Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201818.roa
File: AS201818.roa (raw, json)
Hash identifier: d2iISf9M6m5n3dQEtQvdyMFoMzDRWcN6izTOVLH3KhI=
Subject key identifier: C3:47:39:F5:C1:FE:0D:14:0E:A7:64:F8:E6:90:0B:7C:5C:74:5B:15
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 07DC26AA930B6F1C260905AA1CFB83A65640D945
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201818.roa
Signing time: Fri 15 Nov 2024 16:40:12 +0000
ROA not before: Fri 15 Nov 2024 16:35:12 +0000
ROA not after: Fri 14 Nov 2025 16:40:12 +0000
asID: 201818
IP address blocks: 2a06:a005:2010::/44 maxlen: 48
2a06:a005:20f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:dc:26:aa:93:0b:6f:1c:26:09:05:aa:1c:fb:83:a6:56:40:d9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 15 16:35:12 2024 GMT
Not After : Nov 14 16:40:12 2025 GMT
Subject: CN=C34739F5C1FE0D140EA764F8E6900B7C5C745B15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:21:d6:53:67:f6:4c:87:d0:8f:15:68:d9:
ca:82:18:7f:23:09:0d:a6:34:82:72:eb:47:94:e8:
d7:72:78:34:fe:e4:17:86:aa:69:c2:ba:d6:0e:35:
1f:65:af:66:32:b3:c1:59:8b:5f:38:3d:31:dd:69:
29:f4:ed:25:0c:b8:e4:29:cc:d4:ee:3b:7c:02:a8:
1a:ab:0a:bc:73:50:90:58:fb:7a:52:2c:b8:ad:d0:
ba:1e:58:45:63:8c:70:30:2d:6a:8f:72:26:cd:dd:
a2:8e:dd:f1:dc:03:5e:9c:4f:11:f0:53:b9:56:f8:
74:05:b0:3c:51:fe:98:92:fc:b8:d0:3e:14:69:9c:
25:a2:7e:e9:35:03:5c:0e:85:72:24:62:fa:71:a8:
cd:bc:33:40:59:73:d9:f5:78:ec:45:d1:88:8e:3c:
99:88:6f:bf:79:13:de:f1:93:3b:30:98:01:a6:00:
87:32:0b:be:f3:d9:59:36:12:b8:c4:ad:5f:bd:16:
0d:91:5d:e9:0f:1c:82:f4:ac:8c:72:3d:5a:63:37:
fc:02:22:6b:98:50:60:f2:57:89:a4:84:24:30:32:
0d:a1:c7:29:44:2e:16:9c:de:32:92:e1:52:3a:62:
2d:da:a3:ec:e2:35:39:cd:bc:69:4f:81:0a:9a:00:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:47:39:F5:C1:FE:0D:14:0E:A7:64:F8:E6:90:0B:7C:5C:74:5B:15
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2010::/44
2a06:a005:20f0::/44
Signature Algorithm: sha256WithRSAEncryption
86:e1:05:5f:a3:e0:39:7d:27:3c:78:7f:19:3e:62:60:ef:80:
42:5a:41:83:3d:f5:60:fd:da:0a:34:66:02:4e:b2:7c:98:6e:
af:c5:72:f8:54:28:b8:98:f8:cb:56:15:f3:8b:d5:ec:15:8c:
38:79:d2:db:39:61:c4:8e:8c:ff:57:b2:41:72:81:eb:cf:ce:
30:1d:f0:d1:e6:96:ee:5b:76:1d:8b:41:a7:b8:75:7a:6b:7d:
13:c0:f7:e5:e0:3f:51:3d:65:a3:3d:dc:dc:84:3d:76:76:d0:
e5:bc:3e:19:3a:0e:84:65:74:4d:df:9e:4a:dd:d7:43:cb:2a:
d2:21:bb:02:41:da:dc:98:10:63:3e:fd:73:ce:ca:3c:40:34:
aa:38:bb:5e:7d:c9:0d:e5:7a:d5:57:40:f4:b8:01:19:fc:ef:
ac:c1:64:c5:fd:32:51:88:1b:b4:24:f5:af:68:c5:a7:24:81:
f5:d0:67:09:78:24:a8:f0:b1:b1:7f:86:97:e6:44:03:0c:31:
ad:9e:5f:0a:58:f4:07:0b:ee:73:86:df:9f:fe:20:22:2e:c7:
8b:f2:53:98:24:a8:8a:38:dc:1c:1d:a4:6d:7f:44:5d:14:19:
8c:a6:1f:9f:d2:90:db:d3:04:fd:b3:98:ff:50:1c:2c:30:65:
c5:cb:8c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:23 2024 by rpki-client on console-fra.rpki-client.org