Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199582.roa
File: AS199582.roa (raw, json)
Hash identifier: Lsc4H/U6swBcK7QEPqznnmeioyBr1kVKjGUTu3r1+S0=
Subject key identifier: 49:15:64:A1:EF:DB:B3:50:79:80:E0:B8:03:99:4D:B0:95:02:05:6E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 61BFB2FB5C94213D3733156AE6B54BF011ED0A5B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199582.roa
Signing time: Sun 18 Feb 2024 03:44:24 +0000
ROA not before: Sun 18 Feb 2024 03:39:24 +0000
ROA not after: Sun 16 Feb 2025 03:44:24 +0000
asID: 199582
IP address blocks: 2a06:a005:5af::/48 maxlen: 48
2a06:a005:1945::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:bf:b2:fb:5c:94:21:3d:37:33:15:6a:e6:b5:4b:f0:11:ed:0a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 18 03:39:24 2024 GMT
Not After : Feb 16 03:44:24 2025 GMT
Subject: CN=491564A1EFDBB3507980E0B803994DB09502056E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:b2:97:81:6b:54:ed:ae:30:c0:79:87:a6:
59:34:a6:c4:38:13:38:20:c8:dc:28:97:2b:80:ec:
74:d0:54:71:05:bb:f3:ba:45:92:d1:9a:e1:e7:1e:
f9:92:e3:6e:c6:86:6f:df:6f:16:a6:8b:65:9c:46:
75:d6:94:1c:e5:ff:a8:5a:39:48:ff:5d:03:26:14:
65:79:d5:d7:a9:0b:38:05:f5:e8:a7:34:84:71:d9:
40:a5:ec:b2:09:f0:26:e4:9e:05:a6:4b:a0:79:d4:
4a:83:86:5a:41:38:56:6d:a4:10:f9:7f:90:0f:c3:
e8:9d:cf:47:a8:31:1f:e0:2e:eb:a6:bf:a1:dd:c4:
da:2f:8f:1c:e5:02:ee:84:42:28:6a:d4:4d:e4:f5:
72:4b:22:a0:ee:bc:0d:cb:29:23:09:ef:fd:23:68:
e6:03:dc:77:db:8c:f6:7b:09:3a:27:e8:8e:5d:6f:
a5:49:2a:b0:b3:35:19:d8:2c:eb:f7:f9:fe:1e:de:
9d:ea:d6:ed:9c:3f:68:0c:03:fd:4a:e6:3b:d8:6f:
4f:9f:ea:4c:d1:fe:41:02:82:25:8f:dd:a5:59:17:
37:72:27:22:06:c4:0e:b1:10:12:a1:de:0e:19:35:
45:b6:f8:be:e6:ed:ff:9e:40:4a:5a:e3:67:d4:b2:
0e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:15:64:A1:EF:DB:B3:50:79:80:E0:B8:03:99:4D:B0:95:02:05:6E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199582.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5af::/48
2a06:a005:1945::/48
Signature Algorithm: sha256WithRSAEncryption
9c:76:1d:8f:07:86:40:e4:34:1a:dd:0a:5b:77:27:15:4f:40:
cb:f8:23:32:9e:2f:87:21:0b:1f:e8:69:59:dd:99:29:ca:3f:
c1:d6:a4:27:f8:70:76:d8:cc:24:4e:ca:3f:ae:f5:92:6b:10:
a0:c7:8a:53:b8:be:ca:30:f3:9a:69:a0:64:43:97:29:7f:85:
c3:ae:d7:53:62:f7:bf:06:db:82:4b:65:25:7a:84:09:59:91:
dd:7f:39:7e:cf:d3:b1:6b:e3:90:56:1e:b2:b4:84:24:e1:bf:
51:1f:41:0e:1c:01:e4:9d:58:b3:dd:ea:0e:ff:33:43:60:71:
b5:0e:19:f8:e5:31:65:0a:41:dc:af:46:e8:50:0b:2c:3b:b6:
a8:35:0d:68:bb:1e:2e:8f:a2:77:8a:5b:ef:91:83:25:72:24:
59:ad:80:b6:55:bd:18:0e:42:ec:3e:c5:aa:77:78:f8:06:d6:
57:20:5a:5e:f8:64:f9:67:59:92:42:9e:5c:c6:5b:22:29:25:
46:0d:01:e8:72:01:73:f3:c4:31:d1:bf:5a:ad:2d:2e:85:db:
e7:e3:27:62:6c:8e:98:f9:51:1b:c4:06:e8:f2:59:aa:44:c5:
75:5e:23:fb:fb:c3:4e:79:16:34:cf:91:ff:06:98:d3:ab:09:
1c:33:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org