Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS205848.roa
File:                     AS205848.roa (raw, json)
Hash identifier:          y52LjfiIVxbSR/O/TM0ftCK3/oMECunU6TKstDGTA0E=
Subject key identifier:   80:B2:1B:65:CB:50:37:B2:1D:1D:83:BF:40:12:2C:F0:AC:4F:D5:C7
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       19926F707CB0B0B638DF6DB959E84A03282623D4
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS205848.roa
Signing time:             Tue 20 Aug 2024 02:31:57 +0000
ROA not before:           Tue 20 Aug 2024 02:26:57 +0000
ROA not after:            Tue 19 Aug 2025 02:31:57 +0000
asID:                     205848
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:92:6f:70:7c:b0:b0:b6:38:df:6d:b9:59:e8:4a:03:28:26:23:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:57 2024 GMT
            Not After : Aug 19 02:31:57 2025 GMT
        Subject: CN=80B21B65CB5037B21D1D83BF40122CF0AC4FD5C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:cf:16:77:99:3f:0d:95:eb:fc:89:fa:ce:
                    49:03:ea:38:d1:21:87:aa:6a:96:8d:a7:7e:bc:c2:
                    60:e2:c4:69:f3:da:d7:2d:96:25:a5:86:13:76:65:
                    db:12:7b:39:b0:b2:c5:20:a7:47:7f:74:03:8f:fe:
                    dc:e3:e7:1b:6f:f3:d4:8b:c8:e0:3b:69:c1:46:02:
                    cf:ef:04:fe:7e:c6:0d:a2:12:f9:a7:c8:99:e6:23:
                    81:9f:61:c9:bb:74:1a:97:02:58:a8:6a:55:b7:e1:
                    d6:f7:da:89:bc:18:65:fc:4d:3f:14:2f:2d:e2:98:
                    09:cf:3d:1b:4c:b9:3a:19:80:e6:77:27:64:5b:62:
                    df:ae:08:f1:8d:c3:c8:1e:65:59:1e:5b:a8:f0:86:
                    ad:ff:e9:81:09:ca:71:e9:bf:b4:7c:ef:1a:90:33:
                    ca:9a:04:46:ad:36:0b:00:3e:89:c5:77:9f:0a:d9:
                    5a:a4:b9:e6:0f:9c:73:f0:21:be:6d:94:67:ca:c5:
                    4d:20:b1:90:f3:71:c4:6b:d3:99:f4:ef:73:57:82:
                    ac:1b:16:67:55:38:99:55:e4:fc:2d:fb:0e:46:7b:
                    dc:6e:b2:f9:84:59:cd:ca:91:a2:d8:9f:16:ba:d5:
                    98:6e:86:aa:26:dd:af:6c:92:23:7b:58:c5:20:ed:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B2:1B:65:CB:50:37:B2:1D:1D:83:BF:40:12:2C:F0:AC:4F:D5:C7
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS205848.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:a5:43:3a:0d:01:c6:ec:66:be:cb:39:a4:87:dd:88:50:59:
         8f:43:d0:6d:3a:d0:98:c4:47:79:62:25:4e:2b:45:17:c0:e3:
         10:b7:e4:bc:8a:e3:fc:58:c3:c3:c1:72:e1:b9:32:4e:6d:1b:
         32:22:44:7b:cf:28:ac:cb:e4:ed:4f:1c:d5:a7:04:9d:9c:21:
         22:e8:97:37:96:2b:8c:c7:05:20:bf:16:49:ab:22:49:e8:da:
         f1:7c:0d:9e:05:f8:fb:ec:a2:f3:5f:e2:0e:26:1b:e4:0e:77:
         45:0e:82:8b:88:47:19:f2:72:c9:4c:4e:eb:ed:7c:1c:b6:2b:
         86:09:74:d1:8e:ab:3d:66:54:ea:42:47:a3:9e:a2:fd:a9:68:
         bc:79:c4:45:6c:93:2c:d0:78:ef:af:d5:a5:9f:48:85:e5:8f:
         58:74:c5:9b:48:32:f4:cd:44:8d:b9:d6:ed:e0:12:dc:ae:8f:
         a9:d5:a0:a5:c9:60:f9:0e:c5:4d:2b:d6:35:ee:ab:75:d0:72:
         60:eb:9a:79:4c:97:81:15:3e:0f:9c:1d:10:c1:1a:5e:52:a6:
         a7:95:fa:38:cf:b4:7b:6a:f5:8d:78:9e:e3:77:db:d8:6c:d7:
         5c:73:fb:20:ec:30:75:47:38:bd:a5:62:eb:47:04:25:d3:5f:
         6b:71:cc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org