Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201760.roa
File: AS201760.roa (raw, json)
Hash identifier: ilHiLSuZ03fx0ymxvCrd0xFK5Pqf1O2KIipcjnpG7Mo=
Subject key identifier: 44:F7:C5:29:31:37:F1:5E:C1:03:8B:8D:6F:A1:28:D9:08:60:6E:F4
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 01A9AA836B2BF0A7C9CCFC85927A98164384DFC0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201760.roa
Signing time: Tue 05 Dec 2023 02:44:18 +0000
ROA not before: Tue 05 Dec 2023 02:39:18 +0000
ROA not after: Tue 03 Dec 2024 02:44:18 +0000
asID: 201760
IP address blocks: 2a06:a005:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a9:aa:83:6b:2b:f0:a7:c9:cc:fc:85:92:7a:98:16:43:84:df:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:18 2023 GMT
Not After : Dec 3 02:44:18 2024 GMT
Subject: CN=44F7C5293137F15EC1038B8D6FA128D908606EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:33:5c:7f:af:18:3a:0d:49:2d:8d:fc:9d:
7c:25:6b:33:25:90:dd:f8:04:77:c6:af:26:36:c6:
27:3e:a4:fc:34:7e:4a:c8:2c:4b:f4:c9:20:0b:9a:
ab:6c:93:6c:b2:ee:6b:c9:df:23:07:ce:77:ae:8a:
66:de:62:a8:9c:0f:20:3d:0e:99:a6:fe:f5:7c:7d:
5b:86:5a:17:76:f5:80:24:eb:fb:9a:d7:b6:dd:50:
71:a4:41:19:24:82:1f:8c:39:1d:1e:a5:dd:64:eb:
75:40:41:5f:af:08:bc:0c:e7:ee:82:97:63:df:0d:
c0:92:26:0b:9e:cf:a3:38:4b:12:31:3c:ce:1f:8d:
b2:29:ce:56:b6:59:70:e6:b6:c2:0a:15:72:40:c7:
08:d9:ce:7b:86:63:57:4c:5c:e0:cc:b8:66:b9:35:
65:28:ae:41:56:4b:80:e1:9a:db:7a:23:ff:11:1b:
47:d3:26:a2:9d:97:e0:9a:d3:c7:18:ff:85:2a:7b:
fd:2b:55:f8:f0:04:f6:fa:3e:e5:68:55:49:08:41:
79:bc:f0:3a:0c:3c:fc:83:52:a2:4b:bb:97:3c:5a:
5e:8b:99:2f:ab:77:a3:ed:5e:fb:33:fe:7b:cb:93:
f5:d0:7d:6e:24:4e:df:0f:bd:44:77:59:e1:1a:e2:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F7:C5:29:31:37:F1:5E:C1:03:8B:8D:6F:A1:28:D9:08:60:6E:F4
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1080::/48
Signature Algorithm: sha256WithRSAEncryption
18:fd:cc:fa:34:a2:8c:48:7b:8c:b7:82:d0:aa:b2:27:d0:19:
ea:72:c2:1f:39:1e:9d:61:85:4f:33:ea:48:94:d4:09:94:03:
c5:29:33:b8:a8:77:ac:3b:54:80:cd:a9:1e:ec:7d:f6:44:1d:
48:d1:51:22:77:47:49:6e:5e:5b:85:7e:29:b6:f8:98:20:78:
cb:86:b0:23:11:0e:2c:a9:42:3f:9f:93:88:a5:60:fa:16:11:
1b:f8:3c:c9:cb:57:13:26:41:3b:44:17:17:14:ec:5e:8d:ed:
9f:08:16:d4:52:fe:ba:85:e2:27:66:a6:11:d6:41:d5:5b:86:
a3:5d:54:77:22:ab:96:90:54:c9:c0:ed:26:59:d8:c3:3d:46:
9a:1b:3f:5e:fb:74:f5:79:cd:3d:88:a3:b2:a9:7d:c4:0c:a4:
72:d0:57:48:dc:02:97:97:4c:c1:68:ed:6e:a5:12:de:46:db:
17:3b:60:33:3c:fb:bb:63:59:0a:e9:1e:75:75:5d:25:fd:4d:
8f:60:2c:2a:a7:8f:0c:1f:df:bd:69:bd:f8:6c:9e:c4:3e:a4:
33:13:79:12:1b:ed:9d:32:48:e0:23:66:21:07:44:c2:1e:17:
75:42:fa:96:de:d4:37:33:62:e7:ae:9f:ad:a8:5f:08:79:89:
8e:92:82:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org