Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201341.roa
File: AS201341.roa (raw, json)
Hash identifier: q5wvWYfNFonhUXH0k4tlyJDS0NYmMuo+uEMi7Ke+GVE=
Subject key identifier: F5:AB:9C:35:C1:E5:5C:6F:9C:DB:86:42:BD:E0:DC:30:DE:AA:5E:A7
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1D2DC9D57EA6013953E739DCCCAFFCDD236E5529
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201341.roa
Signing time: Tue 05 Dec 2023 02:44:12 +0000
ROA not before: Tue 05 Dec 2023 02:39:12 +0000
ROA not after: Tue 03 Dec 2024 02:44:12 +0000
asID: 201341
IP address blocks: 185.121.160.0/24 maxlen: 24
185.121.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2d:c9:d5:7e:a6:01:39:53:e7:39:dc:cc:af:fc:dd:23:6e:55:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:12 2023 GMT
Not After : Dec 3 02:44:12 2024 GMT
Subject: CN=F5AB9C35C1E55C6F9CDB8642BDE0DC30DEAA5EA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:c3:25:40:ed:71:25:3d:4c:20:7f:70:e8:
b5:ad:71:d0:91:63:42:92:91:84:9e:05:9d:74:4f:
0c:cc:17:b9:ef:81:1d:1b:97:0e:de:88:fa:29:d6:
19:23:8e:f0:2a:ee:fa:12:e8:cd:26:8f:5d:02:23:
7c:c8:09:bd:0a:3f:2f:66:18:94:9c:db:df:98:b5:
01:db:ab:14:9f:52:9d:6e:08:65:48:f9:a6:82:e1:
31:6b:db:1e:95:73:ca:a9:4d:15:47:8d:e8:21:db:
5e:59:35:9d:93:ca:0a:f4:c9:ce:30:b6:77:e2:81:
ad:0e:d5:c3:5a:4e:81:33:09:30:5b:d5:47:14:a4:
ed:0c:4c:2e:bd:19:b5:94:6c:d1:26:5e:c4:71:cf:
f6:49:0f:f2:b3:bc:f8:6f:29:ab:fa:6a:d7:02:f7:
80:ab:a6:3b:1e:91:49:51:bf:28:8d:18:6b:bd:57:
50:ec:dc:5b:ce:16:4a:07:25:d3:25:1c:c6:29:63:
d1:1d:b4:74:b6:a9:0c:30:ba:eb:8a:ed:40:a1:23:
ad:1f:85:67:eb:b6:28:13:ca:df:ba:65:1b:52:f0:
8c:a0:98:bc:9b:92:37:46:bd:61:22:a1:a5:7e:81:
90:6b:45:be:ca:9c:e2:79:1c:7a:fb:19:3d:ed:6a:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:9C:35:C1:E5:5C:6F:9C:DB:86:42:BD:E0:DC:30:DE:AA:5E:A7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201341.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.160.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:42:39:ff:ab:5d:a9:8b:cb:d1:92:2b:58:29:f0:53:56:ce:
05:24:52:8c:de:dd:dc:14:3a:f6:6d:28:d0:e8:84:c2:fd:24:
fd:67:bc:92:ed:23:e8:2d:93:61:58:45:d5:95:1d:9e:72:67:
d1:05:3b:e7:b2:70:7c:50:e1:19:48:7a:e6:f1:51:58:35:a2:
67:13:c9:0c:c8:98:2b:64:7a:86:d8:6e:7b:ef:68:81:78:fe:
06:84:8a:14:e0:56:da:d6:da:51:1c:71:bb:6f:cf:b7:bf:e2:
ba:75:89:15:c0:89:2f:a3:94:3f:91:3d:33:cd:6a:de:d4:06:
3a:12:2f:d0:67:62:4e:16:4c:d6:7d:7a:54:62:a1:5c:0b:0b:
b7:85:c8:3f:1d:d3:50:3e:30:9e:19:ab:3c:3c:77:05:7b:0f:
b7:2a:30:43:3a:27:82:31:a2:b8:90:e5:bc:90:7e:d5:68:34:
eb:5f:76:ab:7b:3c:bb:28:66:81:db:91:0c:6d:10:70:e3:c6:
50:a3:fc:f8:16:47:a9:d4:1f:3d:09:44:86:4d:9b:19:e0:37:
9b:7d:27:96:f8:6f:33:0e:1e:e1:27:9f:e6:c9:02:48:4a:fc:
b6:8e:44:c0:2f:9f:f8:43:86:03:2c:17:87:70:a4:16:41:bd:
96:66:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org