Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208753.roa
File: AS208753.roa (raw, json)
Hash identifier: oEXC7dZfY4xEsLvC/cqq6ZBwaxB6FUQlJE92Koj3An0=
Subject key identifier: 23:E0:AC:B4:1E:44:EF:43:D3:EA:FA:AF:05:02:12:97:71:A2:10:3E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 713D9B5753341BB1A5C39EE2FD0E99FD3C9B10D7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208753.roa
Signing time: Tue 05 Nov 2024 03:40:05 +0000
ROA not before: Tue 05 Nov 2024 03:35:05 +0000
ROA not after: Tue 04 Nov 2025 03:40:05 +0000
asID: 208753
IP address blocks: 2a06:a005:c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:3d:9b:57:53:34:1b:b1:a5:c3:9e:e2:fd:0e:99:fd:3c:9b:10:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:05 2024 GMT
Not After : Nov 4 03:40:05 2025 GMT
Subject: CN=23E0ACB41E44EF43D3EAFAAF0502129771A2103E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:7d:c3:81:59:1c:e3:ed:fa:a9:5f:94:fb:
ed:9b:30:8c:34:20:13:51:43:30:74:b6:bf:f6:06:
14:ee:a8:58:27:61:ad:86:b8:10:20:92:7c:fc:ba:
9b:b3:57:3e:51:a2:7e:05:5d:f2:89:ef:15:fd:4e:
e1:5b:01:91:73:ed:62:fb:59:bc:01:0c:69:a2:42:
21:ec:13:30:7d:ea:42:94:a4:15:a3:ea:16:50:46:
a3:33:82:ff:cc:b5:df:01:a8:ac:08:7d:c5:65:df:
a7:05:f4:84:83:b2:f4:af:e3:f7:98:bc:28:97:4f:
78:9b:c8:6d:cc:b4:a4:b4:c7:0e:75:1b:ac:fd:83:
3d:34:95:5f:15:5d:25:d0:3c:6e:3e:ae:68:e1:8e:
37:70:af:28:d4:62:6f:a5:fa:35:31:82:da:29:e8:
be:02:1b:cd:48:38:8c:8f:ff:5b:e9:6d:fa:de:c3:
e7:8f:9f:41:eb:33:08:56:8e:cc:f8:0f:e4:b3:c6:
10:30:48:84:ff:19:4f:42:13:a3:8a:8f:e2:de:39:
12:b1:55:3f:e0:e2:e1:71:00:f3:9c:c8:43:dd:31:
c7:c8:9a:52:a5:8a:64:6b:a7:98:37:49:24:1f:50:
16:14:62:48:89:2d:8c:25:88:8f:15:54:f2:6b:68:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:AC:B4:1E:44:EF:43:D3:EA:FA:AF:05:02:12:97:71:A2:10:3E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208753.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:c::/46
Signature Algorithm: sha256WithRSAEncryption
96:57:8b:bb:95:b7:7b:17:0a:dd:b1:8a:99:43:db:b0:78:f0:
d7:ed:e8:4e:20:7f:c9:01:c8:32:83:b7:bb:87:2b:e9:ef:cc:
2e:e2:c6:35:d0:6a:2a:89:01:fc:7d:21:d7:cb:97:c3:b1:e4:
f7:29:05:c5:e2:2e:f7:34:38:47:67:ee:68:9c:84:f0:e0:fb:
e5:dc:9c:bd:67:f9:c7:ed:7c:e5:81:85:74:e7:2a:dc:b8:0b:
54:9d:d5:4f:10:f1:79:cc:54:b1:86:c6:f9:2f:72:a1:74:b9:
15:ff:54:80:c6:47:76:ce:6a:c5:81:6f:05:c3:71:af:dd:6c:
dd:6a:cb:82:fb:86:77:94:13:d3:9a:c6:8c:10:74:36:59:f5:
f6:0b:2f:51:76:af:e4:d6:6c:06:85:bb:a6:ea:bf:93:69:c3:
42:ed:5f:97:64:ad:02:ea:56:0f:76:c0:53:d9:40:23:ce:8d:
d9:4d:ad:e8:68:e4:51:f6:42:a7:fc:6f:e1:93:ae:10:05:ee:
36:e5:d9:6e:17:95:f7:12:30:84:0b:88:9a:1a:da:12:fe:81:
22:bd:fd:fd:c8:ec:2f:46:6d:bc:de:e6:40:58:54:b7:32:6a:
7c:3a:ea:7e:4a:9a:4d:c1:cf:39:db:31:1e:8b:29:6b:b0:8f:
c8:1f:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:11 2024 by rpki-client on console-ams.rpki-client.org