Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205232.roa
File: AS205232.roa (raw, json)
Hash identifier: ogq7yLQbgECcjjItg7WSPruh+RGl0K0Auyca7og9iNo=
Subject key identifier: C1:58:93:0C:F1:F0:82:50:46:BD:96:FA:33:49:0E:A8:B3:AA:57:7E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5365920A11E02B59E80B07637FED368BE01C073C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205232.roa
Signing time: Mon 05 Feb 2024 17:44:24 +0000
ROA not before: Mon 05 Feb 2024 17:39:24 +0000
ROA not after: Mon 03 Feb 2025 17:44:24 +0000
asID: 205232
IP address blocks: 2a06:a005:18f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:65:92:0a:11:e0:2b:59:e8:0b:07:63:7f:ed:36:8b:e0:1c:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 5 17:39:24 2024 GMT
Not After : Feb 3 17:44:24 2025 GMT
Subject: CN=C158930CF1F0825046BD96FA33490EA8B3AA577E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:7f:57:4c:01:00:e1:fe:78:16:0a:c3:be:
9c:1b:3b:4a:6f:15:b0:1f:81:ae:ac:44:1b:8b:d6:
ca:61:3d:99:73:c5:0e:d3:08:c1:89:21:9c:33:e0:
32:60:cb:6a:a6:bf:a0:c2:24:06:da:37:cf:7e:4d:
2b:4d:8e:13:1d:c2:02:c8:bb:a7:b9:d2:83:58:dc:
35:9d:21:7f:93:97:8a:d5:52:b1:9a:4d:d4:8c:c3:
6a:2b:eb:21:dd:47:7c:26:cc:ad:ae:42:8c:9f:d3:
55:28:7e:5f:0c:b1:f1:ef:46:37:46:7b:64:e5:f2:
d8:d1:31:4a:af:94:ab:50:9b:14:76:5f:bf:4f:82:
e5:a3:c3:a7:30:e0:68:97:9b:e4:12:d6:9f:c1:29:
e2:c1:81:51:51:c5:6a:6b:48:7d:0e:6c:30:1a:22:
05:50:b1:9f:94:bf:15:ac:21:5a:73:41:be:c9:de:
67:ca:21:16:b4:09:d0:e3:da:be:e4:ad:86:b2:31:
91:a4:f5:c6:86:0c:91:6f:61:8e:9a:f7:59:f4:0e:
8d:bb:81:ed:13:1e:58:24:ea:9a:d7:83:22:52:0e:
54:59:4a:93:fc:40:99:a6:2b:29:28:6d:51:42:4c:
b7:52:4c:30:ce:d8:73:04:81:06:39:86:c1:ef:22:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:93:0C:F1:F0:82:50:46:BD:96:FA:33:49:0E:A8:B3:AA:57:7E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:18f0::/44
Signature Algorithm: sha256WithRSAEncryption
5c:7e:9b:72:24:35:08:61:14:4b:e1:06:9d:44:4b:d0:3c:ca:
00:e5:b8:89:cc:e6:9b:f8:07:de:ac:46:ae:be:dd:ff:8d:c5:
a9:d7:32:4b:a8:59:8b:7d:b0:53:d5:fb:95:e8:69:cb:9a:01:
19:c4:c0:8a:c5:ff:ef:ec:fc:5c:6a:2a:e4:bd:2a:78:70:aa:
c6:61:f4:35:0a:a5:57:63:de:20:5c:05:88:f1:d7:67:5d:7d:
69:fc:ac:f9:b7:ae:1d:df:b5:af:57:46:e3:41:40:fb:59:8c:
ae:dd:1f:41:9c:b4:b0:24:c7:ac:59:62:d7:c4:c5:50:ff:11:
7f:ae:74:0f:7c:0f:1d:5f:01:b4:b4:ae:fd:44:f0:bf:66:84:
a7:0f:57:f6:de:5b:de:35:45:53:76:40:3d:71:74:4b:57:9a:
94:1c:c8:72:19:9a:56:15:5b:97:f9:7e:5c:9d:88:7a:1e:88:
02:bf:5b:5f:66:b4:fa:a9:50:2d:31:c4:05:36:f1:43:15:c8:
3a:1d:cb:fb:21:2b:07:2e:42:e3:a4:f5:a9:62:61:ae:7d:ac:
62:6f:2f:92:d4:31:93:b2:f2:77:bd:3c:4a:42:45:ad:80:b3:
c3:db:c7:a4:fb:fb:64:20:cd:3f:9d:9b:39:45:b0:b7:cc:d3:
22:09:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org