Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201251.roa
File: AS201251.roa (raw, json)
Hash identifier: yfgzCTGOcyBwp5PfU42n9+LZn7fahGyEGX/HEFaA16A=
Subject key identifier: 56:52:2D:CD:D4:DD:6E:FA:34:F4:62:9B:EF:B4:2C:83:4F:22:8F:CE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 48FD2F6AF846C64EA7F3C6793D740DE2869E7E04
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201251.roa
Signing time: Tue 05 Dec 2023 02:44:09 +0000
ROA not before: Tue 05 Dec 2023 02:39:09 +0000
ROA not after: Tue 03 Dec 2024 02:44:09 +0000
asID: 201251
IP address blocks: 2a06:a005:22b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:fd:2f:6a:f8:46:c6:4e:a7:f3:c6:79:3d:74:0d:e2:86:9e:7e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:09 2023 GMT
Not After : Dec 3 02:44:09 2024 GMT
Subject: CN=56522DCDD4DD6EFA34F4629BEFB42C834F228FCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:51:a0:d4:ee:74:61:27:35:5a:0b:73:01:56:
57:02:61:0f:a5:0f:7e:39:6d:e6:49:d1:5f:3a:a5:
74:e5:e6:c5:8b:94:94:9a:f2:41:2a:f1:34:40:68:
87:d4:f4:c0:65:db:8f:8d:d0:8e:0a:a0:3d:a6:d4:
4f:8c:d1:33:90:d5:4b:1e:96:d5:35:29:6c:85:00:
87:aa:42:38:0a:fd:69:2c:ef:1a:c4:f9:ca:94:94:
74:b2:0c:1c:43:29:92:e8:06:83:55:2d:23:24:fb:
56:3d:c0:16:f4:de:ff:82:12:43:0e:29:12:86:f1:
5c:cc:4d:0f:e6:7d:e1:32:af:bf:3a:01:1c:20:14:
9b:7c:04:da:a9:18:0e:67:f0:fa:38:32:88:66:be:
c7:7c:29:1c:ce:b9:eb:4c:71:bc:1f:04:f2:58:ef:
f3:a1:f3:73:92:2f:8c:91:49:cb:ed:71:c3:aa:73:
77:c2:9e:6c:a2:b7:e9:2d:ae:c9:f6:9b:88:ed:de:
cb:67:17:7d:3a:10:41:f9:34:22:7d:c2:a8:35:96:
f3:aa:7a:38:1c:1d:05:41:83:db:a8:2f:e2:1b:c4:
61:04:04:5e:b8:36:bd:34:c2:74:2b:25:a6:0c:0d:
35:e1:70:aa:a6:f3:8a:9a:b5:e2:fd:e9:4a:a1:45:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:52:2D:CD:D4:DD:6E:FA:34:F4:62:9B:EF:B4:2C:83:4F:22:8F:CE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201251.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:22b0::/44
Signature Algorithm: sha256WithRSAEncryption
4a:1f:c6:f5:6c:24:47:40:87:e5:f1:bf:a5:3c:3f:9e:0b:f1:
d2:6a:1a:33:1d:97:b4:c9:11:9c:e8:51:25:4d:7c:28:0f:58:
de:35:e4:bc:3c:bb:52:d2:0d:9d:fb:3c:dd:4e:a3:e3:d5:c7:
a7:a1:9b:a5:1b:54:7d:ba:13:66:4b:35:c0:9c:87:47:18:4f:
37:14:19:81:a2:e0:63:2e:5c:4e:5a:5f:5e:24:50:37:fa:54:
56:70:c6:97:a3:90:0c:c6:07:03:32:54:a7:b4:c4:b6:5f:5d:
71:a8:46:d8:bb:39:37:b3:8e:cd:b4:6c:c7:3b:0e:60:c7:12:
59:e3:31:cc:df:3a:6b:f7:46:b8:5c:89:e0:39:cc:15:74:2a:
ee:77:ec:52:f6:99:67:5b:19:0d:15:64:b4:20:de:ec:03:44:
94:ba:0c:61:99:13:c3:a4:41:31:6b:2a:81:2c:a4:89:70:2f:
d1:86:20:52:5b:aa:e6:72:68:d7:bd:3b:5f:0f:d6:89:ba:31:
5a:96:dc:96:d7:af:09:75:4d:d7:cf:0b:b1:f3:13:cc:32:86:
5f:1a:58:0a:52:45:2d:bb:83:4f:d3:d2:d8:26:ee:0f:ae:91:
f2:30:ab:e8:c8:69:d3:04:0c:5e:de:a3:42:35:93:ad:b3:65:
98:1b:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org