Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203169.roa
File: AS203169.roa (raw, json)
Hash identifier: 1DAJwLFefE8gDMa0Hh6eBpbEgAM8CKjW4ozYbXnKRxo=
Subject key identifier: 34:94:4D:96:86:08:8E:89:18:42:E4:2C:B0:9D:E1:9F:BB:7E:9C:4E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1F6F0B1ADE20B3E6FC6D6DF13FDDAF87AAD09CC7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203169.roa
Signing time: Tue 05 Dec 2023 02:44:12 +0000
ROA not before: Tue 05 Dec 2023 02:39:12 +0000
ROA not after: Tue 03 Dec 2024 02:44:12 +0000
asID: 203169
IP address blocks: 2a06:a005:485::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:6f:0b:1a:de:20:b3:e6:fc:6d:6d:f1:3f:dd:af:87:aa:d0:9c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:12 2023 GMT
Not After : Dec 3 02:44:12 2024 GMT
Subject: CN=34944D9686088E891842E42CB09DE19FBB7E9C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:10:96:96:ba:88:b7:15:d0:ee:37:4e:9e:
b4:cf:c9:c0:cb:bb:08:36:04:b0:1b:62:a5:f7:78:
b0:c7:10:a7:34:e1:7e:b0:1a:75:e3:d8:7e:ae:2a:
52:e2:15:53:ef:8a:a7:12:4f:78:4d:22:b1:9b:91:
a5:92:cb:a1:f2:cb:a4:66:f1:9c:ce:9f:a5:4c:ef:
7a:aa:f7:77:93:b1:7f:40:8b:5b:18:8d:cc:2b:be:
eb:53:12:71:2d:99:dc:54:d9:b7:19:82:24:e3:c3:
e7:45:64:b3:fc:93:d0:7f:00:b6:65:06:58:bd:f3:
e4:ce:d0:10:85:ee:18:48:ab:17:e3:b9:2c:8f:69:
50:8a:36:6c:5e:f7:9e:1b:6a:4c:0b:cb:1a:6e:50:
7c:df:3c:e2:2d:0c:93:f4:5a:ef:00:18:33:fb:79:
7d:d1:40:b1:36:a6:6f:38:df:b4:9a:e0:28:b6:38:
ba:0f:05:3c:8c:43:9a:62:6c:79:90:59:14:68:05:
ee:fb:44:f1:0b:5f:fa:5e:0e:22:cf:e9:d0:b1:2d:
87:01:26:1f:41:4c:bd:9c:ef:9f:dc:b7:b0:86:6f:
b7:78:58:a7:5f:12:fb:0e:7f:b1:71:22:85:b6:95:
27:bd:ed:d3:5f:0b:30:98:07:02:4b:56:a1:27:a5:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:4D:96:86:08:8E:89:18:42:E4:2C:B0:9D:E1:9F:BB:7E:9C:4E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203169.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:485::/48
Signature Algorithm: sha256WithRSAEncryption
90:1a:4c:5c:46:92:1b:3d:cf:2f:75:2e:d3:52:03:bc:55:38:
94:98:70:d1:83:87:d4:41:c4:e1:47:44:4f:a5:66:3b:c0:d4:
78:dd:30:ba:11:8e:50:1e:12:82:d9:a7:67:06:6e:b7:f2:d6:
46:f3:ab:77:af:3f:a0:52:53:ac:79:62:6f:4a:5c:01:3b:d0:
89:66:28:a3:fe:2a:28:e2:8d:58:7e:15:a0:c4:ae:ba:62:9c:
b4:47:07:a0:5a:2a:09:9e:90:08:22:c1:34:c9:82:55:17:cf:
a7:b7:68:79:45:88:6b:1d:77:56:e5:1c:bd:33:e3:6f:1a:0b:
f8:97:28:73:c9:08:3a:4f:7f:59:1b:6b:26:16:98:b8:80:98:
01:27:59:b7:cf:e4:53:cb:da:5d:7b:f1:a6:cc:40:40:e5:54:
18:a9:ce:95:48:a4:d0:2e:1a:52:bd:bf:62:24:be:ed:68:4a:
76:2e:1e:ca:42:46:d1:3f:f8:9f:46:74:5b:bd:97:9b:b2:02:
cf:3a:54:a2:6d:96:18:f8:c8:8e:80:3e:08:7d:65:d3:a2:2f:
9e:82:c2:75:4b:a7:14:bb:56:1c:68:a5:33:86:22:91:4b:b1:
32:7d:ea:7e:6f:3a:3c:3b:e5:71:54:f1:c2:92:f7:cf:6f:7f:
7d:f8:1c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org