Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204931.roa
File: AS204931.roa (raw, json)
Hash identifier: aKpBXNQxADSoAb+chPyaY5V7AZr5TvneiuknT2i2i8I=
Subject key identifier: 37:91:D5:51:13:9E:2F:DA:4F:6A:3F:A3:D4:37:55:22:35:75:21:DE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1AA74F38D428BADC55BD9C41580DE8870C19FAC3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204931.roa
Signing time: Thu 21 Nov 2024 02:40:12 +0000
ROA not before: Thu 21 Nov 2024 02:35:12 +0000
ROA not after: Thu 20 Nov 2025 02:40:12 +0000
asID: 204931
IP address blocks: 2a06:a005:2bc0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a7:4f:38:d4:28:ba:dc:55:bd:9c:41:58:0d:e8:87:0c:19:fa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 21 02:35:12 2024 GMT
Not After : Nov 20 02:40:12 2025 GMT
Subject: CN=3791D551139E2FDA4F6A3FA3D4375522357521DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:43:5e:d3:21:f1:35:94:51:a3:38:6b:86:
c6:03:c4:a6:47:e1:b2:4a:df:a8:6a:09:58:a8:b6:
9d:91:68:05:2a:3c:d3:35:7c:2d:24:83:c3:7f:a6:
7f:0a:b6:29:ff:0f:71:4e:a6:6a:df:0b:5a:80:e3:
62:9b:3d:36:d6:67:8b:8c:70:5b:35:d2:17:bb:17:
38:9a:b5:46:49:9a:ca:ab:ea:32:57:47:e8:48:23:
58:52:95:e7:30:e3:d9:aa:66:7d:9c:d2:1d:a3:a2:
0a:65:5e:34:2e:1d:90:e7:bc:8d:56:4c:bc:4f:ad:
e3:9c:58:fa:9c:d1:d9:92:6d:cd:f9:52:fd:6b:eb:
f0:57:3c:9e:27:0b:3c:5c:cd:57:67:9a:22:bf:f5:
d1:06:45:22:e6:1b:7d:00:31:02:9e:a0:40:24:60:
80:81:e9:1c:f4:c8:ec:f3:77:d0:2e:5c:fe:02:7b:
32:f1:db:77:4a:fb:99:71:d4:56:e2:82:fc:c3:dd:
ad:25:77:b4:33:ac:44:52:61:45:b2:97:5b:63:50:
43:3d:35:92:2a:2f:02:bd:38:40:1d:53:1f:c3:b2:
30:2f:c2:b3:89:76:01:0c:ed:26:a6:74:d7:98:e6:
6d:e6:ee:a4:04:ba:b5:44:48:38:66:aa:ee:10:e3:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:91:D5:51:13:9E:2F:DA:4F:6A:3F:A3:D4:37:55:22:35:75:21:DE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2bc0::/44
Signature Algorithm: sha256WithRSAEncryption
07:13:78:fd:95:48:ff:35:1b:ef:d2:0b:39:00:7c:5d:97:83:
25:52:71:f1:d1:e4:e3:19:d0:3a:00:eb:cd:ee:1b:5a:ea:d4:
da:f4:8f:5a:a4:a1:1a:f7:4a:13:47:bd:37:87:4e:a2:0b:a0:
44:f7:9d:c2:45:2d:ab:c4:6e:22:fc:af:1f:82:29:01:be:8b:
03:cc:85:b8:03:94:77:25:19:86:0b:c0:9b:87:5c:56:1b:fc:
d8:d7:52:6d:13:27:6b:47:f5:ed:16:da:89:04:75:60:85:93:
00:7e:fc:01:7b:55:cb:7b:83:21:f1:e3:83:a7:6b:a6:74:c3:
ac:51:ad:22:6d:06:2e:0d:c0:4c:40:92:41:fd:09:b6:74:1e:
f4:28:3d:60:bc:c4:12:8e:43:4c:1d:68:9a:f6:2b:d8:88:e1:
0e:bb:f3:f3:5b:a9:2c:b6:77:2e:d3:df:69:f4:d7:dc:b6:32:
2a:a5:3c:7c:94:b9:a3:7c:ba:89:38:2d:95:5d:1d:9d:4a:f4:
ed:a5:de:91:fa:89:a0:21:a0:e1:af:3f:cb:10:fb:0b:b2:3b:
3b:7e:22:7d:8d:34:e5:61:dc:d3:82:89:a5:64:a5:55:b5:d0:
c9:d7:b5:06:1e:23:6e:3d:c5:7d:d5:81:50:34:1f:4f:43:01:
03:7a:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:44 2024 by rpki-client on console-fra.rpki-client.org