Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204992.roa
File: AS204992.roa (raw, json)
Hash identifier: nKOw/QcJYlkdKlNJluUCRYdOKc43bD/Ij7VyPoBprkE=
Subject key identifier: F0:87:0E:A0:6E:2D:A1:82:EF:33:44:4E:4B:08:10:79:4F:66:3A:A8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 058D67456DCD388D791AA8BB26B5E539023F1DA1
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204992.roa
Signing time: Tue 05 Dec 2023 02:44:13 +0000
ROA not before: Tue 05 Dec 2023 02:39:13 +0000
ROA not after: Tue 03 Dec 2024 02:44:13 +0000
asID: 204992
IP address blocks: 2a06:a005:5f3::/48 maxlen: 48
2a06:a005:a11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:8d:67:45:6d:cd:38:8d:79:1a:a8:bb:26:b5:e5:39:02:3f:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:13 2023 GMT
Not After : Dec 3 02:44:13 2024 GMT
Subject: CN=F0870EA06E2DA182EF33444E4B0810794F663AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:5d:09:be:ac:b7:de:9c:6d:66:ee:9b:d7:
2e:bd:67:fd:3f:c0:db:62:f5:2b:58:13:dd:a8:6b:
3a:37:f6:f6:e5:ea:46:e2:a9:96:5c:8f:bd:cc:af:
81:bd:4b:cd:18:8f:7d:cb:b8:ef:b8:30:4c:a8:d6:
b0:41:8e:5f:2b:4c:92:20:29:25:b1:95:40:69:98:
57:1a:f7:0a:8d:72:3b:b3:f3:31:83:ab:af:15:fc:
d3:7f:0a:6e:c4:b0:23:69:87:e4:5e:d3:4a:65:6c:
51:4a:07:4c:bd:f9:a3:ed:1b:b4:c0:76:c4:bd:57:
ef:6d:10:e1:7d:11:5c:b3:6e:30:d3:f8:70:6f:b0:
86:5e:de:a8:ac:47:e9:b1:6d:7e:9c:30:8b:06:80:
98:c8:0e:8b:00:c3:81:89:71:f9:7d:5a:ca:be:73:
2a:46:ad:3f:1d:de:ec:71:a5:7f:d2:ba:48:74:37:
36:f1:32:d6:59:9f:18:07:77:a0:b2:f9:6d:8b:23:
b3:30:83:97:f0:30:a8:6e:56:b9:df:e0:fb:d1:56:
ec:3e:b9:91:27:a9:27:0e:36:8b:95:7b:3e:62:6a:
06:0b:a8:da:6d:cc:06:df:c0:a9:7b:1e:e8:4f:2a:
28:94:25:f9:d9:1e:5d:c2:31:09:b1:18:f4:ee:93:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:87:0E:A0:6E:2D:A1:82:EF:33:44:4E:4B:08:10:79:4F:66:3A:A8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204992.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5f3::/48
2a06:a005:a11::/48
Signature Algorithm: sha256WithRSAEncryption
4c:01:dc:b0:d8:3c:21:46:16:1c:70:fb:45:fa:68:66:e7:d6:
d8:5b:ec:44:22:21:3a:2e:47:ba:91:03:f7:d1:ac:0c:d6:30:
88:66:72:1c:ff:2f:0b:29:34:fd:91:bf:c1:f9:4e:ab:27:4b:
84:59:3b:bb:36:19:b4:1e:bc:d5:16:5e:f9:b0:fc:7f:a2:52:
08:c5:79:17:52:2e:f6:53:6a:40:99:c7:90:09:a3:ca:ea:d3:
98:bf:7c:49:52:5d:27:b9:30:87:72:36:22:f3:95:19:b4:95:
3b:67:f0:6e:3c:22:94:46:a3:ab:64:46:70:5b:7f:11:7a:4c:
4f:88:06:16:a7:04:c4:2d:56:5c:d2:2a:05:4e:7a:a9:ff:54:
89:e9:3e:a3:f4:34:f5:c7:45:1d:d7:32:91:28:6d:6a:c9:ab:
bd:5f:a3:dc:91:92:d0:b2:e5:e3:52:d5:8e:d8:b0:c6:26:95:
7f:9e:28:67:b2:5a:38:91:09:36:ee:84:ba:91:d9:c8:a3:b2:
73:94:80:61:6c:08:ef:d1:38:c6:9b:f7:18:c1:a0:82:d9:88:
22:ec:42:af:c2:c8:a5:9c:b0:42:c2:05:87:ca:13:e8:29:4a:
ce:63:f8:8f:b0:b3:63:32:64:38:42:de:9b:14:a7:65:50:0b:
2c:e1:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org