Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199347.roa
File: AS199347.roa (raw, json)
Hash identifier: t1ycZ8dv8la8xM0V/mdJ+TwohjuX1ok5xxyr8yURVmQ=
Subject key identifier: 5A:0D:BA:AC:D7:1A:D0:67:2C:49:AA:2E:1B:E0:87:C1:48:CC:AF:11
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5960AA3FB7DEC653E947059E3E2C0F49FAEA1543
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199347.roa
Signing time: Fri 16 Feb 2024 20:44:24 +0000
ROA not before: Fri 16 Feb 2024 20:39:24 +0000
ROA not after: Fri 14 Feb 2025 20:44:24 +0000
asID: 199347
IP address blocks: 2a06:a005:d2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:60:aa:3f:b7:de:c6:53:e9:47:05:9e:3e:2c:0f:49:fa:ea:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 16 20:39:24 2024 GMT
Not After : Feb 14 20:44:24 2025 GMT
Subject: CN=5A0DBAACD71AD0672C49AA2E1BE087C148CCAF11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:fa:3b:0c:32:c3:3c:4a:c3:98:54:ff:31:
c4:34:10:f4:c3:51:78:ec:00:0c:5f:99:ee:78:19:
32:aa:95:56:1a:45:b4:65:30:d7:7b:a1:0c:40:fc:
73:a8:56:75:18:1f:92:ed:c2:7b:a3:8a:98:7b:a8:
f0:ac:ac:19:2d:3b:75:79:d4:13:5d:fd:68:b4:8c:
fd:f1:0e:83:bd:3c:ea:bb:2f:4c:9c:ba:8f:eb:fc:
d5:38:51:4d:a9:d2:89:c3:d0:67:f4:15:c6:fa:5f:
11:02:7c:e6:02:cb:49:c8:3c:5e:5a:51:65:94:ac:
e6:b6:76:c3:45:e2:5a:c6:db:32:60:e9:09:8e:48:
f1:0c:2e:9e:fa:99:d7:37:74:42:66:42:67:e8:dd:
c3:a6:ac:9b:67:14:38:f3:a8:c6:8c:b5:39:8d:54:
ad:76:b3:d7:bb:5f:a4:0d:af:58:31:80:8a:92:00:
4e:5a:55:27:20:a3:09:96:87:57:67:57:a3:9b:66:
25:91:04:54:e7:3b:6f:d8:7c:f6:37:5d:2a:67:72:
d5:0d:a1:ec:68:a2:f3:33:30:45:93:20:a3:7e:fe:
0a:d7:87:04:9c:11:1f:e3:16:6d:0d:82:ec:22:93:
b6:13:61:14:00:e2:67:58:70:a7:da:f5:bc:21:6d:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0D:BA:AC:D7:1A:D0:67:2C:49:AA:2E:1B:E0:87:C1:48:CC:AF:11
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d2b::/48
Signature Algorithm: sha256WithRSAEncryption
68:8e:d5:e7:7b:fc:87:0b:85:0e:54:cd:d7:f3:8a:b9:83:e6:
fa:3e:db:6a:06:31:39:86:4c:87:cc:31:52:0b:15:bb:a1:63:
83:b2:eb:47:81:19:97:e5:c1:d7:04:48:a0:f3:8f:3e:d0:e8:
f7:4b:d0:d0:d0:15:96:4c:71:50:c4:93:23:c5:68:13:40:3d:
a9:fe:21:1a:5d:06:82:47:66:ec:47:be:4e:ba:55:cd:80:e2:
71:bf:bb:79:a1:50:cf:5a:50:ee:ff:36:5a:6d:ad:7b:6f:9e:
0b:bc:41:b7:14:5c:bd:2c:b7:4c:0c:a3:30:03:96:9a:3c:d2:
0d:37:8d:63:ad:9a:78:a3:fd:ea:16:cf:a5:c5:f4:91:88:b9:
a5:7a:6b:fa:b5:b9:a2:63:86:64:d9:7a:9d:30:93:c8:ca:2d:
6c:1c:3a:59:6b:1c:0e:96:23:43:f8:fe:b5:d1:81:29:49:7d:
ca:4e:ef:be:cd:25:92:4a:09:7c:78:68:36:eb:6f:1b:2d:50:
25:8b:ab:73:d6:7f:3a:cc:d5:ac:46:13:70:60:31:77:eb:19:
7a:35:ec:84:07:fe:85:c8:1b:88:36:de:de:22:69:8b:d9:78:
22:65:be:2a:d0:21:ec:08:ae:fe:d9:6e:ae:39:24:2c:9a:05:
78:84:41:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org