Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa
File: 326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa (raw, json)
Hash identifier: WGjnVXliSStC6C3SDqBv5qwJ+qLqPc3Qi3C8dKOzirA=
Subject key identifier: A0:C8:12:DD:88:D4:57:FB:B7:26:D4:B3:56:D0:15:53:1D:B7:BF:43
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 22300E00D7485B23868DAD2D4B7AAF5761F2E119
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa
Signing time: Sat 07 Dec 2024 13:13:28 +0000
ROA not before: Sat 07 Dec 2024 13:08:28 +0000
ROA not after: Sat 06 Dec 2025 13:13:28 +0000
asID: 399168
IP address blocks: 2a00:dd80:3f:59::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:30:0e:00:d7:48:5b:23:86:8d:ad:2d:4b:7a:af:57:61:f2:e1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Dec 7 13:08:28 2024 GMT
Not After : Dec 6 13:13:28 2025 GMT
Subject: CN=A0C812DD88D457FBB726D4B356D015531DB7BF43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:a6:bf:5b:2f:40:4a:64:82:a3:fa:d6:37:
dc:c6:86:89:6c:51:d0:6a:c6:6c:44:b7:e4:bf:9d:
6d:48:af:c7:f2:22:a2:3b:2b:c0:3a:ea:7d:84:2c:
66:03:16:59:53:41:54:7c:cd:68:24:a5:f9:c3:06:
e1:1d:c0:a3:16:c8:4c:a8:63:86:c8:8f:9b:06:13:
c2:51:2e:44:e1:3e:48:d5:1d:e2:4c:b4:b6:02:e4:
2a:b8:dc:75:c4:10:e2:58:da:c0:b9:f1:6a:76:4a:
b3:38:d1:45:d7:82:8e:0d:dd:2d:1b:ff:aa:f8:dc:
f4:39:5f:c6:2c:8e:55:dd:d0:0c:4c:19:22:59:f7:
f5:0d:86:f1:b2:5c:7f:f5:af:ae:7d:e1:1a:f9:1e:
2c:f3:48:5c:37:fa:47:9b:cf:3e:3a:e0:60:7f:6d:
50:48:d1:84:fe:e7:6c:14:c3:bc:90:f1:b4:04:3f:
ec:67:25:1f:f4:60:dd:35:15:fc:6b:c6:18:e9:c0:
9d:5b:b6:9d:aa:8b:f0:0c:6a:c5:3f:a2:a0:3b:c2:
4a:6d:11:ff:32:c8:55:78:88:e9:35:54:02:a2:62:
4e:bd:0e:96:83:c4:85:33:93:98:9d:7c:92:ab:a9:
44:68:2c:e7:77:f9:ee:f7:9e:0f:f1:9c:c6:b1:04:
03:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C8:12:DD:88:D4:57:FB:B7:26:D4:B3:56:D0:15:53:1D:B7:BF:43
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a35393a3a2f36342d3634203d3e20333939313638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f:59::/64
Signature Algorithm: sha256WithRSAEncryption
71:45:2f:86:7d:e7:25:cd:75:e4:26:d9:d4:8c:30:35:ce:80:
17:c6:30:55:4d:2a:77:ff:98:d4:6b:cd:22:00:99:7e:b6:43:
aa:95:8f:2f:a8:9d:37:aa:47:55:2e:4f:8e:8b:a6:9f:b6:8c:
75:fd:2e:53:e2:e1:49:4f:cd:fc:85:98:2a:b4:38:fb:8f:df:
46:24:42:ea:ed:61:c1:97:67:a8:21:ba:c5:a7:5c:79:a9:c8:
57:ff:27:f8:f3:ed:0a:2e:39:f9:53:df:1e:f9:c1:d0:12:1b:
e9:69:40:85:6e:86:e0:b6:84:63:5f:5b:90:c3:e2:2e:fd:8b:
61:f6:ef:cf:f6:b2:31:32:b6:f6:09:36:5f:f8:8e:95:dc:a9:
1e:23:6c:82:00:a4:1a:c3:ca:67:8b:b4:36:20:1c:48:fb:7b:
e0:11:cb:55:ae:70:74:bf:4d:54:98:99:f0:27:63:b6:b7:3d:
1d:aa:5c:07:32:8a:0d:ac:a4:98:9b:c2:e4:11:1d:45:6b:4a:
a0:f3:62:fa:f0:9a:d7:d4:07:4c:67:54:d2:c3:f0:54:2f:62:
dc:35:13:11:64:59:92:d4:63:0b:56:04:c0:ac:c4:31:bb:6e:
79:d4:54:6b:c7:12:d7:c5:3d:81:df:f9:36:89:3a:01:67:04:
d9:f9:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:41:39 2025 by rpki-client