Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206125.roa
File: AS206125.roa (raw, json)
Hash identifier: eHmg9N6udE1smwAjyEjFWBoSH9ztWqk3qFVUB5J4QN0=
Subject key identifier: E1:DD:7C:A8:B1:C4:64:41:FF:B8:3B:D1:A6:A1:BA:76:C1:53:DF:08
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 659A79701B7A9B2A1539C02872D6D7AC94C30C3A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206125.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 206125
IP address blocks: 2a06:a005:15c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9a:79:70:1b:7a:9b:2a:15:39:c0:28:72:d6:d7:ac:94:c3:0c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=E1DD7CA8B1C46441FFB83BD1A6A1BA76C153DF08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:93:0a:19:0f:48:59:dc:ad:d4:15:58:eb:
e1:d7:0d:02:25:03:bd:28:37:fe:ad:77:9b:ca:f5:
74:a0:a6:fc:31:22:a9:c3:40:5a:bc:ea:5a:4c:6d:
42:c6:98:91:82:68:c3:e9:c3:b3:e2:50:22:fe:d4:
a4:c9:97:40:be:37:5d:f5:77:95:89:55:58:9f:78:
d6:e0:20:93:e8:92:b6:2a:c9:ce:55:43:4b:9f:1a:
51:c5:7f:00:64:72:4f:c6:ad:d9:8c:62:8f:a8:44:
67:61:03:d8:48:34:96:80:6b:cb:c3:ff:17:d0:f4:
1f:66:ca:6b:5f:75:a8:42:47:4b:22:1d:c3:bf:7e:
0d:fc:a0:0b:a5:6d:c8:a7:61:a9:40:77:bd:0d:26:
6d:80:d9:31:83:5b:7c:2f:1a:5d:f8:65:5a:c9:72:
82:13:0d:1e:06:6d:15:ab:ef:34:06:40:94:e2:b9:
99:a7:a3:b9:86:16:e1:f1:2e:7b:fe:50:16:86:a9:
80:01:99:7f:63:af:e7:02:16:2b:30:b8:9e:04:6f:
b9:97:c2:8f:53:f2:96:51:e3:0f:ac:22:dd:15:00:
59:c9:63:b5:36:f8:a9:d6:bf:9a:54:e4:14:3f:9b:
ad:11:7f:c3:81:ee:62:65:d8:8a:b4:50:b9:fa:90:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:7C:A8:B1:C4:64:41:FF:B8:3B:D1:A6:A1:BA:76:C1:53:DF:08
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:15c0::/44
Signature Algorithm: sha256WithRSAEncryption
a6:ac:b6:51:15:53:9f:99:cf:d7:e5:83:51:a0:21:4a:a6:8d:
8c:c6:43:32:36:e2:0e:b9:e4:f5:fe:92:37:2f:0b:25:07:1d:
d9:63:0b:cf:96:45:f4:bf:78:b0:5b:23:7e:ea:50:db:86:74:
a5:44:3a:65:8b:3c:11:c1:8e:ac:eb:55:82:76:05:8d:6c:cb:
ef:1b:10:e3:cd:3b:4e:01:1e:30:93:e7:3f:5f:40:a1:9b:90:
6a:32:05:b1:5d:8d:9e:5f:9c:9b:59:dd:1d:1e:a7:01:bc:78:
fa:e5:a7:9a:f1:e8:2e:36:3e:24:fd:05:0c:30:63:d6:ab:c0:
aa:bc:1b:4d:f8:0f:09:1c:a7:01:e0:c9:95:49:2b:13:58:7e:
0d:1f:d8:36:bb:04:d6:7d:a3:93:ae:f6:5b:28:bf:56:2e:e0:
87:db:d5:19:14:c8:6b:d1:55:a1:83:83:2f:ae:52:92:47:ad:
9e:1b:97:c6:da:0b:c6:7b:4e:7b:0f:d3:a7:00:c1:73:50:e9:
be:48:c0:e6:8e:09:32:11:95:da:26:69:a7:e7:55:10:d0:71:
f8:27:3d:2a:b8:5b:3a:9f:b4:f4:54:d6:8a:e0:3c:b0:41:1a:
c2:0b:cc:3a:6d:75:b6:05:b4:bb:4a:6f:38:4b:5f:69:b9:d5:
06:5b:71:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:55 2024 by rpki-client on console-ams.rpki-client.org