Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203069.roa
File: AS203069.roa (raw, json)
Hash identifier: sJ+c1newu82UkusfxQHb3mPjoEOtEnUkbzlHNa6wzZ0=
Subject key identifier: E9:6A:78:BE:0B:EF:1A:71:4B:EE:A4:B0:31:4A:D7:86:EA:1D:4E:18
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5D899B19D53F18DF2FBEBFFCDE02B44D2603BA9F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203069.roa
Signing time: Sat 16 Dec 2023 05:44:21 +0000
ROA not before: Sat 16 Dec 2023 05:39:21 +0000
ROA not after: Sat 14 Dec 2024 05:44:21 +0000
asID: 203069
IP address blocks: 2a06:a005:488::/46 maxlen: 48
2a06:a005:1af0::/44 maxlen: 48
2a06:a005:1b00::/44 maxlen: 48
2a06:a005:1b10::/44 maxlen: 48
2a06:a005:1b20::/44 maxlen: 48
2a06:a005:1b70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:89:9b:19:d5:3f:18:df:2f:be:bf:fc:de:02:b4:4d:26:03:ba:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 16 05:39:21 2023 GMT
Not After : Dec 14 05:44:21 2024 GMT
Subject: CN=E96A78BE0BEF1A714BEEA4B0314AD786EA1D4E18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6b:05:f4:87:0f:70:67:43:af:46:bb:71:95:
17:60:98:23:ab:7f:56:de:81:d2:b0:98:ab:72:83:
55:9a:f3:fb:bc:97:fc:87:f9:62:b3:f1:24:33:0e:
06:c6:06:50:09:9e:4e:bb:ff:d8:4b:92:ef:92:66:
d0:5d:1f:90:1c:e5:b3:15:3c:21:3f:79:e5:13:e6:
cc:bc:e8:f7:55:7d:c9:00:2d:ed:2c:a2:82:45:19:
78:45:59:1a:a9:15:54:6c:e3:10:03:cf:fc:27:f6:
6d:93:4f:54:9c:81:d3:a4:da:99:cd:40:3c:5d:14:
b1:0c:68:ab:93:7c:b1:49:a2:1d:c9:a6:88:4b:c2:
66:4a:62:0c:b4:88:64:fa:d5:68:cf:6f:db:8f:b0:
ec:81:58:06:37:1e:1e:de:b2:97:cd:c0:aa:91:48:
1a:92:49:fd:82:e5:21:1b:7b:69:1d:5a:f8:bf:c1:
62:12:68:a6:7b:5f:45:e4:b8:7e:4d:6b:4f:f7:eb:
de:c5:f8:03:f6:88:64:98:c9:94:ca:ae:58:62:87:
93:76:21:30:db:8f:9a:6a:e1:c7:32:f0:3c:39:bd:
cd:fb:b9:cb:ac:63:18:46:a6:f7:30:85:88:18:49:
34:d6:b3:ab:73:2a:7e:f9:73:6f:65:2e:e6:de:86:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6A:78:BE:0B:EF:1A:71:4B:EE:A4:B0:31:4A:D7:86:EA:1D:4E:18
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:488::/46
2a06:a005:1af0::-2a06:a005:1b2f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1b70::/44
Signature Algorithm: sha256WithRSAEncryption
ba:47:31:4a:9f:06:e5:9f:f9:9c:a9:25:84:0f:4c:5c:0b:0c:
c1:07:06:8a:79:a8:60:27:a3:9d:da:33:12:68:2b:43:b7:8f:
45:db:ca:cb:06:80:78:56:a7:04:c9:ce:07:0e:f9:98:1a:6d:
5e:0b:c3:00:e7:7d:bc:10:53:ae:6b:d2:b8:5e:c4:60:5f:b5:
5e:d5:b8:b4:79:22:4e:98:b5:8d:17:15:0e:99:d4:bd:d9:d7:
0a:88:4d:77:5d:6e:63:8d:c7:ef:25:fd:70:7f:4d:0b:4a:68:
0d:1f:3e:cf:40:8a:cc:a7:82:be:eb:32:a4:b2:ac:e1:bc:f8:
ba:91:41:dd:bc:7d:7f:7f:fe:56:87:9e:6b:87:a6:93:15:6f:
fa:53:e3:45:4b:8d:96:fb:13:54:4a:62:e3:8e:6e:90:30:f9:
9d:0e:be:96:96:3e:de:ec:f1:bf:56:af:3d:d2:d0:60:e6:4c:
49:42:48:66:49:bb:8d:b7:b5:9a:04:a3:73:ae:80:51:97:3b:
95:08:a3:0a:fc:b1:be:9a:4f:11:50:0a:45:43:95:33:f7:71:
ce:37:75:49:70:31:92:a6:ea:80:cd:6c:91:1c:88:b0:fe:86:
c7:88:be:09:82:7e:a7:1f:09:6c:52:87:19:05:a8:90:fc:36:
d1:1a:97:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org