Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206439.roa
File: AS206439.roa (raw, json)
Hash identifier: eR6TbxKMVl5jailisz7MArm3vP5Q8PvIyjVKIbhjUYI=
Subject key identifier: 5E:B1:EB:29:93:58:81:7B:38:DB:9D:CD:15:43:0E:95:7A:82:24:13
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 08DA64CD6310B689581B3D9B5AB5F66CD9CDFF34
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206439.roa
Signing time: Tue 12 Dec 2023 14:44:21 +0000
ROA not before: Tue 12 Dec 2023 14:39:21 +0000
ROA not after: Tue 10 Dec 2024 14:44:21 +0000
asID: 206439
IP address blocks: 2a06:a005:b62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:da:64:cd:63:10:b6:89:58:1b:3d:9b:5a:b5:f6:6c:d9:cd:ff:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 12 14:39:21 2023 GMT
Not After : Dec 10 14:44:21 2024 GMT
Subject: CN=5EB1EB299358817B38DB9DCD15430E957A822413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:6e:4c:b9:4f:1f:e9:44:1b:1b:97:58:a2:
be:69:74:b1:88:07:90:79:73:08:3f:9a:1d:4f:8b:
f4:c2:8b:cb:1e:fd:c1:86:3a:6e:9f:a1:9f:0f:12:
61:97:6e:d1:3a:0e:51:2b:29:a6:49:7f:9c:e2:50:
c3:e9:e1:a9:8b:38:3d:14:ff:d5:d7:81:12:95:b0:
92:1e:9e:22:4f:14:b6:1d:78:c3:2e:37:52:d5:e9:
bc:4c:71:64:93:5c:17:a4:7b:55:e0:ef:a4:04:0e:
27:96:e1:89:36:f9:c3:65:70:f1:29:e7:b3:b5:d6:
16:b8:e0:4c:30:ed:39:d1:e9:7a:89:7c:9e:a2:b6:
d3:93:7b:a2:dc:42:94:19:40:00:39:16:e0:80:32:
83:b2:2d:52:ae:67:1d:3a:5b:a0:80:31:2b:1d:f0:
23:c3:ea:d1:04:41:68:7d:63:71:c1:c6:19:45:22:
4b:3c:1e:e4:31:f5:f5:b1:45:9e:5a:82:7d:7d:fc:
28:3d:e9:f0:74:09:ab:17:48:77:e2:11:40:4e:0e:
a3:9e:b8:69:07:a2:28:ee:73:47:d9:11:f4:cf:37:
32:19:f7:80:84:ca:28:b9:9e:a0:2a:17:01:7b:eb:
56:d7:aa:21:16:ba:6e:9b:7b:b8:97:b0:bd:d2:32:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B1:EB:29:93:58:81:7B:38:DB:9D:CD:15:43:0E:95:7A:82:24:13
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b62::/48
Signature Algorithm: sha256WithRSAEncryption
23:7e:bf:bc:04:c4:84:41:d3:0c:ab:55:8e:ed:d5:6f:b3:4d:
52:46:e3:04:2f:50:9e:b9:c4:75:16:88:e2:e7:6f:82:7c:b8:
67:3f:e7:1a:56:c4:1c:81:fe:62:8b:c1:cb:da:f4:e9:7b:60:
8d:c4:d3:2c:0b:83:20:f5:da:af:14:4f:de:56:34:dc:68:7f:
42:d7:38:36:65:7b:14:ba:4e:9c:8f:9c:46:68:f9:5e:96:b5:
db:b7:d1:a5:92:07:5b:81:06:d4:2d:3a:7a:d8:4a:a7:a0:c2:
58:ed:71:52:a3:e3:f2:40:48:c9:89:bb:c9:ba:f6:6b:b7:29:
cc:23:c0:9d:0b:1f:04:6d:fd:4b:1c:f2:00:f0:a3:34:81:da:
7b:d9:99:e5:63:56:83:64:b1:fe:1c:88:f2:37:3f:6a:08:22:
57:0d:83:bc:67:e1:b3:82:a9:f1:39:7b:6b:de:c3:4e:e4:f2:
cf:32:0f:ea:e4:5e:41:49:12:e1:78:88:ea:ed:19:5f:08:da:
13:0a:14:00:3d:15:3b:ee:9a:1f:d4:35:da:c0:62:e0:26:0b:
78:ec:64:8d:ea:71:38:cd:f6:52:66:bf:e2:6b:92:4e:9d:de:
5e:b7:33:b1:db:7e:54:e4:36:01:ff:f6:85:50:c0:e0:b8:b0:
53:af:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org