Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204857.roa
File: AS204857.roa (raw, json)
Hash identifier: awo4u/cSqm2NEbnGpS8glcF2HBIIEIb1N9Q1/4Kw/OA=
Subject key identifier: 02:7B:22:48:65:15:BD:A0:7A:0C:2D:0D:ED:92:2C:F7:1D:A5:FE:87
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 08775C933CFF27055D5143F39F595C8467EBF48D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204857.roa
Signing time: Tue 05 Nov 2024 03:40:01 +0000
ROA not before: Tue 05 Nov 2024 03:35:01 +0000
ROA not after: Tue 04 Nov 2025 03:40:01 +0000
asID: 204857
IP address blocks: 2a06:a005:b70::/44 maxlen: 48
2a06:a005:b80::/44 maxlen: 48
2a06:a005:b90::/44 maxlen: 48
2a06:a005:bd0::/44 maxlen: 48
2a06:a005:be0::/44 maxlen: 48
2a06:a005:bf0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:77:5c:93:3c:ff:27:05:5d:51:43:f3:9f:59:5c:84:67:eb:f4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:01 2024 GMT
Not After : Nov 4 03:40:01 2025 GMT
Subject: CN=027B22486515BDA07A0C2D0DED922CF71DA5FE87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:c8:5f:3e:0c:cf:dd:19:94:69:23:4a:97:
f6:10:db:94:0f:af:79:d0:56:78:1b:6a:46:1b:73:
2c:7f:c3:53:d1:f9:93:a1:86:e3:9c:1c:07:1c:a8:
4b:66:f6:6a:7b:70:f1:51:55:f7:a3:28:9d:2c:1c:
44:ec:60:fc:e2:57:4c:ab:b3:19:a3:e8:4e:f0:90:
56:6c:39:23:2a:80:ff:93:04:fd:2d:a6:9f:21:a7:
da:9f:4f:48:7b:ec:df:ac:67:1f:ae:aa:75:2b:be:
1c:7d:b9:a4:03:7d:9a:81:21:f5:54:e8:47:92:74:
9e:0d:d7:f6:0e:83:c4:fa:e4:be:13:ce:f0:69:59:
f7:e4:d2:fc:11:4d:6e:bc:fd:22:bf:51:c6:28:b2:
e2:00:66:6b:d6:77:9f:38:4a:90:d3:c5:2b:d1:b3:
f9:5c:45:89:2a:03:39:64:a2:03:43:38:fb:35:df:
57:f7:e4:ac:19:de:0e:c5:47:5f:10:44:2e:4e:43:
59:e8:8b:a3:3e:83:cd:d2:3f:e8:cd:c8:18:57:86:
75:85:0a:e9:fb:84:a1:81:17:bc:1a:c6:14:3c:ee:
83:e1:94:5c:0d:dd:59:47:56:cf:a9:59:b4:6b:71:
34:28:bb:d0:19:37:4f:84:d3:5f:e4:9f:f0:09:4b:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7B:22:48:65:15:BD:A0:7A:0C:2D:0D:ED:92:2C:F7:1D:A5:FE:87
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
2a06:a005:bd0::-2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4d:86:bb:19:a3:f5:0b:2c:f1:50:7c:ec:a2:28:cf:eb:a7:9d:
1f:7d:84:d9:57:cd:aa:a8:c0:b2:86:20:0a:35:53:64:64:0d:
62:0f:05:7a:3b:82:69:a9:b2:8c:d9:91:60:95:ad:25:db:98:
21:91:4f:a9:49:9e:a3:b5:02:75:bf:50:6c:55:b4:05:42:6d:
19:41:75:92:68:2c:ec:ab:85:17:da:1c:15:d4:42:5a:ca:80:
52:30:6a:90:ef:26:da:d6:39:4b:ad:b5:4b:41:6b:71:63:6a:
b9:e0:cb:47:d8:73:55:81:f3:23:93:61:f2:09:17:9e:15:45:
1e:c2:7d:2b:0d:b9:23:95:4e:9e:e6:68:74:33:ce:e0:38:a3:
df:ae:89:96:08:b9:67:84:47:ab:97:d4:dd:65:21:c1:98:e5:
d7:d0:45:90:34:92:41:1e:a2:48:75:13:79:fa:70:d4:d3:5d:
be:0f:c3:62:db:17:50:c5:2c:83:67:6a:b3:96:50:b4:9b:69:
af:a6:c2:a6:6f:50:c6:36:4a:09:11:f5:39:ef:a3:48:56:84:
1c:e7:d6:a9:83:19:b9:89:9c:2c:17:3a:ff:0d:6d:27:d9:1b:
ab:2a:11:4d:82:9e:f0:bf:73:49:13:28:29:c3:43:20:47:09:
26:ae:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:44 2024 by rpki-client on console-fra.rpki-client.org