Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205432.roa
File: AS205432.roa (raw, json)
Hash identifier: 8J+WXcCXpVSoDOEw3oUUmU/TN7eA5nGGXa8uQsthoJM=
Subject key identifier: 25:63:76:39:02:47:8C:67:10:EE:9B:ED:F1:50:E0:01:3B:BE:DC:FC
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3EEDE4571E8648A7DADF34585EA01B70E607F8C9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205432.roa
Signing time: Tue 05 Dec 2023 02:44:10 +0000
ROA not before: Tue 05 Dec 2023 02:39:10 +0000
ROA not after: Tue 03 Dec 2024 02:44:10 +0000
asID: 205432
IP address blocks: 2a06:a005:1a::/47 maxlen: 48
2a06:a005:5e2::/48 maxlen: 48
2a06:a005:680::/44 maxlen: 48
2a06:a005:690::/44 maxlen: 48
2a06:a005:6a0::/44 maxlen: 48
2a06:a005:85c::/47 maxlen: 48
2a06:a005:9d0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ed:e4:57:1e:86:48:a7:da:df:34:58:5e:a0:1b:70:e6:07:f8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:10 2023 GMT
Not After : Dec 3 02:44:10 2024 GMT
Subject: CN=2563763902478C6710EE9BEDF150E0013BBEDCFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:5e:a0:f2:0f:f3:d7:fb:d2:52:3b:95:a1:
07:d3:30:0d:8e:f3:c2:d6:c2:f0:ca:c9:60:97:fe:
38:5e:76:6d:04:b0:b3:db:f2:58:fe:19:e2:ce:d2:
a1:28:e4:8a:e3:fa:a8:a3:ad:c7:c6:9d:0d:38:c8:
fc:f1:6f:6f:79:fb:5b:2e:02:bd:b9:92:e6:07:c7:
87:2d:c4:0e:da:10:be:be:6c:12:d1:0a:e6:6f:ce:
5c:21:51:56:bd:05:39:ba:9b:d6:41:5c:56:e5:f1:
b8:3c:3c:ad:5a:3b:46:57:ec:b9:81:03:b1:78:37:
9b:89:13:c1:56:10:a2:90:f9:f5:51:86:8e:f0:48:
89:25:9b:9f:d0:b6:5f:04:00:ea:6c:6f:19:33:06:
7a:9a:3b:2d:9f:74:ba:cf:1b:92:87:8c:a3:d2:7f:
41:3b:be:a3:40:80:47:23:4d:36:c0:dd:8c:e8:e1:
48:5b:b5:a2:99:38:78:c6:93:70:ed:f3:f5:50:23:
a3:35:70:94:b4:99:3d:12:78:6f:4b:73:92:d0:fd:
9e:98:93:10:4d:1c:2a:5f:99:d8:3c:90:bc:6b:12:
f4:64:53:bf:1c:56:91:9d:6e:ee:39:67:09:38:89:
84:b7:9b:7c:86:4f:e0:66:f9:5b:6d:1b:c8:e0:ba:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:63:76:39:02:47:8C:67:10:EE:9B:ED:F1:50:E0:01:3B:BE:DC:FC
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1a::/47
2a06:a005:5e2::/48
2a06:a005:680::-2a06:a005:6af:ffff:ffff:ffff:ffff:ffff
2a06:a005:85c::/47
2a06:a005:9d0::/44
Signature Algorithm: sha256WithRSAEncryption
d2:6c:f8:9e:a4:65:70:d7:86:32:0c:a9:aa:ee:c2:2d:76:9f:
d9:bd:49:76:7b:be:e0:f5:b5:e6:43:b5:6b:68:7e:5d:ac:f7:
71:ab:56:e3:61:c2:f2:0c:d5:94:40:68:b6:fe:cc:e2:80:7d:
88:ed:6a:44:e1:1a:6a:fd:d2:b9:eb:9d:2a:bb:3a:e8:c9:32:
83:45:e4:a6:f3:20:e5:73:ba:ba:e1:be:55:a0:8d:af:52:47:
bd:bc:77:19:e1:1a:2f:b1:51:db:98:c8:8a:a9:74:68:59:06:
ba:30:6e:70:06:82:85:41:82:c0:38:7c:6f:e8:94:a2:45:bd:
c9:88:71:d0:7c:34:a8:3c:21:ff:c7:97:4c:32:ee:09:9e:7e:
fc:a9:6f:aa:4c:8e:64:8e:2f:c6:b2:5b:8d:8c:46:30:97:b8:
eb:7a:3b:96:47:4d:13:2f:b3:bb:bc:83:c7:55:c1:46:91:03:
cf:48:c6:2a:43:39:12:ce:a2:18:45:28:a1:0f:d7:bf:33:5b:
51:57:ae:c8:1d:87:8d:38:04:d3:e5:f6:bb:46:de:d5:36:5a:
a5:e5:a0:1e:9d:1b:d5:d8:4d:7c:89:33:8f:63:08:62:35:54:
e4:74:71:18:58:2c:1a:d7:a1:30:9f:c9:8e:b6:6c:d0:9a:7d:
fa:16:37:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org