Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202464.roa
File: AS202464.roa (raw, json)
Hash identifier: slvHjtBtDFPl5W8XN6ZxW/zkKtISw8oPQkLfe2j9PYo=
Subject key identifier: FA:35:E8:25:83:18:38:BC:FE:BC:35:A8:FB:5D:9D:34:0D:41:8D:66
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 305E8F91B0A2D9CBDE2B5D50C8FA1807ECF22465
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202464.roa
Signing time: Mon 29 Jan 2024 05:44:24 +0000
ROA not before: Mon 29 Jan 2024 05:39:24 +0000
ROA not after: Mon 27 Jan 2025 05:44:24 +0000
asID: 202464
IP address blocks: 2a06:a005:2cd0::/44 maxlen: 48
2a06:a005:2ce0::/44 maxlen: 48
2a06:a005:2cf0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5e:8f:91:b0:a2:d9:cb:de:2b:5d:50:c8:fa:18:07:ec:f2:24:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 29 05:39:24 2024 GMT
Not After : Jan 27 05:44:24 2025 GMT
Subject: CN=FA35E825831838BCFEBC35A8FB5D9D340D418D66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:17:78:0c:ac:24:9d:81:c7:8b:40:ea:7f:b9:
95:6b:7d:da:94:de:57:89:19:70:b2:dd:c7:3e:fc:
45:12:46:5d:bd:9c:c3:71:5b:f8:79:5b:af:37:7d:
65:74:63:f5:bb:16:4e:b5:d6:41:1a:ab:74:e8:a1:
e2:29:fb:1e:63:9e:65:cf:f6:56:ca:55:40:72:57:
b3:83:57:86:43:02:46:8a:70:32:a0:a5:f4:55:7b:
d1:09:f6:48:26:67:e1:e6:f5:b8:c5:3e:76:33:e0:
82:ab:72:fa:8b:ab:5c:ed:db:91:86:4f:5d:06:14:
06:ef:b4:a8:f2:db:22:69:07:03:5f:6b:7a:cc:61:
76:65:a3:f5:3e:d2:7b:f1:7c:b6:20:d0:bb:00:e6:
d9:b0:b7:dd:77:6e:52:e4:58:c8:a5:38:d2:30:b6:
4d:d4:e0:ad:3e:3c:4e:80:1e:98:64:7b:ee:27:d3:
03:02:8f:38:09:f9:82:44:65:a6:79:08:94:9d:35:
25:57:bc:82:68:a3:3e:36:b9:c0:f1:ec:10:ae:a1:
d4:da:57:11:11:df:97:a2:a0:b2:41:c9:36:eb:6f:
e0:5c:68:a4:1c:38:ab:98:3a:f4:c7:c6:a4:9f:d9:
32:e5:dc:0f:e3:94:81:e4:7f:01:c9:f2:18:b6:20:
fb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:35:E8:25:83:18:38:BC:FE:BC:35:A8:FB:5D:9D:34:0D:41:8D:66
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202464.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2cd0::-2a06:a005:2cff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:f2:19:fe:38:fc:1d:59:85:57:bf:64:53:69:37:b9:9a:6c:
df:5d:b3:b2:4e:a8:15:c2:db:d0:d6:89:9f:bd:0a:0c:ee:fa:
09:8b:e3:a1:b9:5d:38:4e:e7:b9:c6:10:cc:7c:f2:79:09:0b:
5d:69:20:8e:49:0d:15:29:c1:a1:a0:59:d3:48:17:db:8b:3e:
47:8a:74:c8:55:31:33:56:22:ce:41:13:2b:65:1a:4e:59:f8:
9e:9f:11:8e:f8:cb:19:f3:dd:89:18:59:39:a6:93:8f:05:91:
08:fb:eb:c3:6e:c0:84:34:c6:5a:d8:5f:c6:4c:92:a9:cc:05:
c8:ec:96:84:8d:11:2a:e2:f3:f0:ae:ce:7b:af:ec:12:6d:91:
ec:b2:f0:f5:51:f3:d1:5e:59:67:da:14:db:be:de:03:fd:70:
1e:86:f9:cc:eb:8c:0b:98:df:f7:0d:d9:1c:3c:0b:c9:bf:45:
66:65:8a:dc:b6:40:fd:0e:33:42:ba:ec:0d:9b:0e:ff:cf:19:
64:c2:54:f0:f1:56:c4:ac:85:8e:b7:5e:6a:11:a1:33:14:19:
06:10:21:46:13:06:a8:0d:b3:a5:f2:dd:63:6c:8f:6f:9f:de:
ad:77:b3:ad:a3:2f:2f:87:6d:29:b8:ca:8b:e1:65:a1:c7:a3:
b7:a4:c6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org