Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203915.roa
File: AS203915.roa (raw, json)
Hash identifier: IPUZJbgAB/uae4wQ2hV4KOfJZIlurmM9CBk1MKI22ac=
Subject key identifier: E4:98:FD:93:6C:6F:48:38:4E:B9:FA:76:2A:B0:A1:D4:1E:0A:FC:4A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 12FAEAA22856251B83D5D54E528944FAA30FF39B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203915.roa
Signing time: Tue 05 Dec 2023 02:44:20 +0000
ROA not before: Tue 05 Dec 2023 02:39:20 +0000
ROA not after: Tue 03 Dec 2024 02:44:20 +0000
asID: 203915
IP address blocks: 2a06:a005:ba8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fa:ea:a2:28:56:25:1b:83:d5:d5:4e:52:89:44:fa:a3:0f:f3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:20 2023 GMT
Not After : Dec 3 02:44:20 2024 GMT
Subject: CN=E498FD936C6F48384EB9FA762AB0A1D41E0AFC4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:46:43:09:4c:57:f3:ff:3a:de:f7:4b:36:2b:
f3:13:f4:60:d2:c5:b3:76:7e:d6:86:d9:aa:0e:de:
6d:80:c6:8e:8a:b7:71:41:71:20:ee:c2:4c:3a:4a:
e8:3e:69:50:a2:72:45:49:1d:71:2b:46:b9:03:d9:
f5:fa:af:1e:36:c9:69:11:bc:0c:59:90:87:b4:19:
8a:22:62:32:f3:6e:e9:0e:38:04:e1:6a:7c:c1:11:
10:a4:10:7f:e9:f5:bc:a0:8a:6e:4a:92:35:bd:b3:
54:41:0d:e5:30:8f:8e:96:39:4d:9a:9f:cd:df:72:
38:b1:5e:52:1e:34:3b:f8:d5:97:a9:e6:56:7c:7d:
4a:66:a5:17:1f:50:e2:af:93:d5:a6:e9:a7:7f:88:
51:90:8d:f0:4d:7e:d9:77:ee:a9:4f:27:75:92:63:
12:5a:d7:c3:b1:94:7f:19:17:c6:75:9c:a6:ac:2c:
35:54:52:6e:7a:24:b2:e4:5b:73:23:28:8a:47:20:
18:77:77:df:0a:18:84:70:7b:38:2a:55:53:be:82:
17:aa:88:e8:ba:55:5e:69:aa:4c:1a:68:74:bb:de:
51:76:eb:b7:c5:df:9e:25:c9:b2:26:2b:b2:eb:93:
c8:48:56:a2:94:db:2a:96:31:14:2b:8e:58:04:38:
85:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:98:FD:93:6C:6F:48:38:4E:B9:FA:76:2A:B0:A1:D4:1E:0A:FC:4A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203915.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:ba8::/48
Signature Algorithm: sha256WithRSAEncryption
68:2f:4a:1e:32:20:d7:ba:2f:8c:6b:9a:31:48:52:b5:a2:79:
a2:8c:f8:89:1a:9f:3d:a3:06:92:7f:33:42:25:10:f8:3c:95:
1e:e6:41:64:bf:42:b0:2f:6e:64:9f:77:14:41:31:e3:d4:c9:
45:aa:64:66:5e:15:05:73:69:5d:9a:1a:e7:a5:d0:38:ae:c0:
28:a5:c6:b4:f0:a8:e8:e3:a1:57:72:a8:38:d2:33:fb:2d:81:
5e:f8:bb:bd:f6:55:1c:14:12:88:a9:24:51:94:ad:dd:bb:c4:
c9:c1:fb:51:12:d4:9c:43:d3:56:ac:94:d7:e9:37:20:3c:ea:
81:c1:eb:b7:84:ee:29:e7:eb:2b:13:bc:76:3c:03:b5:2f:b0:
1d:39:40:45:5b:e0:0f:7b:50:05:da:9c:7e:f6:3b:48:f6:81:
a2:88:4d:04:2c:bf:61:f0:d6:d9:11:1c:c0:01:f8:90:9b:9e:
85:93:33:98:d0:04:d9:fa:26:63:c0:55:fb:04:79:c8:92:3a:
33:e5:fb:7c:d3:93:4f:34:f5:b4:3e:c9:23:8d:7d:bf:3b:f5:
15:87:cd:c1:ba:6a:3c:ac:32:f3:dd:ba:a3:b2:2a:6f:70:d9:
0f:69:63:2f:df:1c:40:bc:17:74:7b:ea:5e:13:ea:99:6d:d0:
0e:2c:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org