Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS8075.roa
File:                     AS8075.roa (raw, json)
Hash identifier:          8YLtIBn2Y5rIJhdPRN72kkeKMGoE2pvTmTMihw75YME=
Subject key identifier:   39:D7:C6:56:09:C8:C2:85:D3:E1:61:DA:9B:95:6A:DA:08:35:66:E4
Certificate issuer:       /CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
Certificate serial:       45C3F82B2E5E742FC4DBDAEFF0A232380EC650EC
Authority key identifier: 41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS8075.roa
Signing time:             Tue 19 Sep 2023 02:14:59 +0000
ROA not before:           Tue 19 Sep 2023 02:09:59 +0000
ROA not after:            Tue 17 Sep 2024 02:14:59 +0000
asID:                     8075
IP address blocks:        2a07:54c4:1756::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Jun 2024 13:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c3:f8:2b:2e:5e:74:2f:c4:db:da:ef:f0:a2:32:38:0e:c6:50:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41F657CF3564F233B977F40ACA5E4BD10E1E2F8E
        Validity
            Not Before: Sep 19 02:09:59 2023 GMT
            Not After : Sep 17 02:14:59 2024 GMT
        Subject: CN=39D7C65609C8C285D3E161DA9B956ADA083566E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:cc:24:25:d9:c6:24:f5:11:86:f1:16:31:
                    52:ba:11:77:14:19:5e:13:10:00:0e:f0:70:d1:b4:
                    64:41:6f:ef:69:5e:fc:e6:b4:da:b2:05:ed:2f:79:
                    45:ea:36:f0:66:9a:0d:65:4b:21:32:8f:d8:80:0f:
                    2c:5a:1a:b3:0d:c2:ff:92:02:4b:2a:90:11:f7:f3:
                    86:70:8f:91:9c:12:c2:eb:00:12:a0:10:a0:30:8d:
                    de:e1:2a:af:fe:20:e0:77:81:3b:95:34:9b:c6:4c:
                    88:fe:a3:a4:0a:08:12:ac:3c:4f:bc:74:13:fa:96:
                    86:eb:b0:d0:04:26:8c:37:8a:9f:6a:20:02:d2:93:
                    68:7d:2b:59:21:14:c5:ca:aa:f4:3e:27:e4:a6:2d:
                    f9:ef:37:e2:3c:6a:e9:52:2c:6d:9e:94:71:35:9f:
                    16:33:43:61:6d:30:02:3c:39:fe:d0:fd:07:b5:dc:
                    c1:fe:a4:35:02:f0:8f:f8:90:c9:05:11:f8:2d:6d:
                    54:ce:20:f1:79:16:e1:d5:03:cf:be:82:78:bb:fe:
                    22:b5:fb:31:92:c1:96:fb:76:2b:50:dc:4b:37:3d:
                    32:ca:04:7e:f2:95:a7:28:0c:83:f0:c5:e5:83:ca:
                    93:d7:c6:ef:0a:d9:77:36:6b:f4:15:47:8f:d9:7e:
                    29:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D7:C6:56:09:C8:C2:85:D3:E1:61:DA:9B:95:6A:DA:08:35:66:E4
            X509v3 Authority Key Identifier:
                keyid:41:F6:57:CF:35:64:F2:33:B9:77:F4:0A:CA:5E:4B:D1:0E:1E:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/AS8075.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c4:1756::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:20:ec:5c:22:12:dc:62:0a:a3:94:26:89:5a:be:03:de:a6:
         00:1b:ae:d4:17:3b:4d:82:82:d0:a0:2a:7f:dc:ad:9c:29:01:
         8f:e0:ec:cc:db:3e:c1:e0:0a:fc:0c:65:75:35:ef:cc:bc:0c:
         6f:04:88:42:ea:d4:2b:29:e3:02:f2:7d:71:d9:71:92:1b:d4:
         23:5a:2c:3c:ef:d3:0d:45:14:dc:e4:10:ec:26:8c:2e:8c:e2:
         e3:36:80:5a:dc:00:46:a9:a2:de:fe:c0:e4:d9:f4:9f:81:f6:
         57:2e:df:53:b8:87:6a:cc:53:11:94:f8:06:a2:a3:e8:3c:97:
         dd:85:8c:e4:a6:5d:0d:58:ba:2e:2e:83:10:a6:28:ea:de:ec:
         7b:fe:22:ac:2e:08:aa:32:aa:55:c9:c0:83:79:72:c4:81:d5:
         c6:a7:e5:14:6f:ef:a1:ca:75:b6:87:f5:10:8f:03:fd:5b:e8:
         20:13:88:c1:88:02:99:be:85:c9:f4:4c:0d:1a:ac:a1:d1:0c:
         11:5e:ac:44:38:69:20:e1:bc:f0:f5:37:c4:5e:13:0e:70:82:
         91:a4:ad:bd:21:75:03:75:a4:b6:be:ef:3d:01:19:2f:0a:55:
         af:33:f5:76:e0:98:b9:45:a7:49:c4:e8:43:d5:1d:6b:01:b3:
         e0:16:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:19:26 2024 by rpki-client on console-fra.rpki-client.org