Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201432.roa
File: AS201432.roa (raw, json)
Hash identifier: KrzzWygVmohAk+M4ZwcoDhmemHZNbH4q4LXV7ZYI8nI=
Subject key identifier: 0A:F4:F0:6A:5E:53:12:CD:B1:EE:EA:78:7A:D9:99:FC:8A:E6:A4:7B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 67C0DE972981D40D636358530A77390DE8140678
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201432.roa
Signing time: Tue 05 Dec 2023 02:44:09 +0000
ROA not before: Tue 05 Dec 2023 02:39:09 +0000
ROA not after: Tue 03 Dec 2024 02:44:09 +0000
asID: 201432
IP address blocks: 2a06:a005:c40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:c0:de:97:29:81:d4:0d:63:63:58:53:0a:77:39:0d:e8:14:06:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:09 2023 GMT
Not After : Dec 3 02:44:09 2024 GMT
Subject: CN=0AF4F06A5E5312CDB1EEEA787AD999FC8AE6A47B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a0:fa:c2:ca:ab:61:4e:33:b7:c1:20:df:b2:
0e:cd:eb:bd:42:5a:26:7d:ec:94:ad:a5:6e:d3:93:
a2:8a:15:94:22:0d:f6:5f:f0:8a:ae:e6:e8:73:45:
ec:f5:92:42:6f:6a:e2:6f:5d:7f:ef:2d:0a:8e:be:
62:b9:32:08:df:d1:1f:8e:57:ec:ae:e4:81:65:2b:
5f:60:cf:8e:92:4a:1f:2c:80:59:cf:1a:26:fb:2a:
90:f3:8a:b7:ae:59:2f:d5:4f:a8:b4:81:1c:f1:32:
b0:38:4b:74:43:4d:f4:3d:e7:a0:76:03:45:32:3b:
31:41:5c:02:c5:a9:36:d3:27:fa:8e:1a:8f:4d:75:
cf:97:56:ec:58:72:c5:b5:5b:56:c9:d6:c7:0d:5d:
76:16:c8:79:d8:ef:8c:94:d5:1c:39:78:ec:92:85:
85:08:9b:cf:3d:67:93:11:e2:62:74:5e:a6:fa:97:
cb:30:a6:d6:14:b7:f8:a3:1d:94:3d:57:4c:54:85:
2b:96:99:ee:08:16:6e:bd:97:9b:2d:42:dc:f0:58:
3b:c1:76:d2:4e:c9:4b:f3:d7:97:dd:8a:ea:6c:1c:
1d:76:4d:67:75:12:81:7d:33:5b:9e:3d:7d:bd:0d:
a5:6b:5b:7c:b5:4c:d7:de:f7:42:be:8a:86:77:98:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:F0:6A:5E:53:12:CD:B1:EE:EA:78:7A:D9:99:FC:8A:E6:A4:7B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c40::/44
Signature Algorithm: sha256WithRSAEncryption
b4:f3:fd:ef:0e:af:f7:b4:dd:3c:ef:30:87:8f:8c:13:f4:5e:
a4:6f:9e:63:7f:da:66:82:98:de:00:91:00:8a:00:d4:1f:74:
2a:2b:52:9e:11:b2:b8:09:43:16:e1:b0:d7:1b:92:3e:c6:ee:
83:dd:33:39:65:db:11:9b:a6:29:7f:b3:a7:ba:05:8c:8b:65:
ef:e6:a8:b9:d1:ca:80:df:3e:39:fd:32:13:bb:46:10:0f:2d:
67:54:6f:28:b4:df:b2:9a:0a:72:ff:9a:4b:0d:c7:1a:d5:a9:
b7:44:8a:21:c9:2e:2c:ad:10:3c:b4:9b:36:7c:0e:04:b1:0e:
c1:65:10:ba:39:52:2e:38:46:54:02:bf:64:57:9e:ca:62:f8:
4f:7a:ff:4f:49:6c:e3:40:12:67:6b:85:6b:15:72:ea:2e:e2:
15:6b:cc:d3:e9:92:4f:d8:1b:0f:26:5b:0a:f9:d5:75:5a:71:
f5:55:30:2d:32:cb:58:68:d8:7f:6c:0e:dd:1c:5a:ff:37:0e:
53:5a:8a:8a:35:c2:4a:17:26:96:ab:33:77:00:ee:e1:15:f5:
43:09:67:f9:dd:e8:64:ea:15:8e:7f:e9:79:65:1b:36:14:3b:
d8:4b:e5:f7:cb:0e:2c:f2:99:34:4d:4a:f1:c9:24:e9:03:38:
b3:8c:6a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org