Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207252.roa
File: AS207252.roa (raw, json)
Hash identifier: Gzh/U/7i6NTYrFeXeL4A1k8jgadxUxqi5yc9p2w2yZo=
Subject key identifier: 88:F9:CA:FD:12:39:44:A6:47:B0:36:EE:D2:42:04:A9:D6:E2:F4:EF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5E73FB6053FB957625F99BB6D99E7BE781D505AD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207252.roa
Signing time: Fri 15 Dec 2023 23:44:21 +0000
ROA not before: Fri 15 Dec 2023 23:39:21 +0000
ROA not after: Fri 13 Dec 2024 23:44:21 +0000
asID: 207252
IP address blocks: 2a06:a005:2b60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:73:fb:60:53:fb:95:76:25:f9:9b:b6:d9:9e:7b:e7:81:d5:05:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 15 23:39:21 2023 GMT
Not After : Dec 13 23:44:21 2024 GMT
Subject: CN=88F9CAFD123944A647B036EED24204A9D6E2F4EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b8:42:1e:99:68:c4:a7:60:6a:6c:d1:95:7a:
0a:5c:80:6b:57:59:e2:ec:29:53:89:74:cd:7b:6c:
30:33:e9:e2:fb:4e:08:a0:7c:c2:ea:7f:3d:7a:13:
47:b4:d1:7a:50:3d:4a:06:8b:41:ce:47:cb:31:dc:
a0:7a:ab:f2:3d:a9:9c:6a:00:47:ad:24:bb:fa:5c:
c3:9e:8c:85:6f:5c:95:d7:47:81:ce:54:a9:68:ec:
0d:16:01:ab:bf:b6:a5:86:db:3e:67:17:3c:9a:e8:
ec:bf:0d:ed:c6:7a:fb:03:79:a9:8d:d0:df:a0:aa:
cc:af:96:fb:56:5e:93:2c:d9:75:22:23:7f:61:d3:
7b:4e:b2:63:ce:44:f8:ff:33:9f:28:30:fe:d2:21:
64:12:06:3e:d9:75:13:26:f9:38:eb:ef:d1:e6:be:
2d:93:a2:99:77:77:d4:58:b0:2e:3e:94:49:f7:7f:
6a:36:4b:a8:eb:f8:a7:d0:39:9f:d3:f4:08:10:6b:
06:0e:12:28:ee:54:77:db:35:50:ee:fc:c8:c6:c6:
63:37:81:b6:1b:1e:98:fe:c5:73:7d:d8:b3:d3:a5:
5a:5b:53:cc:4c:bf:c8:52:2a:f4:28:1a:44:90:dd:
c4:0c:3c:72:32:a4:99:29:a4:5f:05:3f:46:04:44:
f2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F9:CA:FD:12:39:44:A6:47:B0:36:EE:D2:42:04:A9:D6:E2:F4:EF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2b60::/44
Signature Algorithm: sha256WithRSAEncryption
5d:e8:64:a4:f1:88:ec:fe:00:7c:49:8f:e7:73:8f:0f:f9:76:
f8:c1:ac:72:f1:0b:3b:1d:9c:56:60:1c:1f:b8:34:b7:89:4c:
a5:ed:2e:95:1d:e7:b3:4d:5a:22:ee:af:b9:a1:f0:35:56:20:
76:f0:8c:0b:50:ec:50:fa:16:38:2c:aa:33:92:61:79:85:cb:
92:63:88:be:1a:be:bf:ff:5e:89:7a:da:87:48:5b:88:3d:a9:
04:d8:7b:ba:4e:52:41:fa:2d:1c:9a:5c:9c:7e:31:ac:28:00:
9c:a3:6f:a6:3e:4e:77:f1:77:41:eb:76:a2:6b:c6:00:af:69:
a4:a2:73:84:2f:db:29:86:52:a8:5a:94:08:03:98:b7:60:99:
be:40:e6:65:d0:f2:af:52:4c:e2:cc:ad:cb:d5:77:d7:27:40:
00:54:9f:2d:d7:cb:2c:42:9e:3f:b2:66:3b:88:a5:be:34:a5:
19:e5:f7:2f:8f:7e:16:73:82:a4:77:ee:3e:4e:20:ed:30:12:
9c:01:d0:51:70:b5:a2:f4:43:3e:23:20:70:d4:68:9b:5d:f9:
ce:96:ec:01:80:f6:f8:e3:c7:83:3f:c3:d9:cc:66:d3:ef:68:
87:28:0c:44:7c:da:41:43:3b:45:56:18:47:e3:3b:36:95:ac:
d5:44:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org