Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202260.roa
File: AS202260.roa (raw, json)
Hash identifier: /Q+HGK+1GbrqBFShckP1emVBTwNNl5qmMehUMMKzKls=
Subject key identifier: F6:1C:C7:E7:9D:46:6F:C8:78:6A:7D:56:23:19:DC:D7:AF:72:E0:08
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 71E88D898722A4D5136F4EAA858D423019C7719A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202260.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 202260
IP address blocks: 2a06:a005:1d00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e8:8d:89:87:22:a4:d5:13:6f:4e:aa:85:8d:42:30:19:c7:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=F61CC7E79D466FC8786A7D562319DCD7AF72E008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:be:2c:3b:a3:80:8e:0c:c2:41:34:87:b5:42:
5f:76:81:f8:8b:0d:30:ff:3b:ff:98:b5:8c:67:24:
81:23:ca:83:0d:e8:d4:2a:24:43:a8:cd:ed:1f:1e:
d6:90:20:f7:d0:ed:f0:a2:9e:1f:8b:7b:58:74:46:
24:48:2b:2e:ec:a3:02:17:98:09:d9:26:b2:ea:ee:
70:42:b1:98:6d:68:10:60:55:44:1c:27:7d:a5:5f:
1a:a5:1f:b3:23:00:a2:3a:70:da:f7:f8:af:2f:e5:
92:34:f9:8f:01:4c:07:f2:ba:e8:bc:64:48:d0:8d:
f1:f8:ca:55:08:06:29:22:b5:3c:9e:74:ec:fe:f5:
d6:8f:ec:51:f6:40:23:cb:af:cc:c1:87:84:3d:6a:
f4:51:a2:83:95:9d:c0:a8:28:fd:67:16:ab:91:b5:
61:7b:6c:6a:ba:6a:56:91:ef:b2:3e:45:b5:90:43:
3b:b2:2a:82:85:d2:6d:8d:c2:4d:3d:99:30:b3:e7:
7d:ed:1d:c3:f2:cf:28:49:82:f9:92:ca:cd:34:b9:
d8:61:9a:22:43:68:4b:5b:ac:e2:45:46:88:9f:16:
60:5a:ea:a9:54:e0:30:66:1d:b0:12:03:58:04:16:
e9:89:64:c8:e2:5e:45:6f:59:97:6e:02:1a:8f:38:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:C7:E7:9D:46:6F:C8:78:6A:7D:56:23:19:DC:D7:AF:72:E0:08
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202260.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d00::/44
Signature Algorithm: sha256WithRSAEncryption
5f:3b:12:d6:2c:6b:47:53:ac:c8:5c:96:1a:ea:0a:a8:f1:9d:
4a:61:87:a3:e2:00:6c:be:d7:77:51:f2:ef:a2:e3:16:da:e4:
93:da:b5:fc:e5:a5:61:55:1d:8d:e7:fd:71:2c:80:6a:b1:4b:
fc:ae:36:a2:45:8a:d6:25:cb:e5:54:ec:3f:7e:fd:76:6d:a5:
5d:41:c9:5b:57:ed:ab:7d:b8:d6:b8:c9:f3:94:88:f5:07:1f:
d8:4c:5b:f3:c9:84:2d:cb:ba:e4:e3:4a:f5:b5:7b:29:5e:68:
70:f9:4a:bf:39:b2:bb:b8:9f:d8:29:70:e1:a1:87:46:32:00:
df:f9:bc:02:da:b4:f7:55:44:c0:cb:74:b2:55:ca:e3:79:aa:
80:c1:a2:d5:d2:ba:5c:24:60:1e:74:ce:29:d4:c2:b9:19:2f:
21:28:bc:20:67:dc:5e:cc:4b:be:d1:4e:96:3e:97:ef:bb:6c:
62:78:2f:ac:c6:43:c1:b6:50:1e:69:47:c2:23:52:cb:ec:e1:
11:15:86:7a:a0:87:0c:fa:bc:df:db:1f:89:79:a0:7d:c5:b2:
d2:70:6b:96:f2:62:cd:75:7c:1e:78:d0:62:5e:46:12:0c:56:
2b:e9:17:07:84:2e:cc:d6:0d:49:f3:81:15:70:3d:52:05:ba:
a5:f7:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org