Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204136.roa
File: AS204136.roa (raw, json)
Hash identifier: Jzc1f4WrCWeulZA7ishdn+DqaLl1EejzAPZn5CKy3rQ=
Subject key identifier: 0E:B5:4C:52:D1:65:1B:21:EE:78:1F:61:8C:88:89:5A:EF:65:58:F3
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 431D63D49A5B9D728E4A7EFF69DF728467C69156
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204136.roa
Signing time: Sat 21 Sep 2024 19:39:59 +0000
ROA not before: Sat 21 Sep 2024 19:34:59 +0000
ROA not after: Sat 20 Sep 2025 19:39:59 +0000
asID: 204136
IP address blocks: 103.230.141.0/24 maxlen: 24
185.121.177.0/24 maxlen: 24
2a06:a005:8e0::/44 maxlen: 48
2a0a:6043::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1d:63:d4:9a:5b:9d:72:8e:4a:7e:ff:69:df:72:84:67:c6:91:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Sep 21 19:34:59 2024 GMT
Not After : Sep 20 19:39:59 2025 GMT
Subject: CN=0EB54C52D1651B21EE781F618C88895AEF6558F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:e4:7e:59:c8:15:7c:34:55:e4:0e:3c:1c:
0a:43:81:9a:e5:2d:93:dc:df:81:45:74:2d:4b:f8:
cc:68:3a:b2:84:c5:8d:d4:33:ab:cd:40:5d:c5:c5:
06:39:a2:6d:a1:94:d7:31:1a:7e:1f:24:38:1f:86:
d0:fd:fc:b1:c8:0f:27:e1:11:13:1b:4e:d3:f0:d7:
9d:f9:a9:fc:a0:d2:15:5d:50:3c:dd:2c:27:79:57:
0d:e5:e0:d8:05:ca:48:23:b8:d6:fd:36:b2:bf:98:
a1:83:6f:b3:b6:be:32:75:3a:59:a3:c4:65:6b:f6:
d5:e1:47:f2:d0:35:14:c2:9c:4f:6d:7d:93:52:f7:
18:10:fc:6b:a7:dd:55:19:10:9e:c2:3c:f8:33:b8:
23:92:6f:40:a1:7a:c2:05:33:16:f0:55:18:aa:1a:
42:c2:3f:44:26:01:4a:e6:56:93:13:ba:51:fb:a5:
0a:dc:ae:c1:ff:d7:dc:65:68:35:cf:70:ef:12:10:
03:59:6d:7f:af:e3:85:a7:cf:0d:e9:98:e9:46:cc:
f4:11:2e:c1:c4:37:3a:3f:7b:ec:ab:4b:1e:94:04:
58:36:d0:b9:d1:38:59:3e:ed:36:b3:41:3f:b6:88:
2f:6b:24:95:51:89:2d:7a:c7:b7:fb:fa:75:00:05:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B5:4C:52:D1:65:1B:21:EE:78:1F:61:8C:88:89:5A:EF:65:58:F3
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.141.0/24
185.121.177.0/24
IPv6:
2a06:a005:8e0::/44
2a0a:6043::/32
Signature Algorithm: sha256WithRSAEncryption
59:95:ca:18:f7:0d:24:b0:8e:40:f5:c9:72:b2:f9:43:2f:74:
c3:72:05:7f:59:c2:3e:4d:b8:62:68:30:26:fd:1e:24:23:32:
d5:b8:a3:d8:bc:a3:38:09:e0:26:ca:ed:1e:ee:43:ed:52:96:
94:91:a8:0d:2d:da:98:36:76:3e:b8:92:f3:22:5a:76:86:fb:
b4:f8:c5:93:cb:a1:0f:8c:28:b9:70:3b:da:f1:1d:bb:3c:03:
fd:c9:77:27:30:12:02:46:a5:c2:d3:e1:13:ff:65:e7:70:52:
7c:ad:93:e9:6a:1c:59:a5:b9:4e:98:46:9f:f6:62:ee:e9:b0:
6b:cd:08:d7:2e:75:65:55:bd:af:86:ce:38:9c:60:9b:7b:18:
49:86:0a:2c:c0:60:7a:1c:eb:37:08:88:c7:e0:7c:0a:fc:1e:
43:e7:8a:ed:0e:b4:50:dd:79:93:32:a4:f3:73:53:b5:80:66:
d6:6e:69:e4:9b:73:40:68:8c:02:d8:24:66:1d:bf:2c:b0:e8:
27:f3:44:72:81:96:f2:53:cc:3f:62:0c:d8:38:67:7b:81:23:
ad:37:02:17:cf:39:43:55:8c:95:0a:83:ab:f2:9d:5a:2e:76:
f4:03:1b:cf:f0:87:43:c1:41:ad:4e:84:ee:2e:4a:82:a1:d3:
1d:59:da:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:35 2024 by rpki-client on console-fra.rpki-client.org