Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205092.roa
File: AS205092.roa (raw, json)
Hash identifier: M2wgoRAIguk25Kkim5vrYkV5lblMR7KcdZyEHwKd7iQ=
Subject key identifier: 0D:B5:56:09:84:FC:04:1E:39:82:77:56:2A:8B:9D:B0:7C:B1:F7:DD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5F1CD61AAE0F3F03F9AEF092E976A28FA94DC3CA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205092.roa
Signing time: Tue 05 Nov 2024 03:39:59 +0000
ROA not before: Tue 05 Nov 2024 03:34:59 +0000
ROA not after: Tue 04 Nov 2025 03:39:59 +0000
asID: 205092
IP address blocks: 2a06:a005:930::/44 maxlen: 48
2a06:a005:940::/44 maxlen: 48
2a06:a005:960::/44 maxlen: 48
2a06:a005:970::/44 maxlen: 48
2a06:a005:980::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:1c:d6:1a:ae:0f:3f:03:f9:ae:f0:92:e9:76:a2:8f:a9:4d:c3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:34:59 2024 GMT
Not After : Nov 4 03:39:59 2025 GMT
Subject: CN=0DB5560984FC041E398277562A8B9DB07CB1F7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:88:50:76:0f:70:11:61:89:01:c2:80:34:
3c:65:88:13:20:54:9d:b4:83:db:8b:31:3e:96:f3:
f8:ae:8f:a2:90:b3:cd:6e:1f:33:a4:82:01:26:6e:
dd:0d:d6:30:4b:f6:6a:86:d7:bc:37:db:40:9a:67:
31:65:b6:ae:45:c0:2b:69:01:cc:5b:39:45:11:cb:
b4:74:8a:1a:d2:c7:44:10:c8:6d:60:43:8f:b6:c2:
6a:94:ae:c4:cf:0b:e6:8a:e5:85:58:3e:bf:fa:64:
39:46:06:ff:4d:4b:25:e5:c4:0d:23:00:44:68:cd:
48:00:5c:6d:4e:a8:ac:7f:57:d7:eb:d3:be:04:27:
42:c3:a1:17:e8:eb:88:a2:85:ca:67:d9:fb:f7:a5:
b3:e4:38:4b:29:55:68:4c:e2:83:8b:55:2b:1c:d6:
51:3d:10:99:15:4f:5a:d7:32:0a:5d:5e:91:63:a1:
c3:e7:67:49:c2:91:96:0f:ed:e0:69:e7:9a:e1:aa:
b5:d6:27:0b:05:8d:a1:f1:5f:93:fe:6e:80:f9:12:
a7:01:4b:41:71:17:cf:a0:f9:b2:b7:84:c9:35:2b:
e7:bf:3d:bd:69:16:c3:10:6f:db:b8:21:25:55:7e:
ab:36:17:63:fb:d0:60:71:4b:b6:eb:3d:65:c1:96:
4b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B5:56:09:84:FC:04:1E:39:82:77:56:2A:8B:9D:B0:7C:B1:F7:DD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205092.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:930::-2a06:a005:94f:ffff:ffff:ffff:ffff:ffff
2a06:a005:960::-2a06:a005:98f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:68:e0:18:79:2e:a3:69:10:d9:02:b9:39:c7:a1:28:62:54:
8f:2f:1c:8f:d7:26:fb:e9:01:9f:4e:f9:68:db:6a:bb:39:54:
72:d7:14:6e:fc:15:63:31:be:47:19:63:f2:09:ba:a5:19:0b:
56:18:d5:9d:6f:5b:6c:85:b9:ad:53:c2:f6:70:5d:7d:50:9e:
5c:0b:37:f0:ec:e8:37:2b:d0:ae:e2:12:66:e9:7c:1f:07:57:
d6:c7:41:d8:c9:d5:d2:11:f4:66:db:fd:58:09:f2:42:de:48:
ba:dd:4e:ad:f0:82:9d:67:26:0a:49:b8:b2:5f:05:c8:61:b3:
97:f1:3d:dc:11:fe:84:58:8b:d1:54:f3:5a:d6:5e:27:68:da:
35:4c:66:77:db:a4:ab:cc:cd:3d:9f:83:5c:22:d3:b5:b1:c9:
7e:9b:1a:9a:8e:c4:6f:b9:5f:51:6e:c9:2d:12:fd:c8:66:1e:
e2:e1:63:6b:8a:72:68:8a:35:39:76:c2:eb:bb:e0:37:eb:21:
1f:2a:52:f0:30:32:60:c7:8f:55:8a:a2:77:40:1c:35:55:f4:
4c:39:da:74:c3:83:dd:14:a9:d1:32:ac:cd:a1:b3:fd:8f:cd:
79:13:ae:06:b9:e9:da:00:02:42:bb:b8:3b:b2:73:72:eb:6e:
48:b4:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:24 2024 by rpki-client on console-fra.rpki-client.org