Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204841.roa
File: AS204841.roa (raw, json)
Hash identifier: PpsJOzm7h3OlqeVh7pnWVJRbjpIF/CVVmPmpb5AlDEQ=
Subject key identifier: 04:DC:85:0A:97:9D:F3:0D:1B:9F:1D:46:4E:B8:87:BB:9B:9C:81:03
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5D2417475BDA352A5CB163ABF926A4E3CE634A54
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204841.roa
Signing time: Tue 05 Nov 2024 03:40:01 +0000
ROA not before: Tue 05 Nov 2024 03:35:01 +0000
ROA not after: Tue 04 Nov 2025 03:40:01 +0000
asID: 204841
IP address blocks: 2a06:a005:434::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:24:17:47:5b:da:35:2a:5c:b1:63:ab:f9:26:a4:e3:ce:63:4a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:01 2024 GMT
Not After : Nov 4 03:40:01 2025 GMT
Subject: CN=04DC850A979DF30D1B9F1D464EB887BB9B9C8103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:6d:e3:07:93:32:31:c6:dd:91:04:b7:98:
fe:1c:52:06:b1:69:6c:09:7b:73:77:ed:f2:31:82:
3e:17:ad:6d:2a:69:41:a5:ab:ee:75:49:de:92:77:
bf:30:d9:9d:20:79:7d:b7:b7:b1:ea:50:2f:40:61:
1e:5f:55:bc:bf:87:bf:3b:c4:05:39:b5:52:6b:eb:
9c:8f:0f:8e:fe:bb:cf:71:ec:fe:78:7f:2b:42:c5:
c5:16:cc:1e:62:84:d7:04:a0:3d:03:81:50:65:54:
37:bf:6f:72:b5:0f:46:a2:42:3c:86:60:25:f6:96:
62:6f:45:e3:67:52:b9:01:f3:43:0a:7a:00:86:8c:
9e:4d:0c:c5:3f:27:f2:38:0d:d8:3d:40:45:81:dd:
73:dc:7b:86:61:d0:3d:5d:8a:ac:9b:89:a6:28:f6:
9e:67:8a:70:29:0a:cf:dd:59:f6:98:c9:d1:af:1f:
f6:ef:7f:4e:19:ea:9e:56:c6:08:94:7d:84:25:6d:
9c:df:c1:4c:bf:21:71:2f:e5:87:ee:bb:71:02:fe:
c0:dc:59:39:ea:d6:08:64:92:7f:66:0a:05:ed:cd:
7c:1d:6c:d1:e0:e4:fd:b3:59:46:7b:21:ec:3c:19:
7f:43:21:85:d5:f6:50:51:96:05:69:02:fd:52:81:
66:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DC:85:0A:97:9D:F3:0D:1B:9F:1D:46:4E:B8:87:BB:9B:9C:81:03
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204841.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:434::/48
Signature Algorithm: sha256WithRSAEncryption
7d:9c:6b:26:f9:8a:05:e8:33:63:ed:9b:6f:2b:f8:46:3c:1c:
dc:a6:2e:8c:aa:cc:5c:48:26:af:e4:e5:f0:04:7f:ec:a8:bf:
53:63:0b:21:0b:58:f9:22:2b:12:74:81:ec:16:17:6b:96:ee:
59:58:21:53:42:d2:95:fb:64:1c:94:ac:cc:18:43:be:79:0e:
94:2d:22:67:27:6f:7b:cf:b0:29:63:58:91:d8:d3:01:4a:d4:
2e:3e:6e:21:c2:96:08:dd:e3:33:2d:73:48:aa:c5:d8:a5:8d:
fd:33:d2:3d:c3:de:0c:f8:9e:5f:1b:c2:60:4c:31:19:27:61:
01:39:97:81:0e:5b:a6:5c:c5:8b:cc:26:25:27:38:fa:9a:29:
7d:a7:85:44:bd:79:be:e1:34:f9:c6:4c:2d:3e:f5:96:c3:9b:
cb:8d:ca:7c:6f:24:de:69:f4:0f:3d:bb:61:8b:ff:72:69:22:
e0:5c:5c:bd:0f:16:53:e4:7e:8c:a0:c9:ee:cf:c2:1b:92:ec:
21:f9:af:d9:ae:6c:a3:19:62:01:2e:33:90:45:30:bc:97:ba:
fb:5c:98:2d:20:53:92:c5:bd:19:d4:4e:0a:fb:41:42:9e:e4:
b6:34:97:b1:5a:87:e1:b1:19:c9:f1:dc:e2:dd:49:09:d5:a4:
1f:46:08:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:19 2025 by rpki-client