Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a353a3a2f36342d3634203d3e20333939313630.roa
File: 326130303a646438303a33653a353a3a2f36342d3634203d3e20333939313630.roa (raw, json)
Hash identifier: 9eb7RVWpdRIiqKsk7Sca0ZT5YvT45ACF8Zp9voFz32g=
Subject key identifier: 65:90:19:B1:16:83:0E:6A:B3:A8:02:FE:8C:2D:70:5A:9B:5D:E2:29
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 0ADEA085C0A9FD0EF355698D3917E0CF5891681D
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a353a3a2f36342d3634203d3e20333939313630.roa
Signing time: Sat 07 Dec 2024 12:13:26 +0000
ROA not before: Sat 07 Dec 2024 12:08:26 +0000
ROA not after: Sat 06 Dec 2025 12:13:26 +0000
asID: 399160
IP address blocks: 2a00:dd80:3e:5::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:de:a0:85:c0:a9:fd:0e:f3:55:69:8d:39:17:e0:cf:58:91:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Dec 7 12:08:26 2024 GMT
Not After : Dec 6 12:13:26 2025 GMT
Subject: CN=659019B116830E6AB3A802FE8C2D705A9B5DE229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:03:5c:d7:41:49:02:d8:9f:52:a9:00:b4:
fa:4d:d9:e8:07:3e:71:10:98:86:85:18:54:1f:a1:
3c:b4:b8:96:5a:ea:47:d8:88:8d:6b:13:cc:80:b2:
9a:d5:d9:2a:26:18:e3:00:aa:b8:f3:16:d7:f1:7a:
a8:d6:a5:ef:94:0f:0f:78:c2:50:db:ec:01:02:d8:
7f:4a:67:90:63:2c:ce:d8:0a:47:d0:89:e3:ad:ef:
b4:3d:6c:33:ed:a5:07:cd:84:a7:e3:9c:61:3a:a3:
7e:76:8f:e9:09:3d:f1:67:20:22:ed:39:9a:23:23:
c2:e5:76:a2:75:7d:e5:1d:a3:a0:34:93:cd:c0:1e:
f0:43:a3:e1:7c:0c:4f:0a:c9:4f:ba:b2:b4:84:65:
6d:de:f1:8f:be:bd:74:c3:df:a4:e4:65:32:f4:4e:
20:26:d8:b6:ed:e9:03:c0:ee:62:8c:a3:bc:99:f7:
c6:20:56:b2:99:4a:8a:cb:8d:80:c0:91:ad:05:cd:
8c:d8:88:85:4e:59:76:f1:dd:91:13:7d:d7:6b:cc:
35:54:ab:e5:5e:0d:d2:2f:21:9e:74:79:5a:70:ea:
7c:40:44:2e:8d:be:d3:99:16:51:16:6c:80:fd:94:
8d:18:de:67:64:b7:41:b5:c5:95:43:f9:89:b7:ac:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:90:19:B1:16:83:0E:6A:B3:A8:02:FE:8C:2D:70:5A:9B:5D:E2:29
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a353a3a2f36342d3634203d3e20333939313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3e:5::/64
Signature Algorithm: sha256WithRSAEncryption
94:70:5f:da:06:9b:83:de:b0:2b:61:dc:fd:c8:7f:d0:9b:65:
0b:6c:59:fc:67:21:90:93:ad:d8:69:8d:da:3c:3b:21:6f:72:
31:32:9b:a0:3c:1b:dd:fc:8d:f1:75:35:b8:a3:1a:1e:e1:ae:
18:d6:da:44:f5:db:9e:a3:73:71:58:2e:a3:75:e5:cb:77:22:
83:71:79:20:3f:e0:0e:e4:f4:d7:4d:09:cb:0a:60:db:98:d2:
46:f2:85:d0:d1:9a:1e:ab:05:8b:de:4e:65:db:93:bb:13:16:
fd:a7:b5:5d:09:dd:5c:1a:ba:83:c0:ca:97:15:b0:2f:83:01:
35:73:23:bc:fb:de:80:26:63:08:ff:60:16:4f:8f:b6:59:74:
8d:b5:48:de:ab:3a:15:07:db:57:f3:54:ee:ac:48:16:bf:ea:
1b:86:29:48:1d:9e:43:1a:66:74:ca:94:97:b3:66:34:64:7c:
e8:6b:c8:4d:e7:11:e7:d4:75:30:5c:ab:f7:5b:05:c1:44:4f:
30:5c:0e:0e:12:c6:b2:49:2d:9f:36:c9:f8:34:28:e7:9c:a6:
58:5a:e1:ad:a4:fd:c1:7a:87:fe:cf:61:a5:17:9f:0b:9e:1e:
0f:7c:32:b7:f8:88:dc:f9:f2:fd:d9:b6:c1:35:9e:f3:f0:71:
96:c6:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:10:07 2025 by rpki-client