Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a343a3a2f36342d3634203d3e20333939313538.roa
File: 326130303a646438303a33623a343a3a2f36342d3634203d3e20333939313538.roa (raw, json)
Hash identifier: IsaDxlk3GJYEaUeXeDquRGHz+w9odWBK46TnfYmVliM=
Subject key identifier: C0:B6:2F:47:3D:1A:8F:65:58:E1:1D:E6:B3:DF:84:C3:C2:AD:68:A1
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 2A08F5F50C01B4D9F452FFBDB6AEA1AD74EA6F67
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a343a3a2f36342d3634203d3e20333939313538.roa
Signing time: Sat 07 Dec 2024 11:13:26 +0000
ROA not before: Sat 07 Dec 2024 11:08:26 +0000
ROA not after: Sat 06 Dec 2025 11:13:26 +0000
asID: 399158
IP address blocks: 2a00:dd80:3b:4::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:08:f5:f5:0c:01:b4:d9:f4:52:ff:bd:b6:ae:a1:ad:74:ea:6f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Dec 7 11:08:26 2024 GMT
Not After : Dec 6 11:13:26 2025 GMT
Subject: CN=C0B62F473D1A8F6558E11DE6B3DF84C3C2AD68A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:50:d8:f9:3d:0b:65:62:e3:0a:5e:7e:0c:
42:8f:19:d1:49:9d:18:70:69:a3:5d:b1:40:61:18:
48:f8:42:fb:43:95:7f:94:62:0b:40:1a:8c:b0:07:
65:af:20:52:c1:ab:31:27:fb:bb:39:6e:48:c9:04:
b8:4a:c0:98:a7:d6:30:70:fa:22:8f:06:ea:f2:ac:
bf:45:cb:bf:2e:37:d7:64:66:e7:2e:17:b7:d6:70:
c5:23:ac:8e:0e:9d:ba:d7:0c:cf:8b:cc:10:e1:2f:
7b:97:d3:32:ef:2f:23:e2:34:02:4c:a0:d4:f7:1c:
28:65:69:fb:e4:e7:cf:6a:38:a3:67:80:b9:a6:cf:
4b:77:72:cf:6d:f9:bd:c4:91:51:e5:7b:be:a2:28:
50:3d:13:72:29:3a:82:66:57:16:0d:55:a7:e5:54:
dc:cc:17:a3:eb:17:bc:e5:69:4a:18:7d:95:a4:73:
86:d1:6d:f4:0b:3e:fa:41:51:2b:54:7a:d1:86:0f:
69:fd:7f:77:f7:45:8e:7c:9e:03:6e:22:69:68:5b:
5a:d1:0c:b4:64:d6:bf:3a:8b:32:97:ff:ed:66:ea:
ab:c6:ef:80:87:89:6e:9b:e9:de:7f:a9:14:00:2f:
7f:1f:d1:e5:9a:0d:f3:ca:a0:ee:71:18:d0:50:54:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B6:2F:47:3D:1A:8F:65:58:E1:1D:E6:B3:DF:84:C3:C2:AD:68:A1
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33623a343a3a2f36342d3634203d3e20333939313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3b:4::/64
Signature Algorithm: sha256WithRSAEncryption
7d:78:dc:97:f6:85:03:f2:0f:8d:6c:b6:a4:81:3e:ba:c2:89:
8d:c0:fb:51:ce:54:a2:51:26:d0:40:bd:a0:91:f1:c2:24:b3:
ff:65:95:70:e8:9b:5f:d3:5d:87:c2:de:e0:8c:70:a9:ed:9b:
fc:b7:82:60:0c:42:40:d2:91:02:f2:7b:5d:6a:71:49:09:d5:
3c:4d:c3:3c:a6:77:ea:87:03:bf:a8:cd:eb:a5:d5:cc:10:ff:
1e:68:e2:6f:55:c5:7b:0d:77:1d:af:f2:7b:96:f1:fa:c1:a9:
e4:28:19:d3:83:91:91:40:e2:49:43:c8:01:36:5a:4a:97:d3:
a1:7c:da:79:de:8a:0f:d9:ff:6a:40:b9:86:84:78:e6:02:d1:
37:d8:c5:7b:6e:91:29:9b:df:f5:86:c7:ff:32:2c:d3:2a:57:
b8:61:0d:bf:19:94:ad:c2:be:ff:80:16:5c:d6:25:b5:76:8a:
3c:d8:12:35:0e:38:15:cf:67:df:84:ac:75:a9:2c:d9:62:ed:
a9:b8:e3:45:2e:cd:99:22:35:7b:24:75:b4:9e:f7:64:6b:ae:
cd:b4:61:dd:27:6e:a3:6c:aa:64:27:10:08:11:fe:07:00:d7:
c9:28:41:02:0d:f7:10:b2:93:c1:86:88:1f:46:99:9e:37:08:
27:ab:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:35:02 2025 by rpki-client