Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: 6xfBw3wCaxFu2h16iWVxeVzOZLZgyFJA3TWI8NnR9kQ=
Subject key identifier: EE:0F:EC:54:E1:30:62:3F:42:CC:87:B3:DD:65:1B:4D:71:23:83:FF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3E01778ADAF1F939160E65681C087B5F3D063FA4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207941.roa
Signing time: Thu 14 Nov 2024 20:40:12 +0000
ROA not before: Thu 14 Nov 2024 20:35:12 +0000
ROA not after: Thu 13 Nov 2025 20:40:12 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
2a06:a005:d0::/44 maxlen: 48
2a06:a005:9b0::/44 maxlen: 48
2a06:a005:d80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:01:77:8a:da:f1:f9:39:16:0e:65:68:1c:08:7b:5f:3d:06:3f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 14 20:35:12 2024 GMT
Not After : Nov 13 20:40:12 2025 GMT
Subject: CN=EE0FEC54E130623F42CC87B3DD651B4D712383FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d8:03:8d:e7:9b:35:00:c4:30:a0:e8:7e:f1:
0e:de:c1:0b:08:02:45:49:3b:52:b9:b2:b8:d4:71:
60:47:4e:1f:cc:e7:79:47:5c:b8:16:41:4f:6d:57:
71:21:ad:e6:a5:ea:39:54:0f:71:c6:ae:2e:ad:cf:
f1:d4:6d:98:38:30:d4:ca:ba:a8:f7:b0:08:87:83:
55:58:34:36:2e:ee:7f:a6:71:29:37:e1:4d:c7:c4:
53:00:35:ae:1b:98:f3:33:c8:e3:53:ea:05:58:fb:
fe:87:2f:03:4a:a1:5d:33:7a:15:42:b7:82:cf:0e:
19:46:fa:72:cb:6b:2e:7b:19:59:b5:d7:b2:b2:c2:
c3:4e:f9:20:8e:20:1d:39:d9:5b:2d:4b:91:0a:16:
87:c5:94:fa:ac:17:60:67:07:94:b3:23:1c:33:10:
a1:c5:70:2b:3f:30:a5:c8:d2:26:57:7c:b1:b6:ae:
aa:84:24:78:dc:da:0f:a3:9e:ef:7e:0a:65:47:b9:
c3:5f:74:61:f1:68:30:46:76:d3:46:3b:81:30:12:
90:01:b0:df:0f:88:f2:05:6d:54:db:23:4e:34:4d:
8e:9b:7b:ee:65:12:65:a0:ba:a3:14:ba:fc:af:d0:
30:4b:14:69:50:26:4f:d8:9b:31:21:e5:c8:43:a2:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:EC:54:E1:30:62:3F:42:CC:87:B3:DD:65:1B:4D:71:23:83:FF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::-2a06:a005:df:ffff:ffff:ffff:ffff:ffff
2a06:a005:9b0::/44
2a06:a005:d80::/44
Signature Algorithm: sha256WithRSAEncryption
76:2d:03:e5:e6:d3:1b:de:72:39:18:a5:26:78:be:f4:d4:a1:
2b:a0:bb:b6:04:c9:14:e7:ab:2e:fe:47:e4:38:f6:f7:41:48:
6d:0d:a3:7c:e9:55:00:56:a7:30:ed:ae:ce:0e:a8:6c:ad:69:
fa:20:45:41:8d:d1:14:87:27:59:e9:80:5b:81:33:0f:3c:e8:
86:1e:43:e1:a8:bf:c2:c2:17:9a:bc:4e:fa:cc:ff:a5:42:35:
61:c4:43:77:64:8c:de:f0:27:b1:de:99:78:8b:e3:44:d2:46:
54:ce:ac:df:a7:96:50:b5:df:5e:15:43:c1:0e:d9:3a:a0:5f:
5d:38:a8:d9:2d:19:69:6e:af:ea:c3:6a:52:03:42:67:8d:bc:
4d:51:fd:74:ae:6c:8f:cd:37:0e:ea:40:32:32:42:16:03:d0:
c5:e2:b3:b4:32:66:09:05:0f:b6:16:b5:57:c7:6a:42:c1:22:
bd:f0:1d:de:0d:d4:1f:73:a8:ed:9c:34:42:29:e3:4d:4b:68:
92:5c:6e:99:bf:32:5b:b0:d2:25:79:fa:13:8d:3d:5e:1c:2d:
52:91:e1:20:b7:9c:61:ce:54:92:24:3c:61:2d:b2:5a:04:66:
2a:b9:7d:aa:f6:7c:6c:a9:13:a0:1e:6e:ab:bc:35:1b:7c:38:
7a:5c:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:36 2024 by rpki-client on console-fra.rpki-client.org