Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206075.roa
File: AS206075.roa (raw, json)
Hash identifier: KtQ2H9GBHoddUL9+XgVlZ4UNPVvR9QuRa9a3U4+9Q+A=
Subject key identifier: ED:9C:3B:95:3C:DF:B0:31:F5:49:D5:99:11:0C:10:EB:B6:36:2B:B3
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 45B1986B27DDA8C6F8A4DAE90E8E5820E6F9BABB
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206075.roa
Signing time: Wed 14 Feb 2024 19:44:24 +0000
ROA not before: Wed 14 Feb 2024 19:39:24 +0000
ROA not after: Wed 12 Feb 2025 19:44:24 +0000
asID: 206075
IP address blocks: 2a06:a005:1942::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b1:98:6b:27:dd:a8:c6:f8:a4:da:e9:0e:8e:58:20:e6:f9:ba:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 14 19:39:24 2024 GMT
Not After : Feb 12 19:44:24 2025 GMT
Subject: CN=ED9C3B953CDFB031F549D599110C10EBB6362BB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:b7:f0:c2:64:81:76:cb:f7:bf:d4:a0:73:
92:11:25:f1:4e:f6:49:4a:51:a5:2a:9f:85:f2:80:
55:80:45:f3:40:cd:ef:f5:6b:03:1d:f6:d9:b4:fd:
ab:3a:ae:f7:3b:3e:79:2c:a9:88:a8:0f:02:4e:ed:
52:40:75:dd:da:68:ab:09:72:cf:cc:5d:79:94:c6:
9d:32:8e:39:56:d7:7f:33:3a:b6:5b:b5:f7:b8:90:
12:e0:eb:05:85:a5:64:03:12:bc:b9:ad:b8:91:be:
46:c4:60:a8:7f:ba:26:09:5f:d3:dc:c7:50:69:7d:
fe:18:14:6e:80:db:2f:14:b0:f6:fb:73:69:a0:40:
8a:bf:4f:52:0c:80:32:3a:ac:0e:b7:b3:b8:10:dc:
21:18:3a:76:58:76:49:61:18:9a:5b:ad:ed:65:ea:
69:bd:10:f3:34:27:b7:c0:01:c8:f1:6a:7c:c4:87:
fc:1e:bb:69:f4:5d:49:61:eb:3c:b5:0b:3e:8d:4f:
31:2d:c0:b8:c6:03:60:c8:7f:77:0f:3b:30:0e:7e:
27:fb:99:de:b4:44:c0:94:d8:7c:33:4e:e0:ca:b3:
19:25:d2:8d:db:89:b9:5a:94:f1:e0:d4:ba:6d:e2:
95:8e:42:82:3a:8d:2c:d5:a3:e3:74:db:93:27:be:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9C:3B:95:3C:DF:B0:31:F5:49:D5:99:11:0C:10:EB:B6:36:2B:B3
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1942::/48
Signature Algorithm: sha256WithRSAEncryption
04:8c:45:ab:ca:1c:76:c3:93:49:d1:4e:2e:89:f0:7a:62:c7:
49:a4:64:f4:ca:d1:62:ff:f1:73:cb:ff:27:fa:e1:ff:d0:ff:
af:af:2f:be:7d:74:52:a6:10:7e:56:f5:ee:71:cb:7c:5f:44:
94:99:ce:10:fe:66:cf:8a:67:93:0e:4c:39:9c:f1:a0:9c:98:
89:fa:4f:8d:2c:c6:35:04:5c:d1:b8:bf:da:fe:f0:39:1c:b8:
26:7d:75:a3:be:b0:b7:48:f6:68:cc:06:4f:82:4c:b9:2a:59:
e4:ba:33:09:b7:cc:ec:ef:a9:e4:20:65:f9:6b:1c:95:1a:bd:
96:63:a6:e3:fe:f8:36:5c:f9:54:a3:0c:6d:b8:31:cd:0e:d8:
4f:34:04:ee:da:c8:01:51:63:39:43:42:d8:b8:7e:68:e6:8d:
c4:05:a7:7f:0d:30:2b:5f:31:db:25:88:fd:0a:4d:20:f1:a8:
9d:3a:ca:37:35:3b:ea:39:d5:ce:c0:f0:eb:42:ab:50:dc:3c:
08:01:4c:b7:2a:cc:07:c9:46:2c:7c:b1:ef:f3:82:af:d9:76:
ac:f3:f1:3b:53:f3:44:f5:fd:ce:c6:81:7d:7e:c7:76:70:4c:
00:7c:6a:3d:c0:09:2d:07:0c:8e:85:0c:ae:ed:c7:eb:49:0a:
b9:46:0a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org