Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: XPduelLGv5MersM7niqDOKkKiau8XgeVpHCTch+OCDQ=
Subject key identifier: 02:2D:8D:21:68:B2:6A:3B:86:8E:B4:6A:84:E2:FC:54:7F:51:35:23
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 4E547BB8E917522C3C077647B476E3D1BBDCCC8C
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 02 Oct 2023 19:55:32 +0000
ROA not before: Mon 02 Oct 2023 19:50:32 +0000
ROA not after: Mon 30 Sep 2024 19:55:32 +0000
asID: 36236
IP address blocks: 2a00:dd80:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:54:7b:b8:e9:17:52:2c:3c:07:76:47:b4:76:e3:d1:bb:dc:cc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Oct 2 19:50:32 2023 GMT
Not After : Sep 30 19:55:32 2024 GMT
Subject: CN=022D8D2168B26A3B868EB46A84E2FC547F513523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:47:ef:2c:a8:ec:65:d9:1e:ed:26:ce:f8:fe:
d5:7e:dd:31:c3:27:0f:9a:42:2d:82:b7:49:83:b7:
72:cd:14:8d:df:57:06:3e:cd:84:ae:3c:68:b9:31:
9d:10:41:10:94:d2:54:fd:5f:07:00:bc:91:dd:8f:
64:7b:57:42:95:31:12:62:f8:b1:bd:f3:24:cc:a0:
50:6e:37:0a:b6:1e:e8:dd:19:2d:10:2c:84:48:e9:
3c:62:de:37:b8:cd:90:8a:dc:84:7c:e4:0a:19:8e:
f6:6a:3e:48:8d:38:13:f6:59:be:d3:77:7e:00:b4:
53:ed:d0:71:06:ac:a2:25:87:07:96:99:cc:65:89:
0e:c9:32:a2:c2:66:db:95:a8:65:d7:59:28:79:0b:
eb:0b:f5:cb:ff:53:c1:0f:bc:02:b2:ae:a0:f7:e5:
b7:17:bf:b1:3a:53:54:8e:2a:57:7a:d0:f7:5c:f9:
74:42:f8:45:ee:a6:06:19:8e:13:67:e8:90:c5:14:
31:e2:53:0b:07:67:57:93:0f:69:44:b2:e8:dc:b5:
3a:a2:9d:9d:f2:b1:d5:29:bf:f1:0f:7d:8e:11:e4:
9a:61:46:26:23:54:e0:ca:a8:eb:99:c6:f2:6b:af:
de:b6:bb:26:12:d6:7b:d3:bb:62:e8:e0:cc:7e:97:
4f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2D:8D:21:68:B2:6A:3B:86:8E:B4:6A:84:E2:FC:54:7F:51:35:23
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f::/48
Signature Algorithm: sha256WithRSAEncryption
b1:b0:be:e1:0d:59:a1:b8:32:1b:19:90:7d:21:46:61:34:41:
5e:d4:88:5e:01:c9:2f:03:38:33:37:20:ee:a6:51:1e:21:d8:
e1:48:c2:e2:eb:58:cd:5a:c1:1d:62:cc:79:20:8a:3e:ec:af:
f6:53:e0:25:ed:79:41:c9:f7:c9:92:9c:90:b0:42:a3:b5:4a:
ff:39:cc:60:ec:00:a8:dd:59:bc:15:e4:bd:21:b7:27:c9:08:
60:12:ec:32:16:ec:39:52:4b:51:fb:71:6a:c7:b9:2f:4e:09:
ac:dc:dd:c5:8d:8a:a2:cb:aa:5e:1c:f6:13:ef:d1:9d:dc:cc:
ef:56:8a:8b:f7:b4:ea:d2:08:32:be:85:fc:c7:2b:ea:b1:89:
96:16:e9:f6:70:0b:d8:92:2a:f7:fa:d5:bc:97:bf:10:70:da:
6c:0c:de:fd:ff:ce:1d:38:3b:a8:18:b0:47:74:5a:f1:79:3e:
0d:76:17:c6:dc:19:bf:01:37:e6:1c:0d:7e:ee:64:2f:ea:c2:
04:a6:6d:a3:22:8d:ab:a5:8c:3c:fe:6e:32:fc:5b:20:4b:23:
9a:ab:60:bc:05:dc:1d:6e:ad:cf:dc:98:52:41:08:78:fc:27:
0b:5c:9a:a0:52:85:73:93:f9:83:bc:28:eb:6b:ca:ed:c8:10:
b4:dd:15:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 04:29:42 2024 by rpki-client on console-fra.rpki-client.org