Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13308.roa
File: AS13308.roa (raw, json)
Hash identifier: TobPM8mtwr0IFqOFPaITzJC5DLwxNk7xHWLj8Cs53gg=
Subject key identifier: 42:F0:24:54:A0:BA:EB:1D:A3:0D:8D:E7:41:D7:5B:4A:4D:4F:38:C7
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7F9D59DF9795C866695805E0C837180254EF26E6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13308.roa
Signing time: Tue 05 Nov 2024 03:40:09 +0000
ROA not before: Tue 05 Nov 2024 03:35:09 +0000
ROA not after: Tue 04 Nov 2025 03:40:09 +0000
asID: 13308
IP address blocks: 2a06:a005:2dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9d:59:df:97:95:c8:66:69:58:05:e0:c8:37:18:02:54:ef:26:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:09 2024 GMT
Not After : Nov 4 03:40:09 2025 GMT
Subject: CN=42F02454A0BAEB1DA30D8DE741D75B4A4D4F38C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:9c:4f:96:85:bb:e2:7f:09:51:08:24:9f:
d7:ad:b5:4f:4d:5b:de:4a:0c:3f:57:bf:d8:9a:1b:
86:6b:c2:0d:69:8e:72:85:b8:e3:94:c7:31:17:b8:
5d:a8:53:70:3f:30:f5:f1:38:8a:71:3e:79:31:70:
5a:db:9d:e8:16:85:8d:bf:fe:12:bf:45:4b:de:cf:
4f:de:39:a7:93:36:34:c3:9f:35:90:e8:f1:0e:be:
c3:0b:ea:03:e8:f0:d9:e1:a4:74:55:90:29:27:fd:
48:6b:8e:ef:00:c8:fe:92:3d:f5:48:70:73:3a:1e:
89:35:40:2d:cb:e4:69:a3:8a:c4:2e:c8:d8:23:ba:
bf:db:23:8d:80:4c:98:43:8b:0a:d4:f1:a8:42:87:
d6:e2:9a:ee:26:f2:80:ea:6f:51:61:4c:b9:65:e3:
cc:4c:2f:f2:df:50:a5:80:3f:6d:c2:27:80:c9:4d:
26:a5:ab:a1:f7:8f:6f:9d:3f:dc:ab:26:65:9a:4e:
d7:b9:72:48:d5:be:67:0a:ea:06:69:56:ea:5d:46:
a5:a5:04:db:ef:df:d5:c1:4e:42:9f:bf:32:6d:1d:
72:05:f4:c5:85:02:96:8d:b4:9e:5f:fb:9c:32:39:
28:4c:b9:52:9c:d7:f6:1e:72:ba:d6:b4:2a:8a:80:
b8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F0:24:54:A0:BA:EB:1D:A3:0D:8D:E7:41:D7:5B:4A:4D:4F:38:C7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13308.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dc::/48
Signature Algorithm: sha256WithRSAEncryption
ab:c9:c9:60:b8:9d:19:e7:1f:0b:53:9d:fa:98:06:43:b1:64:
6a:f8:66:fc:93:57:97:d4:10:61:03:a3:73:36:74:d9:ae:f7:
85:89:c8:c1:8d:0e:2b:aa:46:ce:e5:80:10:c2:9c:b3:5d:f7:
a8:6b:d8:bc:df:9a:e6:7c:fa:b2:b0:b1:e2:7a:01:09:06:c5:
1e:55:92:6c:2c:71:7f:bd:70:fa:b0:02:44:ec:85:2a:82:07:
de:d1:cf:e3:de:83:39:64:2b:cb:17:71:4e:30:8c:93:87:57:
7f:cc:e9:a9:ff:09:c4:ca:df:8d:4e:e8:03:23:7b:76:f2:c0:
ba:1c:9b:23:74:4b:ab:5e:d2:5d:2c:d9:55:91:b5:74:a0:4d:
c4:ef:fc:eb:5b:03:9e:57:95:46:44:e8:c8:a1:15:f8:68:90:
40:68:55:8c:9b:ba:86:b6:c8:bd:3d:6b:e4:45:b9:a7:81:69:
f8:15:0b:a6:f4:cd:31:16:83:7b:78:e3:ad:99:13:93:61:be:
6f:0c:f4:bb:c7:12:ee:3a:45:7c:84:a6:af:e6:62:ce:9a:bd:
cb:7c:df:5d:17:33:d9:46:be:20:d7:14:3a:29:93:5c:7f:62:
ed:54:ff:fd:f1:c6:1c:f9:06:72:91:7d:14:c4:56:ec:a2:e4:
48:6a:25:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org