Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203174.roa
File: AS203174.roa (raw, json)
Hash identifier: WrzylB53hGYagZgBeP4qYR0efxMHaUEFRLQw50n08Gg=
Subject key identifier: DF:1E:6D:75:D8:59:EB:B1:14:ED:39:07:22:E8:6B:5A:6D:44:D7:D1
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3851A5528A1578526A6E73F7B0FDC98B512D0909
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203174.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 203174
IP address blocks: 2a06:a005:1900::/44 maxlen: 48
2a06:a005:1a10::/44 maxlen: 48
2a06:a005:1fb0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:51:a5:52:8a:15:78:52:6a:6e:73:f7:b0:fd:c9:8b:51:2d:09:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=DF1E6D75D859EBB114ED390722E86B5A6D44D7D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:6b:63:ce:07:c5:a6:15:3c:0d:4a:e8:a0:
2e:09:e4:52:17:bc:02:9e:34:97:5f:7d:39:f2:4d:
7b:76:69:1b:0e:e5:55:1c:bc:58:01:10:85:2f:68:
8b:01:1c:35:87:73:54:98:f0:f9:bd:4f:51:92:01:
66:e0:bd:95:4e:50:0f:6c:34:9f:72:1d:8f:61:cb:
1d:6f:f8:fd:8c:f9:fe:6b:56:77:55:a9:33:18:60:
7e:40:cf:7c:88:19:f6:e0:1a:c0:4b:a4:2c:9d:af:
4b:ec:6b:c3:fc:10:af:31:bc:44:5e:4d:fd:13:ca:
b2:c8:49:e7:ca:20:5f:42:d4:4f:6c:05:f2:60:d6:
a4:66:c4:c1:3a:43:33:bd:1f:11:77:e8:f9:fb:1a:
a5:38:24:02:95:e9:3f:44:9f:ba:51:c6:ff:4c:ac:
93:80:79:11:88:6b:b7:0e:2a:ab:e2:f0:1d:47:4f:
4c:85:79:90:bf:08:ee:81:5b:af:81:58:41:8a:20:
bb:d4:2a:a3:fe:a2:1b:cf:39:25:31:0f:7b:ee:03:
cf:f0:48:6a:ec:77:34:96:36:d6:82:24:c7:b9:8e:
8a:e2:93:52:44:56:22:4c:5a:a3:b6:2a:b4:88:f7:
05:fd:61:94:87:fe:7d:cb:81:9f:0a:c8:81:03:eb:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:6D:75:D8:59:EB:B1:14:ED:39:07:22:E8:6B:5A:6D:44:D7:D1
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1900::/44
2a06:a005:1a10::/44
2a06:a005:1fb0::/44
Signature Algorithm: sha256WithRSAEncryption
c9:6c:7b:c9:55:b5:3c:28:20:d0:95:3e:c7:37:1b:8d:43:3c:
ac:0d:3a:c1:15:d7:82:45:48:e0:ef:44:cd:14:6d:f5:38:fd:
80:d2:eb:05:c5:c3:d0:84:9e:1c:be:f0:a4:9c:7c:66:0e:3c:
8d:8b:50:e6:b3:f7:08:e6:93:2d:9e:e2:90:d1:e4:ec:81:d6:
58:a6:67:68:eb:12:1e:c7:82:b8:73:2c:f2:bf:94:10:1b:d2:
3a:29:52:5c:4e:0e:57:08:5e:9d:e0:30:f3:cf:c1:89:ff:1b:
a5:ed:b9:b7:42:55:ed:0d:ba:90:67:00:1a:1d:4c:ec:0e:02:
fb:2d:81:73:8c:f3:a2:f0:10:0f:62:5b:42:2b:29:39:5f:e3:
20:c1:fd:4e:14:89:cf:d1:51:26:fe:6f:93:b6:36:85:15:08:
ea:14:3b:a1:58:08:7c:f8:82:5f:99:49:70:4a:03:a9:c8:a7:
e0:a9:ff:ee:b0:1f:83:30:14:02:f6:cc:4e:40:2b:4a:6f:ab:
c1:28:c9:2c:db:12:d2:24:3e:f7:f9:85:c7:2a:1b:da:ea:6f:
ce:5a:52:bb:cc:8e:ff:2e:0e:fe:f7:00:c8:53:84:97:fe:cf:
c0:82:33:c9:bc:4f:9d:a7:17:d6:3a:ad:2a:d5:8d:ac:a1:51:
ed:f6:83:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org