Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205794.roa
File: AS205794.roa (raw, json)
Hash identifier: fHBeMS+0Jd3CxdMSG1oXTF+HV+CX+fvwYtOIW3SO2wg=
Subject key identifier: 1B:E5:29:11:64:2E:83:49:1C:6D:91:67:31:B9:CA:A2:1C:5E:A3:58
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6A8F5C56A2E5007050AC329B89EFEE4CF1B3F18A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205794.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 205794
IP address blocks: 2a06:a005:c50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:8f:5c:56:a2:e5:00:70:50:ac:32:9b:89:ef:ee:4c:f1:b3:f1:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=1BE52911642E83491C6D916731B9CAA21C5EA358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:4f:36:76:d3:d6:64:2d:77:57:e9:55:93:
06:56:86:f6:8f:04:0d:77:53:b9:37:af:ec:16:9a:
28:79:15:59:16:65:34:a9:96:a5:d8:7a:8f:28:8d:
be:da:e5:ab:c3:9d:9c:e2:da:97:31:7a:09:2f:c3:
89:c5:62:9d:d9:6d:4c:5e:d4:ac:49:38:47:5e:75:
22:ba:28:9b:e9:bb:ae:1a:de:de:9a:6c:e9:4c:e8:
fb:db:44:ec:1b:48:ad:49:0c:86:ff:dd:e3:54:d6:
87:91:bc:3c:5f:9e:2b:a3:bb:1a:5b:4b:b2:57:b9:
21:3e:bb:2a:4a:51:73:81:b7:09:25:33:31:71:f1:
b5:f1:24:de:a5:f1:b2:ef:ee:83:7a:7a:b7:56:19:
d4:87:9c:a3:9e:4b:7f:b2:8c:e7:45:67:c6:f6:d7:
87:77:c9:8c:30:69:3b:3d:7a:57:ce:fd:c6:db:70:
23:51:fc:9e:b0:09:68:e2:0f:16:5f:70:2d:0f:94:
cb:ff:07:7a:11:c1:58:0d:24:a7:fc:75:a9:10:75:
19:b0:0e:0e:c0:12:ca:ae:53:cb:b5:b4:57:d1:42:
f9:36:2d:fd:bf:e2:3b:02:19:49:9f:8a:55:cf:8a:
ca:86:bc:d6:15:4b:ef:94:21:f8:55:29:7d:8e:52:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E5:29:11:64:2E:83:49:1C:6D:91:67:31:B9:CA:A2:1C:5E:A3:58
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205794.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c50::/44
Signature Algorithm: sha256WithRSAEncryption
1e:df:3b:19:c0:ff:af:23:3f:dd:c9:20:ca:d8:a4:0f:75:2e:
89:71:2f:64:c2:01:9b:27:24:d0:51:84:80:57:73:f6:be:da:
f6:f1:0b:5b:31:8c:71:40:bf:15:0e:b9:7b:bf:97:c8:d7:a7:
b7:41:64:42:86:84:ef:32:6c:d1:8f:55:70:95:61:9d:3a:dc:
2d:e8:cb:f2:6f:63:eb:6d:51:32:e6:5b:9a:cf:4c:2d:97:3a:
43:d4:90:18:92:97:87:2a:d5:6b:86:f0:51:25:91:0a:d9:70:
21:41:9f:11:c2:b6:2f:e9:17:77:55:0f:11:73:bc:00:16:93:
4e:20:4c:57:44:d0:d0:2b:f3:2c:12:98:db:73:a8:c5:98:67:
c8:e9:66:07:60:3b:cd:d6:12:89:45:d5:f8:67:75:ee:b0:b9:
0f:ec:74:c8:8b:41:f4:49:90:d7:6b:6e:48:81:ed:85:37:54:
63:c3:69:d8:5b:53:24:0a:b8:02:de:5f:0c:28:59:1e:88:7f:
bd:08:21:25:b1:6a:26:e6:2a:5f:14:f5:da:0f:44:4b:ef:f1:
4c:95:ea:cb:57:2b:bb:b4:25:b6:0a:34:9e:12:b5:59:cc:98:
d3:58:45:c0:87:05:38:ba:be:da:d3:5d:8d:2a:35:81:a3:f1:
a0:23:d6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org