Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201097.roa
File: AS201097.roa (raw, json)
Hash identifier: d4UkFeBZ+BI2dY4akzESSWMD6Msv4sRMzkKikW/ZkKw=
Subject key identifier: 03:8F:80:17:3D:9C:51:66:3C:83:8F:79:92:32:73:E8:AA:C3:EE:C1
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 35D5CE8456D0D79B7F087E78DC20744CCA285192
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201097.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 201097
IP address blocks: 2a06:a005:29f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:d5:ce:84:56:d0:d7:9b:7f:08:7e:78:dc:20:74:4c:ca:28:51:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=038F80173D9C51663C838F79923273E8AAC3EEC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:53:8d:94:9e:c6:3a:d9:64:a6:78:34:66:
c8:e0:a5:1a:90:df:66:6b:0e:22:fd:de:24:a0:62:
c4:ed:a3:62:db:57:d5:c2:5d:df:d0:3d:f8:c9:07:
27:b9:42:1b:f4:2a:62:41:5b:b4:43:7a:15:1c:ec:
e5:1d:c3:33:8a:c7:04:98:a2:3d:1d:bf:e5:08:87:
63:fe:45:9a:d8:cd:56:13:30:52:e9:bf:00:4f:f6:
c4:0b:b3:37:7f:34:cd:b8:82:e5:0e:c8:53:2b:59:
f0:38:45:9e:72:7a:ea:88:91:b0:59:1c:1e:20:a0:
6f:b5:03:8f:ea:56:9a:f5:7e:90:94:34:1e:e9:7d:
42:bd:3a:90:80:b4:74:d6:f6:fc:fe:05:fc:91:e9:
65:d4:76:2e:a5:4c:88:6c:17:1b:48:95:69:ca:62:
3f:f0:cf:92:de:40:8f:1d:cc:f6:ab:2c:4f:28:9f:
fe:4e:30:f9:38:61:ea:67:32:c8:ff:7b:fd:12:4f:
1b:62:6d:33:1a:7e:01:d8:9f:78:2b:ec:70:82:c3:
07:f2:8b:18:d0:c3:f3:87:92:6a:6f:71:a1:7f:c0:
b2:ba:1c:7f:ad:cd:3b:2a:4e:05:84:7d:ba:25:fd:
14:58:66:4a:6e:80:f3:63:7a:77:8d:26:12:be:9d:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:80:17:3D:9C:51:66:3C:83:8F:79:92:32:73:E8:AA:C3:EE:C1
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:29f0::/44
Signature Algorithm: sha256WithRSAEncryption
24:df:4a:07:17:e8:bb:ca:8f:36:a8:74:46:52:41:f6:cc:54:
8e:91:81:ed:dc:54:e5:6f:57:0c:05:d3:d7:ba:1e:4c:de:27:
1d:dd:97:fa:00:00:27:cd:e8:3d:22:a5:92:7f:5a:7b:f7:28:
66:87:b1:5d:73:4e:2f:35:6c:28:0b:c6:85:d4:ce:56:5a:3f:
5f:ac:34:d0:0f:0a:41:dd:85:cf:56:17:05:94:67:57:4c:76:
db:28:67:06:22:12:67:db:b4:f4:a0:56:27:02:50:7a:ce:7a:
b3:1d:f3:74:10:df:19:05:80:f1:e1:9c:b7:58:58:f7:df:06:
c9:d3:9d:87:86:c6:4d:93:6b:64:b5:af:43:cc:73:00:9b:d8:
c4:33:1d:a3:58:0b:63:21:4f:4b:c2:27:99:d1:81:1a:5f:77:
3c:cf:60:ce:ed:1b:c4:13:e5:d6:66:cc:da:53:30:e3:c4:17:
5d:37:09:54:12:a9:3c:25:41:b1:d7:56:bd:d8:2f:16:21:9b:
02:1f:ec:a3:7e:e5:0f:0d:9e:66:68:c2:ef:c0:64:90:d3:a3:
df:76:d4:bd:61:0f:6b:75:5f:b9:c1:c7:03:22:41:59:e5:bc:
68:ab:88:30:5f:cb:05:e3:f2:75:3a:9c:fe:e3:49:41:8f:58:
08:7f:d7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org