Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS264660.roa
File: AS264660.roa (raw, json)
Hash identifier: sILBAqYgGltqXMB6sBiPzwr3J7YGIonoASyFKC4VJkQ=
Subject key identifier: 8C:0B:14:13:97:1C:46:94:7A:40:C4:70:AD:32:BB:69:8C:3C:5B:BE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1167CE404AB11CBFBBAFE4C0A660DA71BA5DECE0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS264660.roa
Signing time: Sat 23 Dec 2023 10:44:21 +0000
ROA not before: Sat 23 Dec 2023 10:39:21 +0000
ROA not after: Sat 21 Dec 2024 10:44:21 +0000
asID: 264660
IP address blocks: 2a06:a005:1086::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:67:ce:40:4a:b1:1c:bf:bb:af:e4:c0:a6:60:da:71:ba:5d:ec:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 23 10:39:21 2023 GMT
Not After : Dec 21 10:44:21 2024 GMT
Subject: CN=8C0B1413971C46947A40C470AD32BB698C3C5BBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:56:68:1d:39:38:8d:f4:52:ff:7f:00:ca:fe:
e6:e2:ae:49:a2:53:1f:46:01:81:4a:c9:de:4e:11:
2a:42:9c:87:57:9d:d2:19:4a:c4:e3:60:34:85:3f:
92:b8:48:bd:72:c0:db:9b:b1:38:a2:e8:e1:96:b2:
41:14:3e:a8:c3:39:f8:62:a5:d6:71:6e:f6:2b:94:
a9:a2:27:28:cc:6d:d7:31:21:ca:14:39:b1:0c:32:
13:90:cb:26:6b:98:72:04:3e:e7:3c:fe:a5:df:a4:
c3:b2:d0:ff:cc:f8:01:85:8b:82:1b:f3:07:31:39:
54:56:44:af:99:39:74:d1:1e:4c:d6:ee:4c:88:69:
e2:05:ea:74:d5:67:52:87:4c:3f:56:e5:e6:53:dc:
b2:e3:59:6b:61:95:9a:58:00:65:7b:7e:f0:97:24:
4f:fc:d1:60:10:78:2e:f9:7a:7f:fb:39:f9:37:81:
e5:3b:1e:1e:70:26:84:63:27:f0:2b:e4:6c:9f:a0:
c7:5b:b2:7e:fb:49:5f:97:98:71:fd:52:91:2f:4c:
73:3a:f5:0b:cb:7f:de:8e:dd:6e:e0:ec:0e:0c:07:
e1:22:a2:52:92:05:07:53:ad:08:0a:a6:d6:ae:bb:
c9:57:d9:59:a7:78:5d:d7:fd:e8:cf:cd:ec:c5:4d:
4f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0B:14:13:97:1C:46:94:7A:40:C4:70:AD:32:BB:69:8C:3C:5B:BE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS264660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1086::/48
Signature Algorithm: sha256WithRSAEncryption
08:e8:ad:c2:40:68:ca:14:37:a1:2f:6f:ab:34:32:92:e2:f0:
22:5b:02:3f:23:96:ba:50:87:4c:c1:d8:98:71:87:b7:32:81:
8a:2c:78:32:3c:b7:43:59:ca:5d:d7:97:49:d6:a2:25:0d:11:
18:78:51:50:cc:92:d1:b8:d8:43:d6:20:20:12:35:05:a0:41:
ec:22:88:89:14:d1:86:ea:93:b6:92:d2:b9:79:aa:32:4b:91:
11:ed:50:44:16:7f:40:db:1e:96:f0:9b:38:ce:ee:6a:76:df:
95:ee:c8:b5:dd:6f:b8:4c:d0:69:1d:9b:53:72:c3:ca:de:60:
7f:f1:04:7a:9d:19:71:55:d3:ff:13:27:2f:c7:09:da:ff:48:
3a:3f:bc:9a:93:53:d5:d0:34:1c:73:cf:73:11:a6:69:3f:29:
fd:fb:8c:14:45:f1:c1:fa:51:23:2a:8f:29:ac:c8:51:56:83:
d4:41:1e:b1:ba:1b:be:0c:ae:17:87:8b:91:8a:72:c0:de:5c:
9f:f2:60:c8:04:9f:01:b5:de:a2:c4:f9:62:81:35:ac:60:c4:
7d:98:c6:dd:e6:a0:93:27:df:f9:e6:b7:52:99:14:af:38:0d:
12:9e:33:f0:0e:a0:5b:19:74:e4:6d:ab:a8:04:40:55:3d:3a:
b8:7f:7e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org