Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa
File: 326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa (raw, json)
Hash identifier: rIrM4dkUrUp0YxynFA44+jjOV2E+PWc8ivfrN9HmCOY=
Subject key identifier: 63:9D:C6:B0:1C:0A:70:A5:93:0E:2F:85:83:66:54:0D:A3:5E:C6:71
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 253FB11FCE652A0E6862B8EE2F3850C0E1C1061D
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa
Signing time: Sat 07 Dec 2024 12:13:26 +0000
ROA not before: Sat 07 Dec 2024 12:08:26 +0000
ROA not after: Sat 06 Dec 2025 12:13:26 +0000
asID: 399160
IP address blocks: 2a00:dd80:3e:6::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 21:25:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3f:b1:1f:ce:65:2a:0e:68:62:b8:ee:2f:38:50:c0:e1:c1:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Dec 7 12:08:26 2024 GMT
Not After : Dec 6 12:13:26 2025 GMT
Subject: CN=639DC6B01C0A70A5930E2F858366540DA35EC671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:6b:7e:12:0d:ac:fa:9b:c1:ac:21:0a:7d:
2e:36:b8:a7:15:51:58:24:fd:d2:10:63:c6:06:04:
bb:c6:cc:50:1a:a5:af:70:a2:c7:dc:18:a4:50:ee:
2d:d2:a5:f2:9f:65:87:5c:e6:75:30:85:3c:9d:d3:
40:e5:43:ed:d3:bb:e6:0b:94:7b:b8:5e:aa:7d:69:
71:8b:fb:36:49:97:0d:f4:ea:c7:53:d3:02:ec:54:
a9:91:12:c8:21:69:31:19:1f:b0:f0:67:b1:98:bf:
ea:a6:20:e4:bf:f3:a5:9c:b8:6b:a6:e0:77:81:3f:
88:06:54:5a:67:1c:c8:3e:bd:cd:fa:70:7b:af:8c:
67:52:9f:17:7f:05:cf:31:a1:db:39:60:ea:ca:0b:
9f:2e:cc:2c:13:a0:ed:2d:da:f8:1a:e9:90:89:17:
fb:82:b9:e1:56:01:d8:25:a0:4f:65:eb:9a:72:81:
fa:c9:76:fd:c7:fb:56:84:39:75:b0:be:f7:01:94:
14:93:09:76:82:1c:7b:a8:cf:55:58:13:6d:9a:a9:
e0:99:59:98:25:e5:6e:d8:6f:7b:fa:13:63:14:61:
08:65:1b:2a:d1:46:07:24:ef:6b:8a:46:8f:16:44:
25:1a:5e:c3:f0:70:fd:ea:e2:bc:ae:88:c2:49:18:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9D:C6:B0:1C:0A:70:A5:93:0E:2F:85:83:66:54:0D:A3:5E:C6:71
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33653a363a3a2f36342d3634203d3e20333939313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3e:6::/64
Signature Algorithm: sha256WithRSAEncryption
91:d7:dc:33:49:f5:da:3c:4b:ea:96:4b:0a:8a:0d:ce:9a:8f:
c2:11:b5:a3:da:61:e0:5b:08:7b:3c:25:d7:88:bd:46:e8:4f:
db:6c:2c:00:03:c8:b6:9a:a1:c6:76:76:13:90:5e:1a:0e:b5:
58:75:61:15:be:21:a5:bc:87:d1:ac:45:00:1b:c2:59:9b:1d:
de:56:83:b7:07:2f:f1:1d:01:65:ab:36:41:00:69:ee:55:88:
0c:cd:cb:87:70:9c:9d:e3:45:d2:9a:07:c0:ee:17:1d:eb:5d:
0e:89:28:1a:b8:63:a5:7a:c9:46:80:50:9d:d8:c6:ec:af:b6:
b0:af:8f:7d:1e:2d:7e:4e:0d:51:e0:00:39:ce:e2:2a:8a:6f:
c7:da:e8:07:77:fa:13:aa:17:6a:05:f3:7a:4b:cf:99:35:18:
f1:55:73:15:4a:9d:ab:cc:4f:82:64:50:46:6d:37:db:67:98:
4f:5b:b4:00:4e:1b:8d:c3:62:ae:a4:98:a9:af:4d:3d:72:2f:
87:09:b9:0f:6c:4e:db:2d:ef:64:35:9d:ae:57:e3:24:37:bf:
a0:d1:11:e0:72:6b:d5:28:be:48:ee:18:64:f7:de:16:f6:be:
0f:95:5d:87:74:55:c6:65:4d:70:45:e0:9b:68:11:76:fd:f1:
c5:e4:21:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:35:33 2025 by rpki-client