Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS18526.roa
File: AS18526.roa (raw, json)
Hash identifier: LZMs/TYM3EVOPqyMBTU4m4OgZxXeQa1Pf93pittkAfs=
Subject key identifier: 1A:C9:0B:33:9C:19:06:D4:3B:C0:A2:2E:69:16:A8:61:EA:E5:C2:B3
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6EB561002B6CA1B9493427C350981F39542A4308
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS18526.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 18526
IP address blocks: 2a06:a005:5b0::/48 maxlen: 48
2a06:a005:5b1::/48 maxlen: 48
2a06:a005:5b2::/48 maxlen: 48
2a06:a005:5b3::/48 maxlen: 48
2a06:a005:5b6::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b5:61:00:2b:6c:a1:b9:49:34:27:c3:50:98:1f:39:54:2a:43:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=1AC90B339C1906D43BC0A22E6916A861EAE5C2B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:85:60:4d:7d:7f:0d:30:96:6b:03:7a:dd:
1b:e0:31:19:b2:5a:52:16:bc:ff:e3:9b:b9:ba:0a:
4c:04:b0:81:5c:70:93:8c:0b:0b:1b:9a:e7:ee:0c:
c2:c5:d2:b9:54:87:b1:61:b7:9b:9e:66:74:ea:38:
ff:9f:ef:ef:29:b0:4c:42:46:24:22:55:8b:01:1e:
96:6c:e9:0e:fc:0f:5a:bc:0d:78:ea:c6:52:6e:51:
7c:ba:36:bd:64:db:5d:7d:df:d2:cf:44:01:d8:c7:
2a:a0:64:7e:53:3d:4a:d7:5e:db:0a:f7:da:74:57:
03:56:26:be:24:76:a5:2f:9a:89:75:f9:19:80:44:
dc:9e:63:74:d8:52:75:7b:75:ae:22:85:08:d7:10:
58:6c:91:35:e5:7b:88:d5:58:51:a7:53:ab:bb:29:
7b:aa:95:12:2b:66:c7:bb:30:9f:75:28:3c:73:1b:
ba:6f:92:db:b0:ea:bc:66:b1:9b:9f:f4:82:5a:f8:
00:95:60:72:9a:ef:d2:b4:37:2c:99:0c:87:a1:1f:
41:f6:f2:60:ae:8b:05:63:19:a6:f6:fb:2c:4d:a9:
41:2f:4d:2f:02:76:7d:09:80:e3:42:33:32:77:2f:
2f:7c:8a:37:f3:79:04:10:96:25:ef:91:a1:29:ef:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C9:0B:33:9C:19:06:D4:3B:C0:A2:2E:69:16:A8:61:EA:E5:C2:B3
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS18526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5b0::/46
2a06:a005:5b6::/47
Signature Algorithm: sha256WithRSAEncryption
3e:01:bb:c2:d4:02:67:25:38:e0:5d:e9:69:4d:2d:f3:da:39:
ad:8c:1f:13:64:13:f6:23:4d:fe:ba:5a:3e:2d:37:f3:44:d7:
b9:3c:70:44:85:8b:c8:8f:48:45:34:00:b8:5c:69:ef:70:17:
a3:ce:05:27:39:81:02:5e:bb:ce:37:31:0a:3f:11:6c:91:11:
f8:6c:96:47:15:5f:24:f6:1b:b6:63:35:1d:b7:38:e8:3c:4a:
0b:30:dc:09:29:3d:e6:bd:aa:de:c7:af:68:23:32:26:1d:83:
86:97:0d:07:f5:a7:8d:c3:79:8d:c8:c2:d3:0c:a4:18:b4:37:
f0:db:2a:65:f0:09:25:a5:94:7a:f9:e2:f2:a4:d4:98:89:a2:
8e:8a:aa:7e:c1:1b:dc:6d:94:50:c1:14:56:bc:17:75:2d:6a:
1d:87:4b:21:a7:1a:38:07:38:cc:2f:09:de:e4:7a:24:a7:3d:
e2:dc:db:b8:26:43:df:8b:f7:e3:6a:b9:de:b9:5e:07:49:43:
6c:12:d0:1e:4f:c8:51:81:fa:ba:ac:9a:69:88:bd:c6:c7:d6:
57:9e:8a:8a:67:d5:8e:45:08:43:75:0a:a9:6d:bb:cf:97:51:
fb:0e:ec:85:26:c0:24:87:26:1f:0e:f9:8d:0f:4e:a0:c8:79:
d7:65:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:51:29 2024 by rpki-client on console-ams.rpki-client.org