Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206946.roa
File: AS206946.roa (raw, json)
Hash identifier: MLngdn5vYIk0EJ6bm5x12VhOwL8WUqBky5PvMxmmDZo=
Subject key identifier: F7:2E:46:8B:28:69:76:95:A5:D3:62:86:B8:8F:A7:33:6D:E2:71:8C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 02F47188AA7E5E25A67B6500C70D5D303BC175A3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206946.roa
Signing time: Tue 05 Nov 2024 03:39:59 +0000
ROA not before: Tue 05 Nov 2024 03:34:59 +0000
ROA not after: Tue 04 Nov 2025 03:39:59 +0000
asID: 206946
IP address blocks: 2a06:a005:4da::/48 maxlen: 48
2a06:a005:4db::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:f4:71:88:aa:7e:5e:25:a6:7b:65:00:c7:0d:5d:30:3b:c1:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:34:59 2024 GMT
Not After : Nov 4 03:39:59 2025 GMT
Subject: CN=F72E468B28697695A5D36286B88FA7336DE2718C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e8:67:4e:c4:53:ee:6c:cf:58:90:7f:c2:c0:
10:0e:7c:e5:1c:1a:7c:57:9e:0a:8a:61:46:b6:1e:
f3:e4:f5:48:a4:14:e9:94:70:58:8c:82:1b:6a:df:
bc:ef:05:b5:cf:51:8d:50:e3:5c:9d:6a:a7:ea:23:
c0:58:9f:04:75:ac:ed:d3:b1:d8:e8:a9:37:f5:57:
1e:98:9d:3a:bf:f6:1f:95:a6:28:c6:2b:bf:f6:6a:
4e:dc:92:94:0d:f5:2a:22:d6:93:e8:ba:26:24:e2:
07:30:1c:c2:46:2e:63:06:2b:44:02:d4:3a:13:da:
ef:82:8a:9a:f9:0c:10:53:92:b7:40:6e:09:c2:43:
3b:84:aa:c4:71:45:b8:e1:47:8e:0c:32:22:fd:ef:
9e:6e:f2:5b:c6:1f:c3:7f:64:3a:26:a6:d7:f6:dd:
95:49:86:56:a0:1d:e7:76:7e:45:fd:fd:32:8a:e5:
9e:fa:7c:b7:8a:d5:92:3f:1b:1d:89:0a:5e:33:78:
e3:60:16:21:d0:4d:6c:c0:cb:42:3e:14:4e:9c:62:
af:ac:fd:ce:93:2f:63:37:e6:b4:a6:80:70:80:b5:
f4:84:af:18:53:38:db:f3:f9:56:be:61:ef:b1:88:
a4:0e:a9:52:db:32:8b:e8:e9:b3:14:a9:ca:7b:f6:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2E:46:8B:28:69:76:95:A5:D3:62:86:B8:8F:A7:33:6D:E2:71:8C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206946.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4da::/47
Signature Algorithm: sha256WithRSAEncryption
c4:a3:2b:89:9a:4f:4a:c2:bf:ba:30:5d:d8:9d:14:7e:78:5f:
68:22:c9:7b:09:24:9c:66:54:6b:d8:90:a0:6a:d5:d2:45:a2:
47:f5:98:4c:c1:da:34:cb:e1:c2:32:a7:b0:fe:1a:33:8a:eb:
a9:80:45:8f:ec:ce:44:6d:52:f6:83:d4:45:d7:d8:de:93:b5:
91:31:f0:de:11:4f:74:3d:f6:32:3e:7e:46:6b:21:23:6a:9c:
33:aa:99:ba:15:12:65:bb:90:96:32:5e:26:1d:2b:0d:52:29:
41:aa:5c:b3:7c:6b:f6:38:93:cc:cf:33:01:ac:5d:ee:89:88:
bb:2a:b6:b2:8a:9c:06:c0:a0:b6:4e:91:33:08:21:2c:e7:01:
a3:31:34:aa:70:e2:0f:91:07:73:d3:7d:fa:1a:05:34:00:c2:
1c:bb:b5:0c:12:be:64:61:da:b2:9f:28:a0:c8:ad:a9:53:ed:
ad:97:af:b5:a3:49:45:fe:0c:6e:73:2e:a2:ff:a4:f3:5e:dd:
71:3d:db:63:53:95:e6:cf:82:19:87:af:cf:04:a5:93:72:55:
1d:e9:f0:71:a1:b7:0d:b1:e9:be:22:30:8c:93:a3:b0:03:40:
c0:ff:3d:ea:1c:1d:34:b4:2f:2e:77:3e:8a:a7:8c:8d:10:74:
50:3e:77:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:24 2024 by rpki-client on console-fra.rpki-client.org