Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203619.roa
File: AS203619.roa (raw, json)
Hash identifier: Pcombj8WIt4UxAQ0NwfGYEAREQAfMgJtbfsSz+E4USc=
Subject key identifier: EA:FB:AD:6C:25:3C:71:67:78:90:94:A6:FE:31:9A:82:15:3A:C8:F8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4C2AC290B4386E58C473B7663C7AD57E8F8DBD26
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203619.roa
Signing time: Mon 12 Feb 2024 16:44:24 +0000
ROA not before: Mon 12 Feb 2024 16:39:24 +0000
ROA not after: Mon 10 Feb 2025 16:44:24 +0000
asID: 203619
IP address blocks: 2a06:a005:1410::/44 maxlen: 48
2a06:a005:1420::/44 maxlen: 48
2a06:a005:1430::/44 maxlen: 48
2a06:a005:1440::/44 maxlen: 48
2a06:a005:1450::/44 maxlen: 48
2a06:a005:2130::/44 maxlen: 48
2a06:a005:2140::/44 maxlen: 48
2a06:a005:2150::/44 maxlen: 48
2a06:a005:2160::/44 maxlen: 48
2a06:a005:2170::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:2a:c2:90:b4:38:6e:58:c4:73:b7:66:3c:7a:d5:7e:8f:8d:bd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 12 16:39:24 2024 GMT
Not After : Feb 10 16:44:24 2025 GMT
Subject: CN=EAFBAD6C253C7167789094A6FE319A82153AC8F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c7:71:af:e4:5d:4e:f5:32:6c:ed:8f:27:f9:
a9:ec:cf:d6:f1:43:46:77:1c:86:a7:79:30:cd:ea:
ec:f1:be:08:a9:2c:fe:77:15:9e:42:07:8f:e6:81:
0d:f5:fd:10:3a:d5:75:76:69:1d:4c:3a:0b:62:17:
40:d3:ea:72:c0:2e:88:fd:5c:64:f8:1b:2b:59:ae:
42:fe:3c:c7:da:f3:dd:67:84:cd:f4:4b:d5:01:63:
df:50:91:6e:7c:ae:e4:c7:56:1c:67:af:8d:ca:34:
cb:53:f0:ec:d1:1e:96:20:93:08:f4:5c:0b:98:79:
3c:75:8f:0a:b4:df:53:c9:94:95:a4:21:55:59:53:
fa:21:4a:35:cd:b1:38:88:79:cc:ed:2a:e4:65:06:
4f:0b:49:42:49:95:e2:c1:00:01:5a:7e:f3:16:80:
59:4d:db:15:fa:62:91:b5:23:bd:da:83:c2:96:d5:
0f:d0:df:3d:8f:41:f8:80:3b:e4:64:ad:f5:7f:20:
7e:b3:98:ee:ad:3f:0d:92:99:04:86:8d:7d:95:16:
a1:39:0f:da:a2:97:d9:d5:db:4b:52:05:dd:80:23:
64:ff:c6:94:7c:bd:7e:b3:d3:2b:6b:10:bc:a9:11:
55:6f:8f:33:dd:33:59:c3:00:06:15:7f:aa:99:f4:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FB:AD:6C:25:3C:71:67:78:90:94:A6:FE:31:9A:82:15:3A:C8:F8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203619.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1410::-2a06:a005:145f:ffff:ffff:ffff:ffff:ffff
2a06:a005:2130::-2a06:a005:217f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a9:66:1b:af:8a:46:df:17:6e:8e:3f:ca:a5:c5:73:17:48:2a:
43:15:8a:ed:17:64:c5:ec:d8:29:d4:94:2b:22:68:8d:29:02:
bb:9f:ad:05:3b:6c:68:37:ca:66:d8:d0:df:19:4e:99:45:b8:
40:70:e9:01:e7:2b:a2:af:fd:73:59:d0:41:c3:0a:51:dc:5f:
cc:dd:29:21:61:fb:40:b5:69:0c:74:16:ff:ab:80:3b:1a:3f:
70:b5:41:b6:14:39:43:06:a2:1f:b9:f1:9e:bd:36:8b:2e:61:
13:43:10:02:2c:bd:50:05:01:94:f1:97:3b:0f:93:ba:76:74:
63:ee:dd:45:68:ce:aa:19:8d:af:56:2c:6c:f4:23:9d:8e:29:
08:3c:ec:f6:be:71:81:72:26:98:e2:07:b2:f8:c9:90:05:af:
d2:68:b7:52:ed:46:34:ee:37:78:cb:5c:27:be:37:30:a8:10:
fa:d9:d4:30:b4:9e:6a:ce:2d:35:1a:79:b7:9f:a0:bc:1f:91:
71:12:a7:43:70:cc:a0:ff:c6:cd:36:ac:02:a7:3c:d2:75:54:
10:12:39:3e:36:9f:30:67:2e:c3:6a:b7:10:5b:4c:b7:c7:13:
ad:61:e4:f8:97:bf:0a:39:d2:15:f8:f1:36:ce:da:af:19:00:
71:ba:01:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org