Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207941.roa
File: AS207941.roa (raw, json)
Hash identifier: h9SQ+1qh6jdBsVxKnpgx8Knvf7Ym9AgpVvu0U1w8/mU=
Subject key identifier: 05:16:68:12:1E:99:3C:25:07:59:28:B5:0F:98:A3:1A:2D:1D:F0:B9
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 55A3F2127923656C2213430C022245E622E825E1
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207941.roa
Signing time: Thu 14 Dec 2023 19:44:21 +0000
ROA not before: Thu 14 Dec 2023 19:39:21 +0000
ROA not after: Thu 12 Dec 2024 19:44:21 +0000
asID: 207941
IP address blocks: 2a06:a005:b0::/44 maxlen: 48
2a06:a005:c0::/44 maxlen: 48
2a06:a005:d0::/44 maxlen: 48
2a06:a005:9b0::/44 maxlen: 48
2a06:a005:d80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a3:f2:12:79:23:65:6c:22:13:43:0c:02:22:45:e6:22:e8:25:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 14 19:39:21 2023 GMT
Not After : Dec 12 19:44:21 2024 GMT
Subject: CN=051668121E993C25075928B50F98A31A2D1DF0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:a1:51:44:5e:2e:12:90:41:7c:69:c9:3b:
c0:23:e6:37:28:f1:28:e4:99:62:5c:19:e5:9b:11:
8c:4a:6f:92:ac:3d:6d:bc:47:a9:cd:6d:da:6f:5d:
cb:11:4d:37:99:1e:f7:da:42:ef:4b:5c:d3:ce:60:
de:9c:50:76:93:88:47:0d:b5:7f:af:87:f3:91:99:
28:3f:55:6c:0e:1b:c0:05:5a:d8:12:ed:4c:41:33:
fc:53:3d:13:04:7d:f8:9b:be:66:87:f5:85:63:33:
52:18:16:88:03:7c:88:0e:d7:f5:66:65:06:12:b4:
fc:67:4c:2a:a2:59:7b:80:cf:da:07:40:a5:f7:9f:
55:f0:95:b8:73:df:f3:bb:97:b2:ee:65:98:47:14:
c7:14:4b:94:3f:05:f6:f6:06:cf:0c:dc:1c:5c:38:
ae:cf:7b:dd:2e:1b:cb:8c:02:0b:4f:3f:ff:1b:fe:
cb:61:0f:f8:84:91:0c:6f:d3:6b:cf:e6:35:34:11:
19:f5:34:08:e3:a3:6e:fc:08:74:e4:cd:60:88:2f:
3a:34:c2:10:01:08:28:cc:66:2f:a6:c0:3b:ce:b8:
8b:75:0e:6c:6f:b0:07:db:22:95:a8:59:8b:7b:91:
d3:de:f6:72:bb:e0:86:7d:7d:45:29:b0:b0:b0:77:
a9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:68:12:1E:99:3C:25:07:59:28:B5:0F:98:A3:1A:2D:1D:F0:B9
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207941.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b0::-2a06:a005:df:ffff:ffff:ffff:ffff:ffff
2a06:a005:9b0::/44
2a06:a005:d80::/44
Signature Algorithm: sha256WithRSAEncryption
75:59:ca:7e:d8:cf:3f:4f:22:13:bf:62:8e:e4:a3:33:2e:43:
34:fd:a0:2b:de:0e:3e:34:7f:f5:23:3e:4e:1b:d0:5a:21:0f:
ff:37:7a:9c:7e:b7:b0:51:64:1b:b0:0e:90:3e:d9:8a:94:d0:
6b:d0:d8:c3:f1:15:b4:62:a4:dc:19:00:84:52:57:e9:31:04:
8e:2d:cd:af:a7:ed:27:a8:1d:58:45:fa:f6:8a:b4:4f:31:e4:
13:8e:7b:d5:ed:22:a7:3a:1c:d1:50:fe:c3:cb:53:17:a2:8d:
6f:59:11:8f:5f:0a:69:4d:00:a4:66:b4:84:10:1a:ee:f3:58:
59:0a:63:25:62:01:8b:d9:b3:8c:bb:19:8e:e0:e1:f0:e0:2d:
b1:65:05:e4:4b:93:6e:45:63:c2:09:ec:ea:16:a9:b6:57:63:
0a:b6:f6:27:cb:46:c6:14:2d:c5:95:27:58:a4:13:4c:ea:b9:
c4:0c:24:da:5b:76:14:d4:42:89:d8:e8:bc:55:7f:60:26:4b:
fb:9e:f6:9b:05:1f:95:f7:3d:d2:d9:40:34:5e:bd:c0:0e:08:
27:a0:c9:99:4f:f9:23:c7:bd:05:cd:83:19:ef:35:5d:0e:d8:
71:05:11:0f:21:97:2a:1f:cb:e6:d7:87:89:ff:16:e8:8e:23:
b4:47:0c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org