Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
File: AS207466.roa (raw, json)
Hash identifier: XOGmiNhcPbUNU44VQahM3wsJrsiGpeUBROsMuxo/aw4=
Subject key identifier: 7E:9E:70:1E:AA:CA:86:E6:9B:06:46:4D:0E:EE:54:C3:E4:7D:4F:E0
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6F057E9DF516B78E5B6D4D081CFAFACAA200B5B0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
Signing time: Sat 03 Feb 2024 09:44:24 +0000
ROA not before: Sat 03 Feb 2024 09:39:24 +0000
ROA not after: Sat 01 Feb 2025 09:44:24 +0000
asID: 207466
IP address blocks: 2a06:a001:a080::/44 maxlen: 48
2a06:a005:15d2::/48 maxlen: 48
2a06:a005:15d3::/48 maxlen: 48
2a06:a005:187a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Apr 2024 23:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:05:7e:9d:f5:16:b7:8e:5b:6d:4d:08:1c:fa:fa:ca:a2:00:b5:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 3 09:39:24 2024 GMT
Not After : Feb 1 09:44:24 2025 GMT
Subject: CN=7E9E701EAACA86E69B06464D0EEE54C3E47D4FE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:dd:a8:1d:52:da:26:de:17:42:86:68:a7:
da:a6:83:86:7e:ab:ca:ee:f1:cd:4a:9a:21:33:a1:
5c:bd:dd:cd:0a:ad:09:50:b9:db:0e:f5:2b:c3:3d:
46:1a:3d:db:d7:e8:69:b5:24:f0:17:ea:b1:90:a8:
a6:65:83:b1:68:16:4b:6a:f6:d0:9a:b0:89:8a:02:
77:91:89:d3:25:ff:d7:bd:cc:f5:0e:03:84:0d:86:
23:74:fa:4a:b3:ea:7c:88:c1:5b:f5:92:97:54:4a:
f6:d3:2e:3e:00:3f:66:0b:37:43:87:c8:13:7e:3e:
d2:3c:ad:22:50:33:2c:71:00:2a:b8:bc:9d:10:ef:
99:9e:fc:e0:4b:8e:e8:b5:32:ca:c4:83:a3:69:a8:
7f:24:15:f9:7d:e9:a0:f1:a5:f4:84:39:27:ba:19:
5f:68:85:e6:b7:8f:ae:fa:9b:ce:42:43:5c:3d:9d:
0f:59:c8:bc:e0:27:2e:c2:f5:ce:62:60:21:65:2b:
cf:47:68:80:21:82:3b:3f:d7:ad:a2:db:39:78:3a:
22:d0:59:68:09:35:48:78:e5:e9:c3:62:e8:d5:b2:
fb:07:8c:75:45:3d:9e:7b:fa:da:6f:9f:90:c7:67:
07:92:df:a3:3f:c8:6b:fa:a9:d8:00:86:59:ce:e3:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9E:70:1E:AA:CA:86:E6:9B:06:46:4D:0E:EE:54:C3:E4:7D:4F:E0
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a001:a080::/44
2a06:a005:15d2::/47
2a06:a005:187a::/48
Signature Algorithm: sha256WithRSAEncryption
ac:48:13:fc:13:0e:3f:44:51:71:ae:e8:f0:76:21:98:75:11:
97:ca:23:3d:22:42:36:91:83:c9:90:e9:84:62:fe:01:3e:4e:
aa:4c:39:1a:9e:c9:ac:9b:ae:79:2f:2f:29:4e:f4:ed:e3:24:
66:34:a4:9e:b2:d8:17:2a:1c:98:a8:7e:a4:12:f8:42:a4:39:
ae:99:83:da:61:18:15:90:a5:69:c9:20:ff:c8:99:e2:63:80:
eb:de:32:e6:b6:67:8e:1b:d6:c8:14:c5:0e:cf:3d:66:18:d9:
41:9b:ba:46:38:2b:16:b8:b8:57:3b:d7:4a:94:4a:eb:b1:b0:
ac:1e:0d:09:03:93:41:c4:7d:49:7d:f5:9e:cc:d3:2f:f2:7f:
b0:7a:e2:48:99:e8:f7:22:f5:aa:59:31:f2:d9:f1:03:ad:bf:
0c:31:89:ed:37:29:05:2f:d9:65:b9:d8:00:77:34:13:a8:11:
5b:8f:5b:a5:c1:ae:19:a5:e2:7e:7a:7e:bf:d0:0b:c3:c8:2d:
01:4f:a6:bf:71:17:78:e8:0d:e7:59:35:5e:f4:80:fd:26:27:
57:bb:bd:d9:a0:b0:fb:35:e9:22:93:ab:36:5b:e8:33:10:5b:
a6:57:73:06:6c:98:72:a7:11:52:c2:c9:f2:21:20:e8:ea:92:
f2:07:a3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:43:50 2024 by rpki-client on console-fra.rpki-client.org