Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203874.roa
File: AS203874.roa (raw, json)
Hash identifier: jam65+n3Nv+wbctdvxJUThPqGS1HlFCwwYmO1e/YZYc=
Subject key identifier: 9C:8B:91:A2:57:16:1D:00:BE:9A:8B:8D:02:99:93:41:B1:B7:CF:89
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 38D362A1340A495BAAF0E269DB76F848E9BF5886
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203874.roa
Signing time: Sat 16 Dec 2023 07:44:21 +0000
ROA not before: Sat 16 Dec 2023 07:39:21 +0000
ROA not after: Sat 14 Dec 2024 07:44:21 +0000
asID: 203874
IP address blocks: 2a06:a005:d45::/48 maxlen: 48
2a06:a005:d46::/48 maxlen: 48
2a06:a005:d47::/48 maxlen: 48
2a06:a005:d48::/48 maxlen: 48
2a06:a005:d49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:d3:62:a1:34:0a:49:5b:aa:f0:e2:69:db:76:f8:48:e9:bf:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 16 07:39:21 2023 GMT
Not After : Dec 14 07:44:21 2024 GMT
Subject: CN=9C8B91A257161D00BE9A8B8D02999341B1B7CF89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:6e:d9:d3:f6:7f:ab:da:08:73:a8:69:c0:
8c:70:bc:89:0f:6e:8b:7b:19:6e:4a:cd:ae:43:d1:
d3:fd:f0:64:27:51:8e:42:7f:66:df:fa:52:a9:4e:
1b:a4:30:0c:38:cd:0a:bd:e7:fd:cc:71:09:5e:3c:
11:b1:a6:68:12:da:9b:14:be:f8:58:ff:8e:48:d5:
89:23:aa:c4:ae:61:c9:6e:3b:c5:22:8d:94:70:d3:
60:5c:f7:93:28:7e:6d:c9:1a:47:4a:73:9d:92:5a:
13:31:3a:f1:a9:63:bd:1f:ed:56:2d:aa:a7:70:be:
79:ff:a9:1d:09:00:8d:84:14:96:ba:09:54:f1:7c:
d1:6b:42:cd:29:f1:37:df:9c:1c:7b:2c:e7:a1:b6:
3d:c3:32:b6:05:f6:15:fd:64:db:df:19:eb:5f:15:
80:e9:f4:ef:01:85:e0:83:10:f6:8b:e1:1c:25:0d:
26:25:12:83:a1:64:98:ef:d4:08:e7:58:d5:66:9e:
af:2f:e4:cf:83:cb:45:ff:d4:01:22:3f:06:43:20:
77:18:e3:4b:19:d4:a4:77:08:a2:dc:61:ac:1d:98:
cc:7b:d3:79:73:9c:46:34:a1:98:9a:78:12:c7:ba:
70:f2:19:9f:f5:8d:d4:76:13:77:fd:7f:56:79:ab:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8B:91:A2:57:16:1D:00:BE:9A:8B:8D:02:99:93:41:B1:B7:CF:89
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203874.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d45::-2a06:a005:d49:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:fa:a1:4c:90:1a:83:3d:87:39:14:4a:5b:d3:bd:62:e6:86:
da:eb:d0:24:ce:50:5b:cf:bc:4c:e9:85:13:02:3a:d9:0f:26:
f9:fb:dd:59:8f:63:de:e7:4f:4b:62:76:b3:de:aa:27:19:96:
80:1a:98:3c:44:d3:72:0e:01:56:88:a8:d6:54:3c:9e:c3:5e:
f0:3c:ff:c3:4d:2f:e8:1a:1b:c4:dc:0e:81:d0:6c:f2:33:88:
dd:be:2d:19:40:d0:cb:d7:30:e8:8b:74:e5:c8:78:dc:90:ff:
26:c4:c5:80:ea:3f:c2:d7:af:06:4b:a9:33:4b:b5:55:45:31:
38:89:dc:49:ef:3b:2d:cd:eb:a9:f9:ee:ae:5e:bc:ab:18:e2:
0f:1c:c9:ce:55:32:d5:ea:4a:ef:21:6a:89:61:22:e5:53:22:
93:66:f0:16:5c:0c:cb:af:fa:f5:78:90:c5:aa:8c:9c:1a:04:
e3:b4:c6:fb:e1:3a:a7:bc:5c:50:3d:5d:ad:8b:ae:ac:e2:47:
77:0b:12:57:2c:7d:2e:7f:35:7f:5c:81:43:7c:d1:d7:ca:f0:
e8:42:01:9a:5a:05:36:b9:b6:4a:30:1f:a9:6b:f5:c9:80:55:
c4:5d:a0:eb:58:36:21:d1:54:6c:e4:68:06:f7:f3:52:17:30:
e7:cf:b7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org