Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207762.roa
File: AS207762.roa (raw, json)
Hash identifier: PjBfM86gDkxuRcee6ZD6e4P0eVPLoLxQ4+B4bEiM2lY=
Subject key identifier: BA:69:25:1B:AB:4E:05:8F:A1:DB:5E:43:73:C0:F9:A8:45:AA:56:4C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3172B78E216A9F975A60C89B4646F7041F7FA373
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207762.roa
Signing time: Tue 05 Dec 2023 02:44:17 +0000
ROA not before: Tue 05 Dec 2023 02:39:17 +0000
ROA not after: Tue 03 Dec 2024 02:44:17 +0000
asID: 207762
IP address blocks: 2a06:a005:a0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:72:b7:8e:21:6a:9f:97:5a:60:c8:9b:46:46:f7:04:1f:7f:a3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:17 2023 GMT
Not After : Dec 3 02:44:17 2024 GMT
Subject: CN=BA69251BAB4E058FA1DB5E4373C0F9A845AA564C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7b:0e:eb:73:10:72:40:50:bc:b0:ed:4b:bc:
30:3b:84:2e:53:22:37:73:2c:da:8c:d8:d2:67:7b:
ef:e5:92:11:f7:c6:8b:1a:93:d1:d3:bb:d4:24:5f:
73:48:dc:99:4e:e5:81:a8:7a:23:69:b5:8b:10:34:
41:a8:c4:13:4c:6f:d3:18:5e:51:c9:1a:c1:ad:7c:
d0:7b:82:af:7d:f8:f6:44:9c:f2:1d:3e:6e:9c:76:
e1:00:e1:c4:f9:1c:ad:fa:53:7d:53:29:1b:96:3f:
41:16:ef:e2:df:3c:3f:ab:68:9e:b1:2a:0c:e6:b7:
d8:bc:0c:e5:66:e5:69:d3:97:cd:7a:8b:54:0a:a7:
1d:ae:a6:24:77:93:bb:8f:a4:cb:7c:44:4c:09:c0:
9f:e9:67:52:40:08:50:62:51:b1:d1:ba:36:13:be:
45:ea:33:f5:67:01:c1:44:b0:7e:60:31:33:68:84:
d1:24:7b:65:39:aa:37:71:a2:8e:56:49:7a:19:b0:
a6:c0:94:ed:27:75:16:57:d8:f8:10:c9:84:ac:71:
fe:31:21:31:58:68:c3:df:4d:a5:c0:64:b0:39:27:
b7:9b:84:22:3a:4a:73:68:3d:49:88:f8:df:f1:55:
b6:54:e4:29:85:01:af:42:d1:3c:0b:d1:c0:11:3d:
bc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:69:25:1B:AB:4E:05:8F:A1:DB:5E:43:73:C0:F9:A8:45:AA:56:4C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207762.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0c::/48
Signature Algorithm: sha256WithRSAEncryption
45:71:06:8d:8a:f0:51:60:a9:f2:2c:72:88:e8:ee:67:57:4f:
6b:8b:43:ef:4b:02:a7:02:01:d6:f0:e7:38:ec:03:a1:a0:28:
51:ac:0e:7d:72:9d:1f:1e:1f:ed:85:40:95:8e:a2:8c:42:6c:
1f:9f:3a:30:99:1d:18:b6:10:47:1e:fb:77:7a:3d:8f:13:5e:
eb:16:b1:44:16:ad:61:50:51:87:fd:ea:37:f0:23:38:11:a4:
d6:ff:e7:17:a7:54:96:82:b5:cc:67:df:13:02:72:56:d7:fb:
27:58:ad:17:d5:99:d1:59:4f:2e:fe:31:5e:f6:58:83:05:bf:
77:4b:5b:1e:56:00:03:d1:04:bc:bb:05:95:e0:1f:12:f8:1d:
50:0b:dd:22:f2:7c:54:1a:4f:36:34:65:69:7e:29:c8:d4:76:
6a:77:35:17:d3:c4:10:4b:aa:80:4c:6c:c2:71:5f:85:74:58:
b0:10:a8:c1:f2:ad:fc:50:95:22:b8:88:da:5f:75:05:28:17:
c7:3b:f1:7d:06:3a:0e:5e:9e:ca:0a:2a:d5:fd:fe:31:3f:77:
69:19:14:b7:1e:bc:69:2c:86:09:f7:ac:af:4c:83:64:55:30:
9b:83:1f:d4:6b:87:7d:45:9f:9b:1d:86:b3:a4:0d:47:11:53:
e5:e4:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org