Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206592.roa
File: AS206592.roa (raw, json)
Hash identifier: 6O9hLMl42197GC01GBLVfAxCM450yTdwj6pmJ7el8/8=
Subject key identifier: 56:93:5D:A4:A4:22:E8:57:06:E4:A6:03:25:CB:B4:75:A3:80:80:04
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 75D443A56FB8106E55DC9E56B386876311820C59
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206592.roa
Signing time: Tue 05 Nov 2024 03:40:06 +0000
ROA not before: Tue 05 Nov 2024 03:35:06 +0000
ROA not after: Tue 04 Nov 2025 03:40:06 +0000
asID: 206592
IP address blocks: 2a06:a005:26a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:d4:43:a5:6f:b8:10:6e:55:dc:9e:56:b3:86:87:63:11:82:0c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:06 2024 GMT
Not After : Nov 4 03:40:06 2025 GMT
Subject: CN=56935DA4A422E85706E4A60325CBB475A3808004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:ca:d9:36:de:91:2a:b7:1a:5d:5e:5b:12:
9f:c1:64:27:c3:79:05:45:95:92:67:2a:fd:fd:86:
eb:a6:08:46:54:69:fd:d2:c1:83:62:c8:31:48:4e:
75:79:11:a9:77:7b:09:91:52:e8:bc:0a:dc:02:13:
05:de:0e:d2:14:cf:ab:cb:a6:0f:07:fd:dd:3f:08:
0a:59:0f:ce:48:71:5b:2a:42:7f:b7:ff:4f:fc:87:
09:96:b3:6c:48:1d:1c:f6:63:72:c9:29:8a:e5:22:
e1:fa:b3:fe:52:40:ef:18:b5:f8:dc:8b:55:14:f7:
1b:d0:47:97:98:ee:e5:ae:be:46:7c:ec:7c:ae:40:
a2:61:d9:91:40:24:76:c9:5a:48:3e:0c:af:c0:43:
6d:92:0f:53:d7:9f:f3:84:b6:2d:6c:ac:f2:57:ac:
e2:fd:8e:92:0b:ee:b3:b7:a3:0c:9e:d2:95:c0:da:
19:76:40:69:89:9a:48:fd:43:fa:d2:22:81:bb:5a:
e3:41:10:61:3f:5f:2f:21:fd:e3:24:74:c3:0f:b7:
08:78:bd:2a:93:d4:43:8f:e2:44:61:4d:c3:8e:08:
ce:10:77:72:1e:c8:65:7b:2e:54:84:03:75:8f:51:
53:de:2a:39:e7:c4:7b:30:d3:27:b9:52:c4:5e:f7:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:93:5D:A4:A4:22:E8:57:06:E4:A6:03:25:CB:B4:75:A3:80:80:04
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206592.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:26a0::/44
Signature Algorithm: sha256WithRSAEncryption
3d:aa:d1:00:34:5c:95:76:60:3a:57:46:ed:63:35:e9:10:c7:
9f:8e:f6:1d:8a:5f:7d:a4:d2:75:2f:a8:cc:21:c4:a7:a6:6d:
69:a8:bd:7e:bb:d0:bf:b4:a5:6f:05:e7:17:4e:e5:66:cb:a7:
8a:ae:99:bd:3d:b3:f0:2a:e5:e2:ca:d4:41:8d:d9:26:69:79:
15:06:5d:0b:73:1a:f5:ab:1b:6f:0d:bc:b8:f7:f5:a6:55:99:
21:5c:db:39:25:96:a2:15:51:75:4e:de:78:9e:17:43:16:46:
23:30:a8:79:62:b3:d2:a9:1a:5f:38:e2:33:ea:23:a8:83:e7:
86:30:c1:ea:cc:68:ff:a7:c8:dd:26:a2:93:11:ed:84:b1:7b:
47:d8:7c:74:80:b3:d9:68:38:75:41:ef:65:57:64:7e:53:fb:
c5:7b:d7:22:d3:78:1c:2a:7f:88:9a:67:2d:eb:10:8d:6e:1f:
68:2d:6b:6b:8f:93:ee:6d:7e:fb:b4:66:63:9b:e1:a3:2e:d4:
5b:32:ff:f7:2a:e2:87:6a:35:59:a6:50:e8:01:7e:fa:4a:86:
a7:a1:8a:5b:b2:23:ec:c6:36:24:04:da:d9:3d:84:42:91:56:
bb:c9:94:f6:c4:ac:3a:01:c2:89:b3:23:dd:3f:78:a7:22:cc:
55:fd:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:24 2024 by rpki-client on console-fra.rpki-client.org