Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50755.roa
File:                     AS50755.roa (raw, json)
Hash identifier:          5H2uGVBVuQmOc2nZV/3cPDoAwD0pO1AvEBenv1YpWSQ=
Subject key identifier:   8D:74:F4:7C:BD:2A:18:B9:A0:C1:65:CD:EC:AC:FF:D1:55:CD:51:BE
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       34EFD6231BDBA6E963A26D0DFF859B8B26DEA884
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50755.roa
Signing time:             Tue 20 Aug 2024 02:31:56 +0000
ROA not before:           Tue 20 Aug 2024 02:26:56 +0000
ROA not after:            Tue 19 Aug 2025 02:31:56 +0000
asID:                     50755
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 02:53:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ef:d6:23:1b:db:a6:e9:63:a2:6d:0d:ff:85:9b:8b:26:de:a8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:56 2024 GMT
            Not After : Aug 19 02:31:56 2025 GMT
        Subject: CN=8D74F47CBD2A18B9A0C165CDECACFFD155CD51BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:f7:bc:75:1d:ed:3e:07:ec:c2:c9:c0:09:
                    96:e8:3c:19:79:6a:23:24:71:06:08:94:c0:7c:ce:
                    fa:6f:86:1f:2a:d2:d2:b6:47:b2:a1:5b:2d:23:64:
                    af:26:6f:0d:55:d1:ce:2a:72:ef:47:ef:bf:c9:12:
                    1f:fe:7f:78:36:a6:c6:49:df:11:88:f3:c6:06:26:
                    d2:19:54:2b:d0:9d:f0:56:96:c6:e6:d1:72:7d:0d:
                    bc:90:93:60:04:e5:37:c6:6d:0e:22:8e:86:88:cf:
                    0b:83:4e:77:70:ab:cb:10:f2:5f:7d:10:4f:fe:88:
                    e3:ee:06:ed:86:eb:86:fa:dd:17:46:67:d3:16:ca:
                    71:cd:93:13:42:2f:d4:3a:4e:9f:d4:be:7b:e7:4a:
                    4c:3e:7c:26:c3:69:3d:ec:f5:a7:ff:15:42:ef:74:
                    cc:4b:70:87:f4:29:5d:ab:e7:6b:d7:61:d1:90:f4:
                    99:2a:d2:80:fd:5f:02:0e:d6:29:40:95:1c:96:85:
                    d7:e2:6d:22:ab:9c:cc:26:db:b8:4b:62:97:99:89:
                    86:48:cf:23:53:77:61:5a:55:02:d9:70:38:cd:19:
                    f0:50:d4:11:f0:91:8d:c9:7d:37:41:e2:ea:67:00:
                    e0:86:59:20:92:23:31:bc:e5:36:bc:58:66:0b:96:
                    b1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:74:F4:7C:BD:2A:18:B9:A0:C1:65:CD:EC:AC:FF:D1:55:CD:51:BE
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS50755.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:fa:b6:81:fc:3f:fc:5b:33:cc:f5:be:66:26:08:e9:9c:d2:
         31:28:ff:91:42:95:66:50:79:fa:25:b3:6f:8d:ca:72:c2:17:
         c6:ab:0e:ff:01:e5:73:53:87:28:1a:b9:05:48:5b:ce:bd:13:
         bf:0a:72:68:89:1f:56:bf:2f:88:c5:17:fa:e0:33:3c:c4:97:
         ce:5e:2f:81:47:cf:30:60:1c:f2:e6:38:f3:79:ba:94:99:9d:
         b2:55:c4:61:59:84:50:b9:db:3d:ac:1c:7a:34:dc:65:42:92:
         0a:65:ba:00:39:2d:c1:75:e1:68:a4:f5:e2:2c:5f:5a:de:01:
         d9:82:d4:24:2b:4d:32:ed:0b:1a:2a:cf:42:b8:52:71:25:e6:
         d2:d8:a8:f2:ee:2a:c9:68:09:62:13:89:f9:20:47:26:05:f2:
         12:c8:95:bd:cd:7e:41:b9:5f:3d:4d:97:dc:70:d8:52:e0:2b:
         b4:f6:4d:59:30:77:16:42:cd:1f:5d:54:f0:94:97:23:b6:9b:
         41:dc:ba:14:3b:06:6c:54:8f:d4:4d:67:6c:6c:50:83:18:73:
         e6:05:84:de:0c:ef:8e:dc:dc:1d:b3:20:6e:b0:08:36:c1:6d:
         ad:9f:6f:ef:37:9e:10:0f:ee:2d:dc:95:62:9c:b7:02:60:5e:
         18:98:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 08:29:56 2024 by rpki-client on console-ams.rpki-client.org