Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204931.roa
File: AS204931.roa (raw, json)
Hash identifier: LQz9f18cRZAe6BI1AsvUqxOtiUsejIOSZrltEiNAHxY=
Subject key identifier: 79:A3:D4:A4:D2:3A:07:AB:FB:6A:36:CF:B7:16:F9:50:F0:BE:1E:41
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1EB83DDC7ACCA3EF41E2D2AFAE8365D6C83519F0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204931.roa
Signing time: Thu 21 Dec 2023 01:44:21 +0000
ROA not before: Thu 21 Dec 2023 01:39:21 +0000
ROA not after: Thu 19 Dec 2024 01:44:21 +0000
asID: 204931
IP address blocks: 2a06:a005:2bc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:b8:3d:dc:7a:cc:a3:ef:41:e2:d2:af:ae:83:65:d6:c8:35:19:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 21 01:39:21 2023 GMT
Not After : Dec 19 01:44:21 2024 GMT
Subject: CN=79A3D4A4D23A07ABFB6A36CFB716F950F0BE1E41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ba:9f:30:10:d7:b2:63:6f:57:d8:12:10:d0:
25:65:e6:50:59:88:db:d6:c8:24:ca:56:69:47:19:
13:3c:b6:0d:01:5b:e4:57:88:2f:ab:2a:3f:7a:c1:
05:51:1f:2b:28:41:cc:a4:54:07:2a:c0:f8:cc:ff:
37:0c:5d:d6:11:e8:4e:6b:44:89:e2:c0:13:1f:5f:
d6:9c:d1:91:3a:d4:18:6d:18:bb:f8:9f:8d:68:ec:
e4:e3:51:e4:51:5e:6c:15:67:58:fc:bb:9a:a0:04:
0d:75:aa:5f:c1:d2:c7:c6:4b:7c:9d:97:ab:d4:f6:
75:a9:95:7e:23:1a:4e:e0:5c:48:0d:79:35:17:23:
0f:0c:7f:f0:c1:da:b0:52:6f:05:6c:ba:b3:c2:ae:
95:1a:70:f8:53:15:2e:c2:97:49:55:70:de:47:ac:
4e:9d:51:63:91:cc:f0:4e:d2:04:01:d1:70:dd:32:
20:23:1b:79:8f:e0:3b:e3:47:35:95:0e:75:a7:33:
1d:c5:df:b4:5a:56:20:62:8d:f9:7b:de:3b:21:21:
38:f4:1e:a7:a2:0e:1d:bb:fb:e5:10:77:1b:16:9c:
22:8a:0f:44:36:6d:b1:2e:77:69:72:22:20:08:c9:
0f:ed:bc:a0:72:64:0c:ed:4e:8d:9c:92:21:e8:22:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A3:D4:A4:D2:3A:07:AB:FB:6A:36:CF:B7:16:F9:50:F0:BE:1E:41
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2bc0::/44
Signature Algorithm: sha256WithRSAEncryption
06:8e:ee:b4:a5:67:16:e5:3b:d4:e6:88:0c:50:02:65:95:7c:
96:87:9d:7a:55:38:15:65:32:5e:14:dd:76:4f:c2:66:d7:dd:
5c:6f:e5:f3:d8:1c:96:96:ef:cc:ac:02:f0:a7:6b:bc:7c:40:
c0:3d:ec:28:a5:4d:de:03:38:79:08:37:4f:dd:30:a9:fc:56:
17:f1:1c:43:6b:b5:0d:a8:ea:8e:f6:a8:0f:29:0a:d6:4d:9a:
f7:a1:4b:ac:ef:2f:81:bd:1c:8c:a3:6c:cc:9b:1d:41:61:96:
44:c7:d0:01:28:2c:ed:c1:59:59:d3:23:85:66:41:71:54:db:
61:91:5b:bc:84:c6:00:c8:78:3f:0a:eb:7c:7c:31:b0:99:f7:
8d:1b:dc:5e:cf:d2:25:70:6c:9c:23:65:a3:0f:b9:25:0e:7b:
c0:90:b2:01:9b:3d:5c:1c:53:47:ce:45:31:74:0e:5b:73:11:
6d:d6:02:fd:9e:04:c0:3c:9a:2d:cc:b6:12:b7:c4:37:4f:20:
54:ed:77:ab:5c:63:dc:49:a9:21:dd:55:5e:5a:bd:cd:5a:98:
a1:cb:02:0f:85:92:ac:a6:ec:22:5a:53:06:e9:88:35:f6:e0:
59:df:0e:39:5b:69:37:d5:f9:55:4c:04:2f:a1:61:ee:5a:54:
3b:b7:7c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org