Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201760.roa
File: AS201760.roa (raw, json)
Hash identifier: tHZJsmtMfUhauxQVMniQuuU3UcVYt9Zyw8gdcaIP990=
Subject key identifier: A6:95:2D:79:DC:EC:0D:D9:00:5F:10:84:67:F3:43:AD:1B:74:81:BD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6C2AC1348A769C91C02D3873ECEE4F13C3570094
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201760.roa
Signing time: Tue 05 Nov 2024 03:40:09 +0000
ROA not before: Tue 05 Nov 2024 03:35:09 +0000
ROA not after: Tue 04 Nov 2025 03:40:09 +0000
asID: 201760
IP address blocks: 2a06:a005:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2a:c1:34:8a:76:9c:91:c0:2d:38:73:ec:ee:4f:13:c3:57:00:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:09 2024 GMT
Not After : Nov 4 03:40:09 2025 GMT
Subject: CN=A6952D79DCEC0DD9005F108467F343AD1B7481BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:9e:5c:bf:16:2f:84:99:bf:7e:fa:31:a6:
33:e2:54:8c:70:da:d9:ca:f3:c7:34:7d:fc:b4:52:
e8:ec:fe:95:e3:c7:3f:31:f8:3f:37:93:d2:53:07:
5b:99:d2:f9:8f:f4:9c:43:4f:63:d1:7d:e4:9d:60:
8f:94:c4:41:6c:5d:df:8a:2c:8c:e1:7c:d8:8d:a1:
52:35:93:75:38:a7:8e:03:ad:46:31:96:f5:4f:98:
8b:15:fb:9f:3c:d0:3a:6a:ed:3a:dd:06:58:b4:51:
31:3a:88:78:71:77:e9:1f:87:98:86:30:78:1e:50:
2f:cf:29:f6:6c:30:f4:e5:8b:b4:ee:04:85:a5:a4:
62:69:e2:89:9f:94:49:f8:93:58:8d:2d:0e:8f:15:
0c:d4:ad:58:04:be:66:0c:e8:d5:c1:06:82:0a:43:
6f:ae:5a:48:a2:3b:00:35:26:a4:f6:e5:a4:d7:7a:
f4:3d:93:42:ca:17:57:9f:65:17:20:e1:12:61:26:
81:41:ad:0d:90:26:f6:2f:95:e0:c6:5c:29:7a:9a:
f7:e4:1b:53:35:7f:df:8c:06:92:e8:8f:85:03:77:
cb:d7:d2:be:9b:2a:43:d1:9f:eb:be:c6:c6:7b:3e:
f4:98:12:17:13:29:78:06:df:06:70:85:5e:27:05:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:95:2D:79:DC:EC:0D:D9:00:5F:10:84:67:F3:43:AD:1B:74:81:BD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201760.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1080::/48
Signature Algorithm: sha256WithRSAEncryption
5a:10:8a:f6:85:b6:46:dc:1b:67:ca:a2:9b:58:7c:46:9c:48:
44:53:5c:26:e0:e4:ac:3a:24:d3:41:c5:a4:4f:df:40:2f:ef:
93:8d:db:41:b7:bb:f1:eb:34:cd:3e:f6:64:35:e4:34:5b:ba:
c1:1d:56:70:99:a8:93:42:e2:7f:da:f2:10:9f:52:c8:85:19:
65:a6:34:04:2e:97:3b:3c:cd:e4:d9:ac:9c:e0:b1:e8:0d:76:
00:8b:d0:d1:66:de:8d:b1:6f:37:68:63:46:85:44:11:4f:1d:
b7:09:cf:b1:fb:a4:e5:bd:42:ca:74:7f:6c:13:9a:25:81:4d:
93:94:bd:be:ae:68:0b:b9:fb:fc:28:2f:15:a2:db:13:95:b2:
d2:db:09:81:af:0f:9f:24:7d:05:12:96:2f:7c:a4:ab:c6:a8:
0b:74:75:fb:3a:7a:35:b5:0b:a1:b6:23:1a:37:81:b8:78:32:
97:99:8b:89:27:9e:44:01:a3:7e:7b:a2:55:54:37:e3:de:31:
7e:7c:83:ba:55:0b:da:48:49:95:54:da:9e:32:d6:18:cd:e7:
4e:d2:e4:7a:9d:fc:af:ac:6f:bb:93:32:a2:ac:47:38:3f:33:
62:3a:d5:99:f1:0a:81:a8:cb:a4:70:87:7c:c0:50:db:87:31:
66:ce:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:10 2024 by rpki-client on console-ams.rpki-client.org