Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208768.roa
File: AS208768.roa (raw, json)
Hash identifier: Ux0e+oPOB51pRXCQiLpwJw/6kBjGtOQSBtnaqOYS3ug=
Subject key identifier: 00:77:70:38:D9:6C:7F:5E:BC:7F:05:64:3E:FE:E0:7F:12:4A:50:40
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 73FE5F62762FF531739DE4BD2166CC91BEF5F7B9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208768.roa
Signing time: Fri 26 Jan 2024 20:44:24 +0000
ROA not before: Fri 26 Jan 2024 20:39:24 +0000
ROA not after: Fri 24 Jan 2025 20:44:24 +0000
asID: 208768
IP address blocks: 2a06:a005:1271::/48 maxlen: 48
2a06:a005:2ca0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:fe:5f:62:76:2f:f5:31:73:9d:e4:bd:21:66:cc:91:be:f5:f7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 26 20:39:24 2024 GMT
Not After : Jan 24 20:44:24 2025 GMT
Subject: CN=00777038D96C7F5EBC7F05643EFEE07F124A5040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b0:0b:75:56:49:7a:65:b1:ce:8c:91:f3:40:
ba:95:4b:3e:ba:4e:6b:f4:9a:39:61:6e:0a:d2:f5:
6d:0c:63:9b:ca:b5:d9:f4:c3:9a:ba:49:1e:47:ee:
1d:e9:fc:a1:7e:30:0f:7e:d9:c1:ee:7b:d4:83:4a:
d6:d8:f4:3c:c8:13:6a:8a:19:40:eb:94:cd:26:e5:
62:71:8f:34:1c:71:f9:72:31:5a:86:a0:da:4c:17:
0f:cf:cf:b1:55:9b:ca:aa:60:2f:44:f3:75:44:d0:
7c:ec:fe:fd:91:7f:25:59:ac:bf:bb:f0:3d:ff:34:
a6:29:b3:4f:f4:78:65:da:c7:a4:ce:fe:35:75:d6:
d0:6c:1f:f5:a5:bd:2b:32:2a:c8:69:63:59:79:24:
49:55:8c:14:3f:3c:c2:2c:13:87:d5:3f:e1:2f:9c:
e3:49:30:71:70:93:3e:67:aa:e8:10:7a:ed:70:b9:
6d:b3:58:96:d6:ea:9f:4a:f4:db:76:7c:1c:a8:7d:
70:42:2c:67:a5:f3:76:e6:f0:b0:e3:06:c0:66:8e:
ae:25:35:4a:37:7d:e1:86:d4:26:f8:ed:6b:04:78:
f5:78:ed:3a:e5:f6:5f:a4:6f:55:be:1c:25:b3:92:
07:b4:be:b5:19:58:ee:2a:a1:4e:5f:41:8e:9a:32:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:77:70:38:D9:6C:7F:5E:BC:7F:05:64:3E:FE:E0:7F:12:4A:50:40
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1271::/48
2a06:a005:2ca0::/44
Signature Algorithm: sha256WithRSAEncryption
b4:e6:2b:b1:ce:de:13:e3:a2:a4:f8:b4:54:b7:f5:07:63:88:
7b:62:d9:59:00:59:58:85:ff:7e:8b:67:14:7e:32:03:79:db:
f7:fb:c4:76:16:18:a9:4b:50:69:49:f6:95:50:d9:5c:7c:a9:
1b:fe:91:3a:cf:9d:85:47:0f:ec:da:e9:92:74:97:98:12:13:
27:b3:21:90:d8:28:c3:44:31:ae:86:e9:70:b7:46:cb:59:a0:
cb:ef:6f:8c:7c:b4:57:89:ec:05:01:af:a2:85:18:2b:b3:3d:
2a:46:af:f7:9a:cd:ca:0e:5d:35:5d:79:f4:88:4e:91:25:bc:
26:8a:1f:74:10:7f:e2:b9:06:b8:bb:4a:0a:4c:56:df:45:be:
40:56:1d:f9:bd:2f:48:29:6d:30:30:ad:f9:88:52:15:0a:d0:
fc:34:87:12:34:8c:c2:47:17:82:f4:67:76:0a:64:9a:52:eb:
ee:af:09:c6:98:57:aa:f7:09:7a:f8:2c:f3:f5:43:1c:3b:7a:
a3:3f:ae:06:1a:4e:f9:30:8c:cb:42:0d:27:fa:41:bd:fd:95:
cb:32:96:0c:fd:ba:ea:ed:17:5a:f1:3b:ae:08:c0:e7:cb:3f:
07:85:9a:79:f5:4b:b0:a5:19:ad:fc:7a:61:6f:cb:96:84:32:
44:cc:86:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org