Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS61977.roa
File:                     AS61977.roa (raw, json)
Hash identifier:          3JQJBjBejTyhZfX6l5zP0GmHOSlBCPSDqeJshAdWrf0=
Subject key identifier:   1E:AB:B3:36:7F:62:9F:69:F9:34:5A:8C:D3:24:0D:F5:81:DC:DE:AC
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       63D6D711A30B8AAC53BAB913610427002951C325
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS61977.roa
Signing time:             Tue 20 Aug 2024 02:31:53 +0000
ROA not before:           Tue 20 Aug 2024 02:26:53 +0000
ROA not after:            Tue 19 Aug 2025 02:31:53 +0000
asID:                     61977
IP address blocks:        2a07:54c4:1752::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 04:12:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d6:d7:11:a3:0b:8a:ac:53:ba:b9:13:61:04:27:00:29:51:c3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Aug 20 02:26:53 2024 GMT
            Not After : Aug 19 02:31:53 2025 GMT
        Subject: CN=1EABB3367F629F69F9345A8CD3240DF581DCDEAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:a2:c2:fb:8f:78:fd:ca:f4:bb:fe:f3:6f:
                    23:a5:92:fb:03:5e:49:d1:61:08:bb:80:6f:7e:5a:
                    18:6d:50:49:48:ea:19:ee:60:ce:c9:ab:fb:60:4c:
                    fa:3b:c3:c0:dc:4f:a3:b4:d4:9a:df:6f:e0:3d:e7:
                    6c:1b:0c:c1:77:58:a4:f4:5f:ba:9b:1c:6a:23:87:
                    c8:6e:3d:62:17:bc:12:a5:b4:6f:51:14:d0:c4:88:
                    65:df:d5:8f:cb:25:61:5a:e8:99:08:ac:11:ff:a0:
                    9c:2f:4f:12:df:c5:ed:12:91:a8:5f:90:08:33:f6:
                    6e:56:5b:72:d3:20:a3:bf:f7:4e:cf:29:0d:3a:d2:
                    25:b2:16:e7:3d:c7:8a:84:c7:f8:82:5c:a4:19:5d:
                    9b:a8:9c:14:97:42:70:a4:4b:0e:89:36:47:b3:45:
                    66:b3:65:3e:d7:dd:93:02:b8:e6:7a:f1:81:52:5b:
                    9d:1e:b5:8c:b4:96:5d:7e:22:1d:69:0d:b1:a9:f2:
                    8e:45:cc:63:c6:6c:ff:8b:9f:87:e6:48:ad:d3:ab:
                    33:bb:6b:7a:7c:b2:e1:f6:d3:6c:ae:4b:c5:40:70:
                    46:75:0f:9d:c3:f2:35:ee:51:50:df:2f:b3:ec:34:
                    86:4d:b8:0c:3f:c2:d6:08:ed:40:a0:32:ed:f7:17:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AB:B3:36:7F:62:9F:69:F9:34:5A:8C:D3:24:0D:F5:81:DC:DE:AC
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS61977.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:1752::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:13:76:d1:95:c7:56:60:0b:b6:da:81:0e:8d:0c:1b:a7:32:
         03:98:18:87:dd:d8:11:62:90:7c:ae:40:88:01:e8:f2:16:78:
         20:41:74:19:66:f9:18:7c:67:e8:00:f5:ab:68:32:89:52:16:
         f7:f5:29:ff:c1:f8:2f:a7:2d:15:5f:d2:60:44:5a:31:93:ea:
         c6:33:83:8b:3f:65:09:d8:f8:e0:35:d1:a7:53:0f:f5:c9:95:
         95:3f:1f:bc:35:d4:c7:88:7b:6f:a2:6c:e3:2a:d7:c6:96:1e:
         31:1a:a8:13:52:e2:e4:3e:e6:48:6a:2a:0a:fc:3e:ff:69:72:
         fa:b6:92:65:f4:7c:b3:e0:ec:d6:50:88:89:b6:ac:ee:36:38:
         86:31:26:1b:58:2f:23:c5:6f:4a:e8:84:3a:8b:22:d3:fb:42:
         6f:e7:7b:2b:82:df:8e:c5:d6:9a:25:9d:89:8c:f6:69:70:f8:
         fc:f3:12:f1:48:76:bb:cc:3a:00:34:05:71:69:8e:da:43:0a:
         8f:75:c7:05:a1:35:f2:66:79:03:68:7e:01:3c:bc:93:27:76:
         6e:70:6e:8d:09:7e:a6:a8:35:0d:fe:9b:54:c5:39:4d:ba:b3:
         c1:0d:6c:db:6e:45:3c:3c:f4:fe:ce:c1:96:4f:19:29:d6:f5:
         34:64:5d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:36 2024 by rpki-client on console-ams.rpki-client.org