Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa
File:                     AS198342.roa (raw, json)
Hash identifier:          RBz/5MVBw+RIqf3cWJYfRc+NU8xEr+6e3/NesCIupDs=
Subject key identifier:   CD:38:47:76:33:95:14:B2:4E:4F:67:6B:11:18:84:FF:96:2F:94:50
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       65969A63DB11BC990AE6E6E85FA3B377A92112A8
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa
Signing time:             Thu 01 Feb 2024 00:35:47 +0000
ROA not before:           Thu 01 Feb 2024 00:30:47 +0000
ROA not after:            Thu 30 Jan 2025 00:35:47 +0000
asID:                     198342
IP address blocks:        2a07:54c1:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Oct 2024 19:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:96:9a:63:db:11:bc:99:0a:e6:e6:e8:5f:a3:b3:77:a9:21:12:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Feb  1 00:30:47 2024 GMT
            Not After : Jan 30 00:35:47 2025 GMT
        Subject: CN=CD384776339514B24E4F676B111884FF962F9450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:bd:7c:c7:82:ce:5a:31:f9:0d:b9:64:f5:
                    99:14:a4:19:07:fe:03:b8:bc:34:9f:6b:67:7f:e6:
                    5a:15:cb:2c:c7:ef:32:86:c8:fe:27:42:9d:de:37:
                    7d:fe:d6:5f:ad:22:94:af:9f:01:c5:b9:a8:88:88:
                    30:79:8a:7a:19:b2:9f:6e:86:3a:a6:aa:8e:cb:b8:
                    c0:a7:0c:22:90:39:7a:2e:a2:77:cf:b9:32:b8:f1:
                    1d:93:e4:93:12:03:9a:b3:4b:35:77:b6:ba:26:24:
                    c5:38:c9:62:cf:f5:32:b2:68:79:5e:18:f7:56:7c:
                    ad:ca:f0:a5:f7:72:c0:44:27:e3:0a:8b:85:13:6c:
                    2e:48:91:12:d8:7a:4f:97:63:11:ad:6c:45:ba:60:
                    ce:6a:2b:13:02:1b:4b:89:50:37:c7:d2:e4:c4:02:
                    8d:fe:4f:59:ea:f9:1d:ad:fd:41:61:90:ea:8e:c5:
                    9a:89:7d:08:64:ae:bd:2c:b8:1b:94:55:af:52:7d:
                    d3:75:ab:59:29:bd:7f:ed:36:d8:83:fe:0f:af:72:
                    83:09:08:f0:cc:c1:83:ed:63:61:ef:3a:77:51:e3:
                    1a:8f:64:6f:f1:6d:35:aa:f1:4e:11:d4:67:bd:ef:
                    bb:d5:7d:fe:56:35:b2:29:7c:50:be:d4:db:83:18:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:38:47:76:33:95:14:B2:4E:4F:67:6B:11:18:84:FF:96:2F:94:50
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS198342.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:6e:ef:90:1d:a5:99:83:30:71:8c:16:ab:00:ba:58:af:fa:
         50:b9:c1:69:de:b0:19:3c:2b:34:d2:d5:96:b2:d7:ba:36:48:
         e3:ca:53:4e:f7:c5:8e:7c:15:e5:f9:0a:9a:c9:9e:92:28:13:
         47:f1:c4:82:85:cc:5a:2a:82:a4:cd:98:48:3c:8f:45:d9:f9:
         6c:f0:73:6c:77:6b:89:04:00:c9:e6:c2:0a:05:f5:80:09:50:
         29:9b:3b:33:bd:8f:0b:66:72:85:22:0f:bb:0d:58:25:0f:52:
         f7:d5:6d:6e:cf:83:54:54:8d:3c:c5:7d:da:9c:4a:9b:f5:17:
         f1:b1:d7:81:ce:dd:09:8d:8f:37:e5:d9:ef:b3:ea:f7:a0:ab:
         25:15:a6:e9:93:cc:2b:84:b9:5f:6e:14:cc:55:a9:98:59:27:
         79:61:40:21:3b:bb:22:3f:5c:fc:9e:5e:48:b1:00:17:5a:78:
         66:ed:d7:64:cf:f3:54:94:a1:50:c7:be:06:5b:17:c8:50:dd:
         ff:f5:68:2b:ad:53:a8:81:70:f7:c0:06:32:f9:49:0f:76:49:
         9b:fc:1e:cb:8e:c0:ea:60:48:e2:1e:8a:30:29:bf:32:48:97:
         17:9e:7a:cc:bb:68:71:c7:c4:0b:a5:8d:1d:d2:9b:c8:c9:1f:
         65:86:be:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:17:28 2024 by rpki-client on console-ams.rpki-client.org