Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208753.roa
File: AS208753.roa (raw, json)
Hash identifier: 29mIWMsfZduwX4bkKUN8S0rsWVx2/FKT8dA/8MBH1yo=
Subject key identifier: 05:56:2B:50:AE:F7:92:70:48:16:5E:CF:C7:5E:6F:D7:67:19:EC:19
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 77EEC2D1C934BB065106FCD76862BD08B4A16CAA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208753.roa
Signing time: Tue 05 Dec 2023 02:44:19 +0000
ROA not before: Tue 05 Dec 2023 02:39:19 +0000
ROA not after: Tue 03 Dec 2024 02:44:19 +0000
asID: 208753
IP address blocks: 2a06:a005:c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:ee:c2:d1:c9:34:bb:06:51:06:fc:d7:68:62:bd:08:b4:a1:6c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:19 2023 GMT
Not After : Dec 3 02:44:19 2024 GMT
Subject: CN=05562B50AEF7927048165ECFC75E6FD76719EC19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:db:23:6f:1f:32:11:f8:98:6d:65:bc:29:5a:
ed:1c:d2:a9:2d:18:3c:8f:4d:de:60:f5:c3:07:27:
38:65:0f:5f:5b:ef:09:9c:df:db:15:b5:6c:7c:d1:
32:e6:bf:6d:6d:66:93:0c:ef:cb:1f:df:c6:1b:58:
72:90:ef:0c:f4:da:09:b7:73:e6:7e:6f:55:17:fb:
33:c2:ef:c1:4e:62:eb:37:e8:e2:10:4e:d6:be:25:
9d:5e:de:a8:72:8d:fb:4c:b2:ce:be:88:b7:be:94:
bf:9a:b1:66:0d:1b:39:56:c0:2c:14:fa:8b:ec:cf:
b0:5e:b0:b0:5f:fd:d5:8c:43:b9:cf:2a:3d:92:7d:
0d:46:02:5f:93:3d:39:82:2b:e0:d5:41:cf:6b:2e:
f7:85:0a:28:87:3d:5c:37:b0:60:8f:2a:d7:eb:82:
bb:d6:fa:f3:f1:ea:df:0b:b9:b2:06:c1:19:f7:84:
b4:7c:9b:2a:88:1d:a7:57:ab:08:b0:af:03:e9:52:
c7:8e:1b:73:70:3e:52:67:b2:88:6a:60:6d:f9:df:
da:74:89:6f:29:87:6e:36:4d:3f:f7:a2:b4:9f:a9:
f4:9a:9a:4c:86:90:97:42:ca:f7:ef:89:34:c2:62:
aa:3b:2f:a7:0f:cb:5f:61:5e:cf:66:1d:d9:87:9d:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:56:2B:50:AE:F7:92:70:48:16:5E:CF:C7:5E:6F:D7:67:19:EC:19
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c::/46
Signature Algorithm: sha256WithRSAEncryption
b7:c5:f3:a8:7e:d8:ce:ce:c0:ab:18:47:25:14:24:ca:d7:60:
ff:06:1b:24:37:7c:e7:90:e9:ac:3e:3c:e3:19:30:7a:aa:66:
61:e2:23:2b:c7:09:d3:24:45:c4:3f:58:e3:66:cd:37:6a:39:
33:53:39:86:b5:fb:4e:79:bd:2e:65:43:15:49:d0:91:bb:53:
17:5f:67:7d:9c:7a:ea:a0:4a:cd:7f:32:b8:1c:93:aa:0c:ab:
34:73:a5:58:7d:d2:81:d9:24:df:90:61:9d:c9:0b:6e:94:18:
b1:7c:87:af:ce:67:0c:71:e6:05:f1:6a:76:25:de:16:f8:75:
c3:05:fb:6b:c2:bd:48:40:ae:b9:72:1c:58:84:55:4f:79:b4:
07:82:7f:ea:60:f1:80:8d:1d:37:30:e9:ce:c7:6f:34:22:6b:
b8:b0:ab:03:07:dd:ff:48:9e:aa:8b:95:d9:f0:17:34:8b:d1:
fd:98:ce:20:e8:3e:47:65:c8:15:bb:41:0f:35:4b:89:34:a2:
ca:7e:aa:06:0b:9d:df:45:d9:cc:39:8f:8f:7f:a2:06:41:45:
d0:70:ef:c8:75:cd:38:9d:34:e5:2f:ee:08:1f:d6:d6:dd:07:
49:fc:c1:92:40:76:02:e9:bf:10:1a:b1:b4:4f:12:74:15:9e:
9d:65:b2:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org