Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205152.roa
File: AS205152.roa (raw, json)
Hash identifier: tL4qiDsyQh5wTujOOoJXYLOAdVHQQ9S9xBg7OJDOTTA=
Subject key identifier: 89:4A:9E:56:34:13:9D:D9:7F:C4:4E:19:FE:80:26:1E:3E:96:E7:BA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 56488852CF14BA1F9379150B3E34D5E9609E3962
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205152.roa
Signing time: Tue 05 Dec 2023 02:44:11 +0000
ROA not before: Tue 05 Dec 2023 02:39:11 +0000
ROA not after: Tue 03 Dec 2024 02:44:11 +0000
asID: 205152
IP address blocks: 2a06:a005:1a80::/44 maxlen: 48
2a06:a005:1a90::/44 maxlen: 48
2a06:a005:1aa0::/44 maxlen: 48
2a06:a005:1ab0::/44 maxlen: 48
2a06:a005:1ac0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:48:88:52:cf:14:ba:1f:93:79:15:0b:3e:34:d5:e9:60:9e:39:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:11 2023 GMT
Not After : Dec 3 02:44:11 2024 GMT
Subject: CN=894A9E5634139DD97FC44E19FE80261E3E96E7BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:29:c0:88:48:35:7f:17:f8:e7:c8:9e:b1:53:
70:2e:13:2a:37:7c:1e:49:da:94:61:43:73:61:a7:
c5:82:ac:d6:c7:60:92:04:db:fb:cf:fd:56:b9:c9:
03:c4:8f:35:32:3a:a3:bb:6c:3e:37:9e:0b:21:f5:
83:59:ec:79:2d:c5:1f:f7:3d:b6:ea:ac:c0:1b:5e:
27:6b:d7:2c:b3:96:74:22:33:cd:47:46:37:98:12:
ca:4b:55:a7:8b:c1:3b:ea:fb:53:bf:49:1e:dc:83:
70:3c:9d:2e:07:09:1a:dc:22:83:96:fb:4d:26:dc:
dd:d3:f2:fd:2f:be:44:3a:03:41:68:42:0c:75:04:
b1:f6:65:1e:1b:50:f3:95:61:f8:6e:45:40:ce:c6:
eb:68:67:c9:7d:48:38:be:5a:2b:5b:e0:5a:82:67:
7c:3e:15:e1:18:8f:41:64:15:36:d6:17:c3:64:4e:
b7:86:dd:e9:5e:88:0e:26:bb:f9:3f:40:41:9e:e1:
44:8d:21:86:bf:a4:ee:df:30:b4:bc:c7:23:3d:f1:
c7:fe:71:83:1a:f2:b7:51:41:22:9e:c4:16:25:99:
cc:2d:64:a1:ed:86:9a:9c:35:4c:0e:65:d1:f2:c1:
28:f6:87:e2:94:0b:99:cd:29:c9:87:95:ec:43:b8:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4A:9E:56:34:13:9D:D9:7F:C4:4E:19:FE:80:26:1E:3E:96:E7:BA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1a80::-2a06:a005:1acf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:c6:3b:0c:fd:24:34:fa:31:f2:07:88:e0:38:b2:0f:47:fd:
d8:02:cf:96:0e:d1:fa:84:52:8b:35:8f:c1:21:b0:3f:68:52:
d8:cb:de:ab:c4:32:37:25:c4:4f:3c:85:6f:75:76:d2:98:a7:
a0:39:47:42:57:1b:d7:f5:da:d5:17:5c:3e:18:75:23:57:8e:
2c:66:12:68:86:4c:5f:e5:b2:f1:20:11:1b:36:cc:62:84:1e:
cc:d2:3f:85:23:8d:0d:a9:03:15:96:f9:ac:15:8d:1d:e7:d6:
ab:74:1b:0c:8f:14:93:a8:6d:1e:76:85:01:6c:b0:5d:6c:f9:
0a:8a:a4:7a:64:c0:61:98:10:33:53:40:8f:67:c6:86:f5:be:
3c:38:ce:dc:ea:f3:6d:5b:8f:0e:9b:00:27:08:ef:e5:e2:20:
c1:fc:8c:81:cd:2a:e8:1d:80:e0:92:45:42:a8:8d:bb:34:e7:
f1:06:ac:aa:7c:8c:34:16:91:9b:b8:76:d5:f8:25:f3:7b:84:
92:1f:03:d1:2a:1e:af:17:30:25:cc:e0:2f:ad:ea:1c:2b:be:
d8:c4:4e:22:a2:24:3e:a1:24:b4:42:e8:49:77:a1:21:3d:c0:
74:a0:ff:e0:c8:3d:f6:fd:95:70:58:d5:64:95:7a:03:3f:6e:
19:07:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org