Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202941.roa
File: AS202941.roa (raw, json)
Hash identifier: rAVAuRbzTehxcFfPi9xgrM1Li2i/lT9SSO0gnkWM8kM=
Subject key identifier: D5:B8:D5:6F:D2:F0:D0:F1:69:69:4C:90:09:84:8F:59:DA:91:45:87
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7BCEE4875FE17DFDB21A6231FA681366E9449019
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202941.roa
Signing time: Thu 11 Jan 2024 21:44:21 +0000
ROA not before: Thu 11 Jan 2024 21:39:21 +0000
ROA not after: Thu 09 Jan 2025 21:44:21 +0000
asID: 202941
IP address blocks: 2a06:a005:1860::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ce:e4:87:5f:e1:7d:fd:b2:1a:62:31:fa:68:13:66:e9:44:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 11 21:39:21 2024 GMT
Not After : Jan 9 21:44:21 2025 GMT
Subject: CN=D5B8D56FD2F0D0F169694C9009848F59DA914587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:d3:e8:32:3e:9c:f7:d0:8d:bd:1b:06:26:
75:1c:3a:ff:c2:f5:fb:9a:00:01:03:54:94:b9:05:
3e:1c:4c:29:a1:9a:30:96:70:0e:08:1a:ca:07:b1:
3a:38:b7:7d:9e:cf:e2:9b:78:7e:bd:d2:6e:a6:7b:
1e:8d:a5:35:b9:ab:de:36:a3:d9:10:52:6e:ac:48:
17:34:cd:8c:74:3a:35:20:35:6c:66:60:b1:a9:f8:
df:a1:7e:27:3f:38:90:aa:ac:4a:54:f9:e5:c0:2b:
05:2a:a9:b7:4a:b9:a2:03:3b:3b:7e:5d:f8:d6:81:
7e:35:ad:5a:bd:4e:35:7a:41:e7:17:a1:c4:d5:79:
4d:33:e8:1b:d0:75:14:f0:93:a2:42:fd:5d:c9:4d:
12:9b:c3:ee:d2:c1:42:62:40:cf:2f:90:b2:5b:ae:
f0:7e:d8:e0:11:45:cf:de:6b:8e:7c:6d:f7:38:52:
49:6b:3e:98:c8:72:36:52:fd:5a:db:fd:b2:b8:23:
e7:a5:64:ad:cd:da:9a:a5:a0:5d:92:b2:25:67:64:
90:e6:0c:1a:d0:58:38:07:1a:74:0b:51:98:81:fc:
9f:1b:d6:57:ab:30:af:07:f3:74:fd:da:d2:8f:a2:
40:ba:b8:be:93:28:24:f0:7e:42:6e:21:4c:e3:eb:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B8:D5:6F:D2:F0:D0:F1:69:69:4C:90:09:84:8F:59:DA:91:45:87
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1860::/44
Signature Algorithm: sha256WithRSAEncryption
b1:2e:8b:6d:ed:be:3e:88:e7:21:68:15:aa:40:fe:ca:52:c0:
68:e2:64:19:88:31:de:98:35:48:5b:32:9e:ae:3b:fa:da:29:
75:ee:74:70:5c:ae:27:1f:b0:fd:b8:8c:c5:c4:0e:0b:5a:32:
b9:41:d1:27:5a:ca:03:46:9d:59:32:05:b4:a7:11:b7:8b:44:
4a:e8:c5:fc:9e:a3:cc:fd:84:86:a7:57:b8:ec:7d:f7:a9:f8:
80:cc:a1:09:af:07:78:e2:ee:c6:ac:f5:20:00:3e:f1:cd:20:
78:81:c2:77:fa:ab:ba:fe:5d:52:5a:ff:d2:c8:fc:6e:ec:61:
ec:df:09:47:b0:5b:63:74:22:e4:c2:78:4d:09:cd:be:d7:66:
f2:1e:10:3e:7d:c1:2b:06:4e:34:4a:e3:c0:35:22:5b:77:b2:
d0:fa:48:3b:45:8d:62:c5:05:b4:6f:1f:8c:57:57:d1:ed:55:
22:96:2d:a9:8b:1c:00:09:b0:03:95:5c:8a:42:93:79:a1:44:
4a:c5:85:1f:03:41:74:61:25:7d:90:a0:b6:5b:a2:74:3d:a9:
e9:2e:7c:3d:24:f9:b0:dc:91:a3:6d:44:84:eb:0f:32:33:b1:
b8:7c:96:f5:00:c5:0b:85:61:b6:06:07:9e:82:17:e3:d9:6e:
62:db:07:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org