Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201938.roa
File: AS201938.roa (raw, json)
Hash identifier: zP6+IJgVS+WuLOgf6vU8pZ7pEXb2BvXKjr3en7PzS84=
Subject key identifier: FE:49:8C:A3:F4:79:9E:B5:A7:76:2A:3C:CD:B6:3B:90:88:35:09:F7
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4EECCB460D33BCDD8D5A128AE249182FEDDAB7ED
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201938.roa
Signing time: Tue 05 Nov 2024 03:40:10 +0000
ROA not before: Tue 05 Nov 2024 03:35:10 +0000
ROA not after: Tue 04 Nov 2025 03:40:10 +0000
asID: 201938
IP address blocks: 2a06:a005:2110::/44 maxlen: 48
2a06:a005:2120::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ec:cb:46:0d:33:bc:dd:8d:5a:12:8a:e2:49:18:2f:ed:da:b7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:10 2024 GMT
Not After : Nov 4 03:40:10 2025 GMT
Subject: CN=FE498CA3F4799EB5A7762A3CCDB63B90883509F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:68:2d:ef:65:b0:a6:09:f4:e0:5c:12:37:
c0:d0:9b:48:52:c9:af:c0:b2:48:fe:bd:ca:3a:11:
3f:ea:bc:28:ed:76:6c:2f:4d:24:a4:cd:07:ee:6f:
49:8e:e7:fa:73:f3:f5:12:2f:5d:f1:3e:66:2f:35:
c9:39:b1:84:8b:03:4d:2d:af:09:b3:ed:90:c8:b8:
89:79:8c:29:95:51:24:80:a9:aa:a9:96:9e:30:a1:
97:3e:27:e7:b8:c4:d7:6a:cc:91:df:6a:64:c7:fc:
d5:c0:36:e1:62:e1:75:3a:80:de:4f:c5:9c:f9:5a:
4b:f5:73:73:83:5d:f1:4d:a9:34:00:ce:c9:bc:2b:
bf:e2:b6:2d:ea:9d:93:dd:1b:c7:ba:0c:a0:98:28:
1c:d0:d7:3d:c9:78:13:ab:10:01:09:0e:b0:37:0f:
5e:43:c8:5c:e2:43:bd:e3:fc:0d:05:54:71:34:f5:
ad:5e:c3:bb:79:e2:c4:91:d9:b5:55:f2:26:b5:99:
de:c8:bc:0c:e2:1e:a9:98:9d:d2:4c:51:ed:58:8f:
9a:df:f4:32:26:77:5d:2a:bf:e1:b7:57:3b:10:c7:
27:97:80:83:bb:0a:de:d0:42:4a:1e:ec:54:68:ab:
5e:4d:a6:ea:5d:df:2b:d4:94:4b:af:92:c0:be:15:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:8C:A3:F4:79:9E:B5:A7:76:2A:3C:CD:B6:3B:90:88:35:09:F7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2110::-2a06:a005:212f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c8:55:77:67:b1:b8:5e:bc:69:94:1c:49:d0:dc:6a:b5:e0:52:
ac:f6:9c:1c:a5:2a:29:a2:ef:d2:94:48:72:37:3c:09:96:87:
ed:17:ae:e9:55:6d:80:f1:b9:fd:37:98:7a:82:71:97:c0:e7:
37:bc:7c:96:56:5f:26:cd:cd:75:72:0e:a1:96:36:29:2e:52:
81:0f:52:0a:0f:a2:4b:ec:b3:4d:d8:b6:37:80:ba:c1:73:d1:
95:5d:25:cb:89:36:b4:c6:44:e9:4e:74:98:64:92:c7:27:56:
87:81:cd:14:a8:c1:21:d9:5b:03:39:1c:98:8d:e4:5e:fa:3f:
61:2b:97:28:19:ab:56:28:ff:be:29:dd:bc:f6:3b:6a:92:eb:
a0:e9:06:73:29:3c:5f:57:ab:34:76:28:c3:07:09:9b:c2:89:
5b:81:69:2a:12:da:3b:ed:8a:6f:6c:7f:a9:d3:a5:da:18:8c:
cd:f9:c0:23:d3:e3:49:d8:07:2f:9e:f6:2a:3f:9a:61:c8:e9:
0d:0b:c1:37:0d:92:64:a2:44:2e:e6:37:f8:09:71:c6:95:9c:
83:01:b3:e9:5f:ef:4a:3d:ce:31:35:65:fe:da:01:02:6b:15:
b9:7c:a8:13:79:cc:9a:eb:f1:4e:73:f0:bc:25:32:29:79:cc:
80:9c:6f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:54 2024 by rpki-client on console-ams.rpki-client.org