Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206125.roa
File: AS206125.roa (raw, json)
Hash identifier: jGNpBX1Gv5GV+j++sh9cgoKTdoLimDl0RY1zxqcaIgo=
Subject key identifier: FE:17:0A:90:30:98:8D:1C:44:0F:FA:6C:3F:DD:88:94:FE:E3:FA:01
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 54196D2E6FF73586440E7704BF20CEE87A23B12C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206125.roa
Signing time: Tue 05 Dec 2023 02:44:13 +0000
ROA not before: Tue 05 Dec 2023 02:39:13 +0000
ROA not after: Tue 03 Dec 2024 02:44:13 +0000
asID: 206125
IP address blocks: 2a06:a005:15c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:19:6d:2e:6f:f7:35:86:44:0e:77:04:bf:20:ce:e8:7a:23:b1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:13 2023 GMT
Not After : Dec 3 02:44:13 2024 GMT
Subject: CN=FE170A9030988D1C440FFA6C3FDD8894FEE3FA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:f9:1b:ac:23:af:01:51:a2:8f:da:8a:48:
85:46:fa:4c:ba:a0:df:13:0f:e6:e3:d5:e4:ae:a8:
12:23:3e:04:50:2f:d4:8c:16:ba:00:de:12:15:66:
b9:70:33:8f:50:98:66:74:9d:b3:f7:8c:b4:cf:74:
9f:93:7e:95:b9:2d:36:e9:b7:09:c6:b9:2d:12:ef:
8f:40:f7:87:ba:83:1f:98:93:72:a3:50:a7:d8:bd:
ef:06:27:b9:46:d5:84:ba:36:9b:5f:eb:32:d9:62:
2b:4d:bb:89:ef:90:6f:18:22:b7:5b:50:25:65:c4:
db:9f:94:18:44:34:7c:62:d1:ba:14:bc:e3:75:f9:
b9:0d:db:fd:3b:b1:d8:f3:03:9f:89:58:26:e9:b6:
78:28:19:92:f1:f4:77:1c:83:e8:b5:34:6f:c5:d7:
bc:37:79:e6:d0:44:11:6c:a1:18:de:8b:0c:53:49:
8d:4d:1f:85:08:97:8c:a6:51:d6:67:5a:e9:0b:96:
69:4c:03:b6:85:d0:7f:85:66:26:38:f4:1c:17:4b:
92:00:2b:f9:81:7d:a9:40:c3:71:95:f2:c2:95:1b:
b5:d4:c8:8b:13:87:73:83:56:06:23:52:9c:b6:0c:
ab:e4:b1:aa:ec:5c:d6:5d:ef:45:69:4a:c6:ae:79:
73:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:17:0A:90:30:98:8D:1C:44:0F:FA:6C:3F:DD:88:94:FE:E3:FA:01
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:15c0::/44
Signature Algorithm: sha256WithRSAEncryption
98:48:ac:ec:e3:a7:56:88:b8:fa:01:f1:07:47:22:43:e8:4d:
c8:99:ae:c4:e4:d8:9c:fb:b7:21:69:9c:e8:b0:81:98:ac:d9:
f6:cd:8f:68:dd:08:1e:a1:41:a7:00:a3:62:bd:6a:2a:5a:81:
fc:0d:da:5e:06:5a:18:1a:fd:08:90:51:b4:b7:38:aa:23:21:
64:14:94:d0:7e:3b:dc:59:b6:15:f3:7b:d6:f9:d6:26:ec:70:
23:ed:7e:e6:91:6b:f3:b9:42:34:0a:1d:9b:fe:37:ee:3b:65:
6f:a2:e7:03:dc:16:24:75:a7:30:17:01:5a:63:1c:f2:86:7b:
0e:b9:86:63:e3:f5:27:80:af:7e:8d:62:e2:f4:f8:17:e6:39:
13:de:81:bb:19:3d:73:db:f0:c8:cb:c0:0d:5a:46:d6:41:ea:
23:43:51:d2:3e:f6:6a:99:eb:22:83:a1:bc:e8:5f:ce:e0:d5:
10:9b:b1:76:86:61:93:8d:ca:44:7f:ec:40:62:7c:af:14:3b:
40:c5:ca:9e:97:33:c1:7c:26:69:9c:f1:bb:06:b8:5a:e4:83:
d5:c8:11:de:6e:7c:3f:6c:1a:1e:0c:f7:48:ae:81:a3:4d:af:
ab:a9:8b:d4:2d:64:0e:48:c1:2d:4a:cf:ec:4c:37:b5:4e:0f:
e5:60:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org