Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204087.roa
File: AS204087.roa (raw, json)
Hash identifier: 1ZZf6UXf7wIEq3H6fIJ91V9On556kTeQNnbKvyLkPWU=
Subject key identifier: 99:80:15:EF:07:A8:9D:A8:F9:4F:6E:1A:3A:EC:D9:9C:3B:55:8C:94
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 29F501512962732E24C8A502CD481581191DFFAE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204087.roa
Signing time: Sat 13 Jan 2024 08:44:21 +0000
ROA not before: Sat 13 Jan 2024 08:39:21 +0000
ROA not after: Sat 11 Jan 2025 08:44:21 +0000
asID: 204087
IP address blocks: 2a06:a005:5aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:f5:01:51:29:62:73:2e:24:c8:a5:02:cd:48:15:81:19:1d:ff:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 13 08:39:21 2024 GMT
Not After : Jan 11 08:44:21 2025 GMT
Subject: CN=998015EF07A89DA8F94F6E1A3AECD99C3B558C94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:27:75:f1:4e:c0:6d:26:ff:e1:9c:91:10:
18:5c:fe:51:85:0c:38:15:fd:db:5f:fb:8e:82:53:
2f:11:d3:8d:47:08:c8:9b:15:f9:f5:5b:dc:6c:f4:
9e:77:8d:53:e4:69:f4:82:bd:96:b3:78:95:f7:4e:
ee:e5:ea:2d:95:72:ca:49:e0:e1:d4:4c:c2:2d:34:
43:89:e3:89:38:df:4e:a7:f4:f1:62:55:6d:a3:81:
5a:0e:f3:87:28:f5:3d:d4:fa:ae:9c:53:a9:d6:d3:
22:aa:bd:11:5f:a0:e6:be:c9:99:6f:5f:f2:99:5d:
1c:20:f6:51:52:12:d1:4b:c9:b9:0b:36:1d:f5:9e:
8d:2a:89:8a:08:98:bd:4d:b0:58:54:b9:0f:cf:80:
bf:83:45:c1:32:bc:f6:6b:bd:5a:bd:bd:4a:fb:f0:
2c:08:43:49:d9:57:c6:95:28:12:03:ab:bd:85:79:
5c:85:f9:df:18:02:31:c8:86:20:dd:ac:68:4c:c6:
53:92:1c:29:c2:e1:5e:80:26:17:58:45:d9:23:dd:
6c:0d:5d:4f:ec:e4:39:28:14:79:ce:f5:72:86:f3:
05:12:b3:6d:9b:98:d2:ed:42:ce:42:35:5e:64:24:
9e:c4:79:82:76:f1:00:da:bf:d3:5c:6f:29:78:32:
9c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:80:15:EF:07:A8:9D:A8:F9:4F:6E:1A:3A:EC:D9:9C:3B:55:8C:94
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5aa::/48
Signature Algorithm: sha256WithRSAEncryption
63:0e:3f:e6:81:8a:b4:f5:99:cd:f6:f5:1d:d0:6a:19:bd:bf:
9f:91:15:8e:a4:9e:0f:5a:d2:18:1f:a4:c3:a5:df:08:72:be:
f8:f3:bb:e0:df:4d:6d:93:62:22:d0:38:cf:4d:31:0d:4d:45:
07:d3:2a:31:bd:40:68:91:95:0c:03:3f:78:ea:e1:2e:70:68:
14:f1:81:90:c7:16:dc:ff:13:31:10:9b:47:ea:36:54:63:30:
1c:3e:16:02:46:68:aa:bd:84:20:f0:58:8e:26:16:41:e9:34:
af:dd:85:ee:dd:14:26:e2:3b:18:96:53:e4:33:72:e8:11:c8:
b6:1d:e2:26:7d:cd:53:4c:52:ef:08:64:e8:d8:4d:1e:6b:30:
40:d3:ae:ba:67:6f:bc:4a:b0:fd:df:4d:c1:fb:35:33:d5:32:
f0:64:2c:b0:0d:50:a8:a6:7e:42:fc:e7:9c:cf:aa:64:5b:c0:
fa:26:5e:96:b3:94:c5:0a:05:a1:90:59:c7:7f:b6:9a:4a:59:
8c:82:d3:53:95:d5:00:7d:05:24:7f:c5:de:5d:52:a0:31:13:
1d:59:1f:00:56:3c:21:78:79:14:55:43:8b:2f:ec:2f:d9:65:
17:f6:b8:9f:bb:a0:f7:65:80:6f:be:7c:a0:68:21:ea:f6:15:
14:35:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org