        2a0a:6044:7100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:e1:a1:d8:cd:72:33:6b:84:b5:55:04:cf:c6:b7:5e:ec:db:85:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Oct 28 11:46:11 2024 GMT
            Not After : Oct 27 11:51:11 2025 GMT
        Subject: CN=7CC94DF5B8D8FDB82680CE8FD424516A483D47BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:16:e5:99:aa:d8:28:ad:ea:95:3e:aa:e4:51:
                    c5:38:e1:81:de:2d:bc:66:8c:22:11:ff:74:85:d2:
                    42:47:1b:23:09:1a:66:bc:83:6d:b1:60:73:7f:00:
                    d0:35:02:0e:c8:39:3a:68:63:c3:46:24:cb:fe:0c:
                    43:d0:2d:3c:e0:1f:77:a5:ef:96:fd:21:4e:b4:39:
                    18:d7:4e:54:01:02:a7:f8:96:5e:a5:17:0e:9e:31:
                    90:48:e8:bf:e8:72:2f:74:61:c2:4c:6b:e4:62:45:
                    fa:02:2c:d3:44:42:83:41:4c:5e:90:92:c8:3a:98:
                    b0:8d:af:dd:40:70:e3:a3:9c:c5:d9:f1:d7:02:fd:
                    d2:e9:47:93:a9:35:24:3a:d3:a5:41:7e:6f:40:2b:
                    ba:da:32:55:b8:c6:dd:8c:6d:35:cb:f0:ad:5f:57:
                    3b:9c:3e:39:56:50:2f:5d:a0:b3:f9:ad:d6:02:45:
                    b1:0f:e5:d1:08:13:01:06:17:2d:39:97:bc:ee:3a:
                    c7:45:0e:bd:9f:8f:56:44:86:aa:73:fc:75:eb:b9:
                    6a:04:64:3b:56:bd:9c:cf:56:df:3d:d2:4b:e9:27:
                    0f:d8:56:e5:57:50:01:e8:78:78:c6:68:7c:1e:90:
                    f4:e8:bc:62:c5:c9:3f:a2:2b:c5:01:77:ff:de:c9:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C9:4D:F5:B8:D8:FD:B8:26:80:CE:8F:D4:24:51:6A:48:3D:47:BA
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS57483.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:7100::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:c5:34:8e:92:48:52:14:0b:e6:b5:0f:34:87:52:1a:a9:30:
         e8:8f:2b:c8:a7:7b:26:31:f8:e9:04:7d:7f:8c:61:7d:a7:6c:
         a1:41:70:56:70:58:cc:43:27:c1:a2:95:e9:0e:e3:99:bc:67:
         ea:4e:73:1f:1c:a8:99:87:9d:fd:64:03:19:a7:97:57:2e:a7:
         6b:16:19:c3:70:db:6e:c9:96:73:79:27:72:e3:7b:3f:b0:ae:
         c4:33:5e:69:0a:6c:7a:5c:66:70:94:0d:e0:f9:1a:e3:eb:08:
         68:80:3e:5b:d9:10:5c:ae:4c:f8:07:6e:85:1c:1a:0b:0d:3e:
         6f:2e:f7:04:9e:88:4f:98:02:0b:a4:61:d0:a4:ef:80:cc:c8:
         15:8f:06:2c:cd:94:e6:31:b3:e0:89:a3:af:28:9c:a9:d4:d8:
         74:8f:bd:8e:12:ce:c0:63:45:5a:cb:1a:c0:66:12:1f:64:14:
         59:d6:03:4e:6b:f2:75:5c:5b:65:2a:d1:05:79:ab:e0:1e:71:
         0a:0c:b0:d2:0a:54:50:d2:5c:83:4d:4c:b3:6c:ed:66:ff:f5:
         7d:03:46:15:31:9f:59:f7:ee:87:b4:69:56:fc:e9:fe:12:ae:
         ea:62:a4:0f:54:87:4c:17:07:3f:1a:a2:4f:92:af:13:cd:10:
         a8:2c:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:43 2024 by rpki-client on console-ams.rpki-client.org