Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS197561.roa
File: AS197561.roa (raw, json)
Hash identifier: HLSxhXxfE52+jVt7V6lVUanm9VAe7OI+b1/v2roEtwM=
Subject key identifier: 0A:29:2A:DA:7D:EC:4A:2E:55:42:1E:10:93:27:04:B3:BD:59:DD:40
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2F26889810AC655F5B07F90AD77620E39DC42F05
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS197561.roa
Signing time: Tue 05 Dec 2023 02:44:19 +0000
ROA not before: Tue 05 Dec 2023 02:39:19 +0000
ROA not after: Tue 03 Dec 2024 02:44:19 +0000
asID: 197561
IP address blocks: 2a06:a005:1c7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:26:88:98:10:ac:65:5f:5b:07:f9:0a:d7:76:20:e3:9d:c4:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:19 2023 GMT
Not After : Dec 3 02:44:19 2024 GMT
Subject: CN=0A292ADA7DEC4A2E55421E10932704B3BD59DD40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a7:25:d7:19:93:12:3b:9d:b9:c2:f3:39:c4:
c6:c7:41:cd:3b:90:bf:49:19:65:6c:3a:a5:cf:00:
18:9a:8f:ea:50:a8:50:76:ef:05:42:b0:b5:1a:e4:
50:04:46:d3:8f:e9:a5:a0:61:bc:16:c6:49:d1:d9:
55:27:3d:6a:db:88:a0:23:9a:40:2c:ce:da:66:90:
d8:44:4e:fb:70:a6:8f:3a:9d:46:11:b2:53:ad:b3:
62:5e:aa:f4:8c:13:b3:dc:7d:75:f1:44:a1:4b:1f:
d0:95:64:ef:af:52:17:0a:3f:7b:96:e5:82:ee:32:
16:d9:e7:df:5b:83:6e:e0:65:b8:f6:f8:d8:2e:cc:
7d:76:6f:a5:3e:3a:1d:49:53:96:9e:08:fa:24:33:
12:2c:96:03:b0:0c:03:cf:4b:27:36:8f:3b:f3:29:
79:21:2a:4f:85:4e:55:1f:31:df:87:ef:34:34:08:
89:ce:80:e4:38:c6:06:d4:e3:ec:a1:08:4c:e2:2d:
1a:13:c8:43:3c:ee:8b:eb:97:15:be:3f:ed:d4:ce:
09:26:c1:30:d6:e1:e3:2e:fc:53:fc:66:f6:ec:cc:
0a:76:73:66:78:d4:48:cd:73:c3:1b:eb:d6:f0:e4:
1d:02:10:de:49:1e:a8:ff:fa:4a:1b:c7:e1:4f:ef:
48:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:29:2A:DA:7D:EC:4A:2E:55:42:1E:10:93:27:04:B3:BD:59:DD:40
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS197561.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c7c::/48
Signature Algorithm: sha256WithRSAEncryption
85:b9:33:01:d3:ed:91:ef:48:0c:3e:af:f4:cb:df:09:f5:f8:
45:e6:c3:56:48:49:81:f7:08:16:26:bc:0d:2c:86:7c:8f:85:
0b:7a:42:dd:af:69:52:39:da:7f:e8:7b:a7:01:9e:db:f9:80:
69:1c:5e:ff:d8:f6:1f:77:25:4a:1e:aa:40:c3:40:9f:e6:7f:
0e:76:43:74:d7:56:21:d6:5c:02:dc:35:8e:9b:ac:fd:65:d0:
0b:80:58:e5:60:39:0b:47:17:d2:1c:55:91:56:20:63:26:bf:
72:50:ae:57:b5:fe:98:f1:7d:5f:73:36:07:80:10:c1:8a:bc:
77:40:8d:af:a2:35:86:eb:de:e6:ce:c7:b7:ff:d8:b9:62:fb:
84:2f:42:01:01:5f:96:36:b2:c0:00:fa:58:86:6c:a5:d4:5b:
b8:c1:1e:8d:93:34:9d:fd:10:a9:bd:33:cc:b5:21:4c:c0:f0:
37:c4:e4:6f:1b:af:14:ad:52:19:ff:f7:32:81:e5:f3:c0:13:
ca:2c:57:2d:2d:98:c3:4f:37:d8:cb:07:b4:0e:35:55:d9:ab:
c3:87:1c:61:c1:aa:be:11:c5:e1:e6:24:8d:10:a5:67:bf:91:
98:f8:38:72:f0:e9:87:71:d3:49:d4:cd:23:b5:98:3a:5e:15:
05:56:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org