Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204446.roa
File: AS204446.roa (raw, json)
Hash identifier: Gce1rbEvWX2ob74rvYpcFO41sHZJwEK4G05sHcFV1f0=
Subject key identifier: 6C:EE:24:CB:68:4A:75:3D:7C:4D:E4:1F:93:45:63:E3:09:6F:9B:8A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 150BD2EE1138581183FDDCB2BBBC7E1DEE0B5637
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204446.roa
Signing time: Tue 05 Dec 2023 02:44:09 +0000
ROA not before: Tue 05 Dec 2023 02:39:09 +0000
ROA not after: Tue 03 Dec 2024 02:44:09 +0000
asID: 204446
IP address blocks: 2a06:a005:a20::/44 maxlen: 48
2a06:a005:1320::/44 maxlen: 48
2a06:a005:15d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:0b:d2:ee:11:38:58:11:83:fd:dc:b2:bb:bc:7e:1d:ee:0b:56:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:09 2023 GMT
Not After : Dec 3 02:44:09 2024 GMT
Subject: CN=6CEE24CB684A753D7C4DE41F934563E3096F9B8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:1f:de:89:18:a8:e6:da:07:80:38:9a:6c:
bc:c1:6c:a8:06:44:e5:d2:37:f8:f6:2d:4f:bd:dd:
e8:c2:bf:28:ce:de:78:0e:99:d9:55:de:87:4b:da:
fc:8f:4f:5a:cf:6d:e6:02:13:66:d7:ff:f4:8e:2b:
92:76:76:49:23:fa:cd:85:f3:31:3c:de:39:83:82:
90:7e:70:c4:1d:71:83:48:32:9b:40:d5:25:4c:a6:
79:b7:a3:3f:d9:e1:11:92:97:b5:74:af:f3:39:4b:
d7:cf:5f:69:f0:49:0c:ab:4b:3f:5f:1b:a9:c3:da:
ff:03:96:a8:05:c4:87:c6:6f:06:0e:23:56:60:b9:
1b:50:7d:43:9f:bf:db:af:c6:d9:31:85:63:7c:45:
06:86:dd:06:ae:47:0e:a4:8e:84:6b:2d:08:89:5c:
ca:d7:ba:34:e2:90:13:7f:cf:d3:02:fa:11:86:17:
fe:01:e8:f2:a6:6e:95:ae:52:54:c7:45:65:10:df:
56:af:20:fb:f1:b3:12:8a:d9:4f:18:9d:80:df:b2:
8e:21:98:38:9d:df:3b:2e:4a:65:00:82:60:8a:86:
7f:55:24:28:08:06:f9:af:1f:79:8d:05:2b:ba:05:
62:bb:d1:9f:d6:36:59:58:83:f3:42:21:3c:44:a2:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EE:24:CB:68:4A:75:3D:7C:4D:E4:1F:93:45:63:E3:09:6F:9B:8A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a20::/44
2a06:a005:1320::/44
2a06:a005:15d0::/48
Signature Algorithm: sha256WithRSAEncryption
d1:45:8f:c7:2a:b2:d7:0d:db:c9:77:b9:e4:90:d9:3a:0a:e3:
ea:f9:7d:1d:19:26:1f:c9:1d:5a:51:f4:73:94:d1:81:8d:1a:
4a:16:80:d5:41:d7:97:b1:07:86:f6:5b:e8:54:c0:87:20:25:
f7:78:90:68:9c:03:70:86:f1:88:41:e5:82:5d:31:82:3e:a5:
29:78:de:24:96:b6:0d:29:59:63:0b:e9:c0:f2:83:a7:41:4a:
28:b9:66:ff:9a:e9:f1:fe:d3:82:e8:20:3d:00:a5:03:8c:66:
cb:f3:06:bd:0f:05:2a:ae:cd:a9:04:54:1f:91:bd:30:fd:ef:
fb:51:79:ef:a1:95:83:c9:a4:29:16:9f:81:50:23:8e:b6:c8:
96:bb:55:42:03:14:db:fd:7d:c6:db:89:5b:22:3b:f7:1c:86:
2c:88:b5:e5:0a:93:07:a5:c0:7d:2f:56:01:fe:ec:51:d6:0a:
90:1e:70:10:72:0f:27:ff:57:1c:91:60:79:bf:b6:45:c4:b1:
65:30:9f:9c:1c:6d:c5:e4:27:f2:43:0c:46:22:7c:59:85:15:
75:0f:bb:b7:22:29:89:36:0f:76:82:bd:41:35:15:63:99:14:
7e:e2:3e:95:0d:73:fc:ce:21:b0:6c:f4:d0:5d:dc:37:80:32:
bf:6c:93:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org