Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
File: 326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa (raw, json)
Hash identifier: TcpMBnG1X/TfJ26RVbClsONL+j99ithExOZHMjhWnyk=
Subject key identifier: 3A:78:46:06:5B:82:07:1E:54:3B:7F:9E:52:4D:BE:60:63:1C:BA:0D
Certificate issuer: /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial: 48B25E33A5934AF25E61A09C3A92298F35A44EFF
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
Signing time: Mon 02 Sep 2024 20:13:06 +0000
ROA not before: Mon 02 Sep 2024 20:08:06 +0000
ROA not after: Mon 01 Sep 2025 20:13:06 +0000
asID: 36236
IP address blocks: 2a00:dd80:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b2:5e:33:a5:93:4a:f2:5e:61:a0:9c:3a:92:29:8f:35:a4:4e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Validity
Not Before: Sep 2 20:08:06 2024 GMT
Not After : Sep 1 20:13:06 2025 GMT
Subject: CN=3A7846065B82071E543B7F9E524DBE60631CBA0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:d9:59:4c:a9:57:34:27:a5:32:75:ba:22:
44:93:5d:ac:a8:45:ea:de:74:0f:c1:1d:e5:12:be:
36:49:a2:24:fb:2b:89:15:07:82:ea:7c:b0:9d:88:
ac:8d:2e:4b:9d:4c:76:67:f1:13:c5:7b:6e:d4:b7:
49:60:53:77:3f:37:3c:57:f0:67:35:ce:d4:69:bc:
ef:ae:5b:70:67:f9:db:7b:48:a8:b2:7a:10:ff:dc:
1e:f8:80:49:98:0c:e8:7a:f7:6b:b6:f1:32:20:39:
5f:2a:e1:ad:49:ea:dd:02:f1:17:27:c4:04:77:cc:
1b:75:d6:27:63:a3:44:52:d2:d2:ed:06:b5:2d:06:
d6:fe:de:92:6f:a2:9a:56:5d:08:c3:cf:2c:5b:2b:
4f:50:e4:fa:23:70:aa:06:db:be:56:01:12:e4:39:
7b:74:f9:1b:6e:f3:a9:2d:f8:3f:82:a2:5f:57:97:
12:d6:d2:25:34:13:49:8d:bd:cb:da:b3:e6:29:dd:
2c:c0:f2:26:35:4e:f7:21:74:78:8d:40:c9:2c:b8:
9a:9f:a4:d2:6e:e6:b2:43:80:3c:1a:61:f8:40:1f:
f7:f4:63:da:82:9a:88:c0:2e:39:f8:4c:e2:eb:3b:
17:ed:16:b6:4f:17:e7:d5:42:56:06:c4:14:a4:68:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:78:46:06:5B:82:07:1E:54:3B:7F:9E:52:4D:BE:60:63:1C:BA:0D
X509v3 Authority Key Identifier:
keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/326130303a646438303a33663a3a2f34382d3438203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:dd80:3f::/48
Signature Algorithm: sha256WithRSAEncryption
91:5c:fa:43:12:d9:cb:a6:48:d3:30:4a:af:18:f9:92:39:34:
6e:7b:06:98:ae:86:7e:15:8b:ad:55:e7:8d:de:e1:0d:97:3e:
7d:f6:ed:e7:89:98:43:dc:d0:3a:65:13:d1:32:e7:71:9f:9e:
d3:37:04:72:c2:25:f1:c6:b4:35:05:7e:df:92:94:fb:28:3a:
64:c7:22:bb:20:3b:6e:c9:59:87:57:04:e8:32:71:ff:6c:38:
88:be:09:e5:6a:de:af:28:c1:5e:95:28:8e:fa:04:b0:ba:62:
d7:a8:aa:09:5a:1b:0b:45:e3:cb:24:d9:ae:ef:8b:2a:30:a4:
3c:2a:4c:62:6a:e6:05:e6:fd:4b:1f:d1:a4:ea:3c:9e:34:31:
5e:63:b4:4b:7c:41:99:fe:ed:db:0d:0c:40:f7:7b:5d:f6:ce:
6b:20:76:72:c4:01:b3:c9:09:bb:27:fe:b5:11:83:61:72:31:
b0:62:31:61:43:f3:5f:9d:49:1e:25:43:20:13:eb:f9:d4:e9:
d7:f9:e5:40:02:0f:00:11:fa:b5:4a:d0:08:8e:f8:f7:b2:dc:
b1:06:18:18:bb:4a:6a:37:82:fd:a0:81:7d:5a:43:cc:1f:b6:
ab:bb:25:9b:84:6c:7d:04:49:23:12:76:26:39:8c:3e:9c:79:
57:61:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:57:11 2024 by rpki-client on console-fra.rpki-client.org