Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204841.roa
File: AS204841.roa (raw, json)
Hash identifier: 0oNvOIS492IDnzYgLz307lywITVc5j2VgUfEbbiC+dU=
Subject key identifier: 3E:48:08:59:C1:F3:37:C1:16:5E:D3:A4:E0:F5:2C:1D:31:AE:03:F0
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 16360C47209D9D26D630AD929946D4D65FE80FC6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204841.roa
Signing time: Tue 05 Dec 2023 02:44:09 +0000
ROA not before: Tue 05 Dec 2023 02:39:09 +0000
ROA not after: Tue 03 Dec 2024 02:44:09 +0000
asID: 204841
IP address blocks: 2a06:a005:434::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:36:0c:47:20:9d:9d:26:d6:30:ad:92:99:46:d4:d6:5f:e8:0f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:09 2023 GMT
Not After : Dec 3 02:44:09 2024 GMT
Subject: CN=3E480859C1F337C1165ED3A4E0F52C1D31AE03F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:8d:8c:25:9c:28:01:23:55:46:85:4e:97:
c5:2a:ca:c5:81:a7:f9:77:b6:26:87:84:d4:7e:b6:
7f:a3:69:a8:ba:68:65:77:70:25:a6:f3:76:85:8b:
22:5c:70:65:8c:90:ba:f8:d9:42:58:a5:bf:ff:8d:
e4:00:f4:74:99:c9:f3:fa:bf:9f:3b:90:c6:bf:58:
61:35:36:c8:5c:73:cd:20:c1:75:86:27:61:7e:9a:
70:d9:fa:36:30:db:e9:93:41:69:75:ad:e7:ca:7b:
08:98:93:ec:6f:b9:b7:a4:8e:20:81:ea:a2:7c:e3:
97:7d:16:40:e7:eb:95:93:db:9c:b9:43:6f:79:44:
47:44:1d:24:c9:76:33:8b:3e:1e:f2:0a:1a:08:cd:
86:0a:e0:1b:af:09:81:ac:07:39:4b:f3:00:8c:dd:
41:91:b7:c3:bf:ec:b4:bb:9e:84:b8:c9:c1:6d:5b:
3e:ec:59:4a:aa:81:2f:ae:eb:99:07:34:03:94:85:
3e:b9:48:bd:17:c7:08:5c:fe:1c:8b:c0:75:e7:4f:
8f:6c:6b:df:ec:58:4c:f1:36:15:1d:72:fa:ee:9f:
b5:59:94:de:32:3c:b5:64:59:82:b6:8f:6f:57:d9:
b9:10:69:1b:02:8a:6c:00:b7:12:64:47:e2:1d:29:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:48:08:59:C1:F3:37:C1:16:5E:D3:A4:E0:F5:2C:1D:31:AE:03:F0
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:434::/48
Signature Algorithm: sha256WithRSAEncryption
bb:a5:0e:b3:d2:1d:6c:c4:21:6e:06:44:a5:79:7c:df:54:b0:
c9:37:fb:4a:73:db:b8:a3:78:39:bc:82:69:bc:81:f8:1b:38:
95:a0:3d:61:7e:ab:c4:e6:b4:0b:ce:ab:1f:47:84:16:54:36:
06:85:9d:c4:1e:61:95:bf:2e:de:5d:8d:17:85:cf:6e:e7:4c:
81:96:b5:6f:80:81:71:67:98:43:18:ec:ea:76:2d:09:79:8e:
93:32:96:98:66:17:fc:30:78:b1:82:00:7f:05:6f:95:a5:ec:
f6:0f:b9:27:8f:d6:67:50:cc:8a:eb:c4:bd:91:31:ed:f8:08:
ce:ba:4e:7b:dc:9b:cf:86:ba:ad:3b:88:be:30:7b:90:30:40:
e5:a4:dc:90:dc:41:ba:dd:73:b5:67:55:ce:64:f8:6c:89:1a:
2b:f5:74:03:03:1f:e0:f1:e4:61:7c:11:f5:24:cd:b1:da:87:
d1:d0:d4:0c:00:51:26:99:58:0f:51:36:ba:aa:62:26:a3:9c:
9a:11:64:5d:e7:4f:17:79:1f:3c:5b:e9:69:6a:83:79:f9:50:
4b:e4:f5:6e:6a:4b:04:e8:a1:a5:b4:59:88:15:cc:2e:87:0c:
39:a6:dd:67:44:51:93:0f:59:f9:be:07:27:ef:d6:67:dc:6e:
34:f8:ab:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org