Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201865.roa
File: AS201865.roa (raw, json)
Hash identifier: N3+WgvPLI6hZ8CUZ26c/BG5UmFxquBXVRGCPKXVus+Q=
Subject key identifier: 81:35:7D:D4:FD:BA:AD:5A:0C:4C:6A:09:F2:7B:97:88:44:EE:0F:9D
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 07FF1E0BEA8CD360C0A8A023B8AF67B18C6583AC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201865.roa
Signing time: Tue 05 Dec 2023 02:44:19 +0000
ROA not before: Tue 05 Dec 2023 02:39:19 +0000
ROA not after: Tue 03 Dec 2024 02:44:19 +0000
asID: 201865
IP address blocks: 2a06:a005:5a6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ff:1e:0b:ea:8c:d3:60:c0:a8:a0:23:b8:af:67:b1:8c:65:83:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:19 2023 GMT
Not After : Dec 3 02:44:19 2024 GMT
Subject: CN=81357DD4FDBAAD5A0C4C6A09F27B978844EE0F9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e5:a6:f9:0c:e3:a1:e6:f3:9c:89:fc:31:64:
ed:dc:e7:95:d2:c1:36:45:61:ad:1b:a1:b5:a1:50:
ce:ca:09:bf:26:01:84:78:5c:b8:bd:5c:bb:62:fc:
98:98:ec:79:a6:0f:6c:b5:70:2b:a1:37:f3:6f:11:
36:3f:dc:f5:29:76:c7:6d:86:81:a3:43:bb:77:20:
ef:21:38:38:a0:15:a0:de:d1:67:c6:d9:4e:96:cb:
a9:ca:4e:5a:e2:55:1b:45:7b:54:f3:83:de:19:49:
08:d3:5f:ed:76:64:37:40:54:7a:da:3d:6d:d3:16:
99:4f:ec:0d:72:43:30:93:32:40:81:09:a4:27:70:
51:04:b0:e1:c5:7a:db:30:09:68:27:c9:c8:8f:06:
8d:30:70:2b:bb:ca:fc:2c:95:d3:4f:10:1d:1b:b1:
f7:05:f4:63:2b:50:99:a5:28:da:2c:6d:58:c0:a9:
6a:f8:1f:22:f2:18:bd:2d:4d:f4:87:0b:5d:23:de:
43:e1:81:a1:8c:25:26:5e:f5:91:ed:41:38:7f:d4:
3a:cf:b4:8f:ed:1e:64:28:6e:b6:31:d8:95:d1:ad:
5d:26:7f:01:8b:d5:51:3d:84:3f:27:a5:e1:57:ec:
4b:58:8e:0f:6d:33:38:5f:d0:d2:f2:d4:b5:59:77:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:35:7D:D4:FD:BA:AD:5A:0C:4C:6A:09:F2:7B:97:88:44:EE:0F:9D
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201865.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a6::/48
Signature Algorithm: sha256WithRSAEncryption
5b:91:39:a5:e4:c4:5d:0b:b7:b4:af:aa:57:94:c8:7d:f0:d2:
93:2f:06:41:df:d5:bd:1b:83:b5:91:34:ef:9e:b2:97:fe:3d:
29:b9:4f:3c:e6:ce:e3:15:71:b2:f3:f1:85:e5:ab:f6:2a:3d:
37:b3:29:05:c0:64:76:9a:55:d8:d0:f5:56:00:fd:57:d2:32:
0d:c6:a5:69:77:c2:c6:1b:f5:45:69:83:6f:b8:e9:67:10:a7:
e2:2c:1d:2d:fb:5a:8b:2d:96:ad:3e:62:e8:7c:f3:6a:3f:32:
f6:07:2c:2c:85:35:93:f1:4e:4e:b4:51:85:c3:e5:8b:9d:b8:
ad:4b:0e:36:2a:5d:53:e5:16:23:b0:17:77:43:b0:5c:11:ce:
94:1c:5e:4a:ac:47:2b:ca:54:10:13:c8:f5:73:95:94:93:09:
8b:a4:5c:34:2b:07:ee:49:05:5a:cf:2e:63:b6:c8:3f:ac:13:
24:1f:27:3a:cc:7e:d8:d3:ec:d4:e0:48:e1:16:20:f4:25:7b:
34:ce:bb:32:6e:cc:f3:7b:4b:14:af:bf:c6:76:b7:a2:a3:2a:
b2:11:cb:09:2c:80:f2:d4:f4:25:82:4d:3f:bd:79:e1:dc:a4:
5b:e5:90:55:2c:07:c0:51:80:60:6c:46:ca:98:1b:cf:74:ca:
f6:53:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org