Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a333a3a2f36342d3634203d3e20333939313538.roa
File: 326130303a646438303a33623a333a3a2f36342d3634203d3e20333939313538.roa (raw, json)
Hash identifier: 7YfuM11VY9vb5Za1Yfcc974bw8psjcc+nC6wEujTMqc=
Subject key identifier: E7:9D:59:03:04:52:CD:AF:7E:56:AA:BF:CE:9F:3C:E5:67:BE:8A:B8
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 2C0465D457E6DF136D9189C0493AA76BED7D1249
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a333a3a2f36342d3634203d3e20333939313538.roa
Signing time: Sat 07 Dec 2024 11:13:26 +0000
ROA not before: Sat 07 Dec 2024 11:08:26 +0000
ROA not after: Sat 06 Dec 2025 11:13:26 +0000
asID: 399158
IP address blocks: 2a00:dd80:3b:3::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:04:65:d4:57:e6:df:13:6d:91:89:c0:49:3a:a7:6b:ed:7d:12:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Dec 7 11:08:26 2024 GMT
Not After : Dec 6 11:13:26 2025 GMT
Subject: CN=E79D59030452CDAF7E56AABFCE9F3CE567BE8AB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:9d:b5:cf:e2:c6:b5:7d:89:29:5a:43:2c:
f6:4a:c0:2b:fc:3c:eb:27:e0:b8:6e:16:df:8c:7d:
d7:6e:8f:77:f7:6b:74:ea:ec:1d:81:a1:8f:35:15:
e6:e8:d7:0c:de:5c:0e:08:6e:59:be:2d:8f:42:99:
db:ec:60:8d:66:6f:15:a0:bf:c7:70:c6:1c:c5:ad:
12:0a:bc:63:01:5f:e7:4b:be:67:7c:e1:19:c9:19:
a2:66:af:5c:d9:b3:75:9a:75:15:26:a8:b0:cb:ec:
67:15:d6:6b:09:7f:90:9f:ac:8e:8e:b6:3a:21:69:
53:03:1d:bd:18:3a:8c:79:97:53:f8:30:06:1e:d8:
07:79:a5:08:ea:46:56:91:89:4a:e1:67:ff:b1:50:
8b:02:c1:ec:a5:27:4c:93:a3:55:4d:42:2a:2b:cd:
1f:46:b1:b1:65:fc:c6:55:2a:d8:e7:71:84:2c:0f:
d0:15:c2:a9:4d:2b:f2:fc:b3:aa:29:07:00:09:1a:
20:02:21:88:ae:9e:5d:4e:4e:ec:61:68:2f:21:c8:
fa:f2:a1:b0:ae:d7:4c:47:0b:38:49:e0:e3:82:49:
14:12:dc:55:73:22:0a:6b:ae:73:f6:87:8e:37:e1:
99:1f:05:c6:27:9d:a2:18:93:10:7f:31:d9:fb:84:
90:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:59:03:04:52:CD:AF:7E:56:AA:BF:CE:9F:3C:E5:67:BE:8A:B8
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a333a3a2f36342d3634203d3e20333939313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3b:3::/64
Signature Algorithm: sha256WithRSAEncryption
63:35:b9:e3:b2:9e:55:29:2e:32:6c:a4:28:79:ab:b2:83:40:
3d:68:c4:c5:bb:13:c5:f5:ea:ed:53:dc:2f:78:ed:bd:fa:89:
27:ab:5b:28:05:61:7c:7a:24:25:ba:a6:a3:ec:e9:51:20:b2:
91:ed:1c:d0:7e:68:b5:1b:5c:09:02:c7:49:69:33:dd:00:6c:
4a:de:59:2c:91:b2:8a:6e:9f:08:96:89:6f:5c:35:c2:e8:c9:
e7:f3:6b:6f:d7:21:9e:fe:22:7b:75:07:63:a8:ac:c1:73:63:
87:57:d5:af:f4:fc:fc:00:37:67:45:a7:6a:23:a6:25:2b:57:
7c:60:77:90:df:14:78:d4:31:16:36:ea:bf:ad:fd:8f:43:70:
12:5d:99:ca:30:bc:8d:cb:15:6a:ea:32:a4:c6:91:9d:70:02:
03:be:97:20:01:2b:91:a2:ca:63:56:06:b0:b0:b4:bd:3b:6e:
c9:40:13:37:30:8d:83:c3:d0:ba:ee:74:0d:45:68:9d:57:86:
5f:11:ee:79:d9:b6:2f:a3:b3:ed:18:32:f3:ee:1a:09:31:10:
65:0d:31:f3:7b:d7:b7:e3:e0:19:18:66:3a:14:74:22:32:a3:
18:dc:d7:3d:bf:e5:3d:cf:84:cf:77:b1:72:05:d1:95:97:a4:
be:43:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:35:01 2025 by rpki-client