Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13308.roa
File: AS13308.roa (raw, json)
Hash identifier: IYKRPLqeC4rnqJzu1bZVUJ8U5pGIRrnJuT3LptvUhcQ=
Subject key identifier: 5A:A0:25:69:FF:3F:4C:9D:63:A0:3E:8A:B9:6E:64:16:77:6E:6F:6D
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5A9502A1BE8BD0B15716108E9EC03E6F22F6700F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13308.roa
Signing time: Tue 05 Dec 2023 02:44:16 +0000
ROA not before: Tue 05 Dec 2023 02:39:16 +0000
ROA not after: Tue 03 Dec 2024 02:44:16 +0000
asID: 13308
IP address blocks: 2a06:a005:2dc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:95:02:a1:be:8b:d0:b1:57:16:10:8e:9e:c0:3e:6f:22:f6:70:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:16 2023 GMT
Not After : Dec 3 02:44:16 2024 GMT
Subject: CN=5AA02569FF3F4C9D63A03E8AB96E6416776E6F6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d2:db:6a:16:ac:fd:d1:a6:98:fd:eb:7e:dc:
54:9a:6e:09:a9:98:66:5d:63:ef:3c:1d:84:f2:ba:
cf:0b:7a:ab:01:16:67:96:e6:1c:c0:99:96:32:6f:
c4:03:6e:81:38:5f:6c:2e:e9:20:b6:5e:8e:9f:39:
83:36:fa:94:ab:80:09:9b:14:0b:e4:19:b6:ca:d4:
ab:c0:ce:ce:2a:cf:85:0f:c4:05:72:04:b5:69:9c:
8b:82:56:23:e6:80:1e:fc:eb:66:4d:22:79:df:80:
6c:ac:33:9e:6d:1a:f4:5c:a4:a0:70:d9:44:d6:d6:
05:94:30:51:c7:c1:c9:c6:e5:8f:ae:91:fa:4f:5a:
3a:84:c4:ff:50:ad:4c:a9:11:a0:21:55:ef:fe:16:
5e:d5:9e:09:5e:00:fa:b8:d8:ba:c5:e0:41:2a:76:
3c:8c:c7:09:92:6f:04:d5:29:13:40:5c:70:ff:55:
5c:cf:8e:e4:7d:de:e2:39:86:e9:72:e1:88:a2:9b:
3b:51:3e:9e:8c:d8:bf:24:dd:22:ee:05:eb:e6:dd:
3d:3b:a4:84:31:8a:d9:91:dd:c7:9e:2a:08:1e:d1:
8d:8a:36:7d:eb:39:04:52:32:62:e4:81:7a:a9:48:
74:d7:f8:40:96:bc:5b:4a:b6:64:8d:67:01:13:ca:
33:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:25:69:FF:3F:4C:9D:63:A0:3E:8A:B9:6E:64:16:77:6E:6F:6D
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS13308.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2dc::/48
Signature Algorithm: sha256WithRSAEncryption
65:02:93:fc:28:cd:f8:74:fb:b5:60:1a:b1:77:25:de:e3:74:
23:5b:7d:94:a3:98:26:40:0c:ed:4d:97:10:43:47:8c:ce:7c:
57:50:c5:03:1c:e0:fc:9a:ed:96:3f:6e:1f:d3:c3:80:07:04:
5e:da:67:21:8d:1b:11:4a:4e:3f:a1:5a:bf:25:73:6d:f1:54:
89:44:db:eb:1e:96:d7:76:46:fe:20:e9:51:37:97:c4:bd:f9:
70:31:26:c4:00:1f:ab:09:50:08:e3:09:43:19:f0:da:1e:fa:
83:da:4b:5a:43:e3:61:18:ad:54:ac:76:94:c7:c4:93:aa:91:
30:21:c4:e7:e9:fe:6b:67:57:53:d5:f8:20:56:7e:f6:00:5a:
42:a3:83:bb:69:41:9e:7d:cf:3c:40:cf:07:46:55:51:f7:32:
99:15:37:4d:fb:14:6e:7b:de:76:8c:3b:d5:b4:e9:c1:c1:ce:
a1:e1:8f:a2:fc:b7:5c:32:66:29:42:be:6a:bd:94:70:70:12:
64:8c:b7:82:d8:68:44:14:e2:8e:61:9e:2f:74:6a:8f:db:72:
1f:37:80:90:fb:05:4d:50:92:21:2d:05:71:80:cc:21:21:5e:
72:37:4f:be:78:69:ca:40:ab:24:26:df:d5:e5:e9:5b:8e:a4:
21:c5:ce:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:11 2024 by rpki-client on console-fra.rpki-client.org