Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS60379.roa
File:                     AS60379.roa (raw, json)
Hash identifier:          /ff95Bpsqj6hhyCkZillpHEzuYsQ8mQjt+GRQ1jC4to=
Subject key identifier:   11:AF:58:07:A8:6C:C3:63:8E:86:68:7D:8A:3F:4D:89:72:23:20:0D
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       3850CA2F61FD3D9419B9F81640E0CF6D5E9E252C
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS60379.roa
Signing time:             Tue 19 Sep 2023 02:14:59 +0000
ROA not before:           Tue 19 Sep 2023 02:09:59 +0000
ROA not after:            Tue 17 Sep 2024 02:14:59 +0000
asID:                     60379
IP address blocks:        2a07:54c2:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:50:ca:2f:61:fd:3d:94:19:b9:f8:16:40:e0:cf:6d:5e:9e:25:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Sep 19 02:09:59 2023 GMT
            Not After : Sep 17 02:14:59 2024 GMT
        Subject: CN=11AF5807A86CC3638E86687D8A3F4D897223200D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:71:b4:b1:65:85:f7:fa:75:09:97:a4:f3:9b:
                    af:b1:dc:5b:36:06:cd:a1:59:ce:18:d3:9d:a4:7b:
                    ab:34:c9:37:e7:11:b2:f0:30:c2:21:99:1b:d5:97:
                    b3:9b:80:cc:a7:8a:18:6d:50:5e:a7:0e:b7:fe:c3:
                    d3:20:89:ab:19:0e:ea:44:71:4a:92:60:9e:ce:26:
                    c6:4b:be:9c:44:9f:fc:9e:f4:06:a8:94:8c:13:3c:
                    ce:c1:30:be:5d:0b:6c:eb:a5:81:fb:ad:d2:84:d8:
                    ef:05:17:15:69:af:5d:d0:23:83:db:5c:68:8e:14:
                    3c:87:46:06:21:26:5a:df:65:d3:2b:10:33:54:19:
                    32:1d:f7:23:67:93:15:bd:cb:5d:0d:8f:f9:89:7b:
                    d3:e6:4a:d0:7d:8d:79:6b:bd:cb:ad:f3:34:33:cf:
                    f3:69:57:ca:d4:94:b1:bc:f7:bd:e2:a3:46:9b:80:
                    cd:c3:e7:62:43:a1:40:1f:59:e2:d7:cd:82:5c:31:
                    6c:72:fa:7e:d3:4f:2e:ee:99:b8:7f:67:d1:69:81:
                    7b:02:bd:89:26:d5:63:c3:98:24:fe:d8:c0:c5:4a:
                    68:e2:2a:b5:52:fa:44:3d:09:6d:f8:13:2c:e9:17:
                    41:dc:cb:b7:98:fb:a4:80:c6:3d:cc:b3:3d:08:76:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AF:58:07:A8:6C:C3:63:8E:86:68:7D:8A:3F:4D:89:72:23:20:0D
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS60379.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c2:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:2f:87:ee:87:fa:3e:06:58:5a:81:9e:c3:f4:42:e0:8e:de:
         45:52:5b:61:c7:e2:24:28:f2:a1:67:31:d2:e3:f8:fd:7a:ed:
         58:5d:3f:b0:50:31:65:1a:31:0f:7e:f5:c8:70:ea:a7:4a:86:
         a5:28:dd:f6:a1:10:0f:8d:f6:8a:71:a0:a6:01:2d:2a:14:9e:
         d8:0a:97:35:dc:9d:f9:e5:03:a6:3e:1b:b6:79:1e:40:fe:2a:
         1c:26:8f:af:a9:f5:de:9a:00:3b:68:8c:f6:b5:f8:19:24:0a:
         7b:19:32:f6:e3:38:27:66:c3:76:c3:6b:fb:c6:54:19:e2:21:
         51:ed:40:b9:9b:fa:dd:6e:8e:58:88:6a:15:24:99:87:e0:eb:
         7a:a2:1c:81:02:c5:21:d8:d7:4b:72:de:4d:e9:43:e3:b2:85:
         bb:89:18:ac:e6:b9:d4:7c:9e:99:b1:58:fe:d5:6b:a2:58:02:
         30:ed:32:6f:8e:ec:93:a1:9a:76:13:2d:3e:6c:eb:f4:12:67:
         4d:40:d5:44:74:87:e8:d9:e2:d5:aa:24:ec:c6:c9:7f:cc:7b:
         ee:67:0b:24:b7:9f:dc:2e:8c:88:80:4d:b1:55:4f:f8:ab:ad:
         01:e1:cf:34:79:27:c9:7b:74:08:22:1f:8c:02:00:5c:20:06:
         8f:fc:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:55:15 2024 by rpki-client on console-ams.rpki-client.org