Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205152.roa
File: AS205152.roa (raw, json)
Hash identifier: vDNJIWtyqcVvXm0T81FObWV4NWEB6QBcrxn6fm6CRjE=
Subject key identifier: 86:CB:7A:BD:84:4A:C5:1F:B8:0C:C7:8D:D7:E9:E9:3A:92:41:69:D0
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6C3AFAB933DE322EE30BA9AA4EA3194C3C6F1543
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205152.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 205152
IP address blocks: 2a06:a005:1a80::/44 maxlen: 48
2a06:a005:1a90::/44 maxlen: 48
2a06:a005:1aa0::/44 maxlen: 48
2a06:a005:1ab0::/44 maxlen: 48
2a06:a005:1ac0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3a:fa:b9:33:de:32:2e:e3:0b:a9:aa:4e:a3:19:4c:3c:6f:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=86CB7ABD844AC51FB80CC78DD7E9E93A924169D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:5e:66:1a:e0:7d:f3:fd:39:eb:16:6e:de:
c9:f7:bf:4e:04:4d:c9:7d:29:78:c0:72:98:cb:aa:
2a:34:d6:84:da:ec:b9:04:61:79:e5:69:c3:d3:81:
36:eb:25:ee:6c:66:38:f7:70:63:00:11:4d:3e:9a:
48:69:cc:81:de:7f:40:27:06:87:17:88:8c:31:1e:
db:b7:4d:bd:ac:94:71:5e:23:5d:9b:ee:0c:56:c7:
2a:19:6b:54:ea:62:b0:2e:1d:6a:87:ea:bf:ac:a5:
99:9b:0d:da:df:c2:7a:d0:f6:c0:95:a3:08:e6:53:
f0:6a:7e:52:84:b5:b0:51:51:36:75:c6:8c:54:cd:
f8:4f:c0:b1:8f:16:aa:0b:17:df:a5:56:5f:a8:05:
c4:23:f8:7a:c1:a7:54:40:70:5c:df:1e:fa:c5:e0:
a2:78:e7:40:0a:49:70:4b:46:f1:5b:66:34:32:0b:
f2:53:8f:4f:90:ac:e5:3c:55:60:3c:43:70:ca:f6:
e2:0c:98:95:98:58:aa:fd:f5:ec:d7:8e:c9:8c:c8:
e3:7b:e8:c6:b3:0c:53:61:57:2a:6b:a5:64:f8:1d:
37:4a:af:e1:56:73:d4:5f:e8:c7:66:a3:95:5a:40:
ac:65:1d:e2:60:ab:77:c3:4a:0e:c0:0b:40:ce:d1:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CB:7A:BD:84:4A:C5:1F:B8:0C:C7:8D:D7:E9:E9:3A:92:41:69:D0
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1a80::-2a06:a005:1acf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
67:ca:7d:8d:5b:58:93:c3:06:24:c9:3a:3a:0b:dd:16:96:df:
61:d4:63:e6:fa:79:ea:4c:82:37:5d:d3:58:f8:ed:66:96:78:
77:11:16:ce:cb:33:9a:af:24:50:76:c3:ae:af:19:42:1f:b4:
94:cb:fb:8b:cb:2c:1c:e0:65:59:f8:ea:a4:c5:93:91:cc:07:
c4:df:1f:12:24:c0:50:c4:61:52:ef:af:4e:16:f8:89:c0:b5:
7d:89:0f:66:33:b1:e8:c5:22:eb:e8:c5:e8:55:af:c9:be:ac:
dc:61:22:98:06:b4:c7:03:1e:22:ce:ed:4f:91:22:07:81:c5:
8a:62:bf:90:80:a3:0f:4e:b5:0a:4e:c7:a4:8f:78:ae:7e:03:
9a:73:70:11:f6:05:66:5f:28:ef:53:1f:25:07:73:53:e1:16:
8b:24:cc:27:ec:39:48:27:c2:11:ee:0d:86:b8:f0:d8:09:89:
06:9a:aa:7d:66:89:7e:f5:a1:55:8a:0e:d9:4f:d6:ed:74:e6:
9e:29:c4:83:2e:17:54:28:bd:cc:4f:68:01:56:de:6e:93:39:
11:85:f5:c8:72:85:ac:38:4d:05:c0:2a:5c:67:89:f5:e4:22:
91:5d:09:0b:f4:b7:4e:b3:83:25:81:5b:6b:81:9e:81:86:32:
b9:65:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:23 2024 by rpki-client on console-fra.rpki-client.org