Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202255.roa
File: AS202255.roa (raw, json)
Hash identifier: H5FW6sWm5YU73sAT3SY7yw8jAFSFZ134MkurjjdoJCU=
Subject key identifier: F1:84:3B:8B:B6:CF:47:D3:06:67:FC:BC:4C:12:A0:93:5B:A9:32:74
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 460D23B7A33AABE8FEF9D3442871B9801D3CD87C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202255.roa
Signing time: Tue 05 Dec 2023 02:44:19 +0000
ROA not before: Tue 05 Dec 2023 02:39:19 +0000
ROA not after: Tue 03 Dec 2024 02:44:19 +0000
asID: 202255
IP address blocks: 2a06:a005:1503::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:0d:23:b7:a3:3a:ab:e8:fe:f9:d3:44:28:71:b9:80:1d:3c:d8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:19 2023 GMT
Not After : Dec 3 02:44:19 2024 GMT
Subject: CN=F1843B8BB6CF47D30667FCBC4C12A0935BA93274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:34:0a:1d:07:23:bf:b4:ee:ac:ee:ae:c3:
5f:62:b9:a6:a4:6a:6e:b4:72:6e:4a:03:b3:e4:65:
1f:91:fa:2f:22:33:75:0a:96:bd:47:50:ed:b9:9b:
57:cc:d2:bf:d4:e2:8d:9b:f6:f7:a2:af:c7:3f:7a:
14:73:05:90:2d:e6:cd:e6:bf:a1:7d:97:65:69:a7:
1b:a6:a0:03:ed:d2:53:cb:c7:66:23:5b:9e:b9:52:
64:13:a5:61:b4:74:3e:e6:7b:95:0f:c3:40:02:fa:
2e:df:9e:26:52:e0:88:d6:56:88:16:95:32:91:ba:
fe:3b:79:50:90:35:9e:65:a5:4b:4b:59:12:5f:5a:
c6:22:90:bf:03:bf:51:21:8e:5d:90:d2:e9:75:2b:
a5:58:c4:ff:e0:42:44:ce:7c:fa:4b:6a:27:5d:f9:
47:1f:5e:4a:66:1b:ae:a0:d0:3d:d8:b7:c2:58:ab:
fe:a2:04:f7:80:93:c3:c3:4b:ff:4d:0e:ac:9e:b6:
b7:96:a3:d6:d3:37:22:4e:89:63:ba:e4:17:be:70:
97:41:67:01:32:53:f8:a9:07:fc:1a:ba:0c:1c:e5:
dc:84:42:9b:f6:c8:8b:fc:a8:20:55:59:c5:32:90:
a0:ce:07:04:63:97:4d:bd:f7:84:0f:9c:c9:5d:01:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:84:3B:8B:B6:CF:47:D3:06:67:FC:BC:4C:12:A0:93:5B:A9:32:74
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1503::/48
Signature Algorithm: sha256WithRSAEncryption
57:0c:01:86:36:9d:b2:a6:24:d4:36:87:e7:f7:8d:5b:a8:40:
ad:45:c7:a4:69:c6:83:e1:30:a8:cf:77:cb:e1:7b:1b:ae:1c:
9f:43:29:0c:ea:3f:87:b7:90:7d:cb:e3:08:32:65:8b:a0:e3:
6a:b7:f2:b0:5a:6a:a2:4f:f0:2e:48:ee:2b:8b:f9:cd:de:9d:
ba:23:bf:03:2a:56:0d:cf:41:ac:c9:6d:04:91:de:dd:a9:00:
0f:e0:d3:22:cd:39:49:3c:17:03:7b:56:33:f8:70:5c:9c:1d:
39:97:fe:40:b4:90:7c:74:d9:03:63:7d:03:c3:12:4e:5d:d8:
e8:09:05:26:d9:34:94:7a:a5:eb:46:c8:45:18:b2:48:fa:fd:
c1:e6:5b:f2:2e:2c:53:ba:06:4f:a6:3f:93:35:94:6a:dd:02:
46:d4:36:7c:d2:8e:06:c3:aa:34:2b:4a:8d:b4:68:5f:ab:dd:
24:2c:f5:d4:b5:ef:13:3a:fb:63:2d:a9:5d:c1:f0:57:91:f7:
ae:8c:46:ce:04:6e:85:32:af:41:33:d9:ca:73:73:f4:64:70:
a9:4e:6e:3d:53:5f:37:1a:d8:06:6c:5e:c1:fe:47:56:d6:16:
d1:9a:a9:d8:ac:3a:55:3f:4a:c9:42:04:ba:e5:d9:14:8c:8b:
13:b8:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org