Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS264660.roa
File: AS264660.roa (raw, json)
Hash identifier: /3RkxcqsR64AvlA/Kf1yP8NjP1Y5aY3GnguOXCDWflA=
Subject key identifier: D3:1D:2D:9E:EC:AE:15:B8:00:65:1D:72:51:85:6B:BB:D7:C9:5B:F4
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4ECE19D69CD56A85547AAE560EF8E4B163FD0FE1
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS264660.roa
Signing time: Sat 23 Nov 2024 11:40:12 +0000
ROA not before: Sat 23 Nov 2024 11:35:12 +0000
ROA not after: Sat 22 Nov 2025 11:40:12 +0000
asID: 264660
IP address blocks: 2a06:a005:1086::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ce:19:d6:9c:d5:6a:85:54:7a:ae:56:0e:f8:e4:b1:63:fd:0f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 23 11:35:12 2024 GMT
Not After : Nov 22 11:40:12 2025 GMT
Subject: CN=D31D2D9EECAE15B800651D7251856BBBD7C95BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:00:cd:4b:9d:7a:26:3c:64:c6:74:61:06:1c:
e8:61:a3:30:cc:91:d6:b2:dd:93:41:7d:8c:c6:1e:
c5:1f:3d:5e:33:da:6f:7d:c9:aa:08:b8:df:b0:20:
38:f8:11:bb:40:5e:a9:d3:a6:a2:11:f6:6b:b1:e0:
41:0f:d5:da:79:85:54:5b:08:4f:b6:24:21:cb:3a:
fd:7f:e3:d6:af:03:7a:36:5f:20:01:95:f9:d8:e0:
fc:7b:5a:52:13:af:61:16:bc:8e:90:55:97:07:7b:
64:21:67:3b:b7:2e:02:b1:b2:2d:a0:fd:ce:a8:a6:
b1:81:25:b8:a2:83:0e:da:a4:11:43:4c:32:4c:37:
9e:74:83:52:be:57:38:e5:2f:17:4a:66:3f:30:b3:
4a:a7:96:bb:bc:b8:76:04:c2:86:59:6c:39:6d:30:
07:f8:bc:2d:85:28:cc:61:df:a9:4b:ab:c8:d2:52:
43:1a:c6:e3:64:c3:19:be:fa:2a:24:c8:d8:8a:53:
aa:31:be:37:7d:9c:90:4b:ce:9f:e8:d0:76:0f:5c:
bd:10:90:d8:0b:e8:f3:6a:4a:20:d6:64:93:c5:d9:
9e:5b:17:33:a4:2f:6c:be:f3:ab:96:a6:cd:03:6f:
88:69:75:8c:2d:00:e0:31:04:66:70:60:a6:58:ee:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:2D:9E:EC:AE:15:B8:00:65:1D:72:51:85:6B:BB:D7:C9:5B:F4
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS264660.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1086::/48
Signature Algorithm: sha256WithRSAEncryption
88:15:d5:c4:1f:73:f5:d9:e9:85:34:8f:da:3e:c3:6d:ae:a9:
93:f2:6a:8a:c7:05:9c:a9:c1:6c:41:44:1b:2d:21:b9:5f:a5:
f2:16:ae:07:81:9a:c7:21:22:4f:1c:dc:1d:ad:e1:ac:df:ba:
89:a8:0d:23:f5:7f:21:d2:21:d9:e1:fa:49:62:a6:4b:b6:a1:
6b:63:b6:cd:f5:0f:02:e6:b0:66:e7:ce:8d:c2:46:56:8a:2b:
c4:a4:e4:cd:6d:9e:79:d7:eb:fd:dd:e3:b9:b7:f3:f0:19:52:
5a:33:b0:fb:69:67:75:de:6c:30:70:10:cb:3e:ab:5a:0d:3e:
1d:c6:39:ed:35:20:cb:63:25:4b:cc:11:96:26:cc:a3:5b:c1:
dd:24:86:f2:b2:c9:22:7d:92:48:50:72:03:77:5f:93:be:6f:
85:52:52:b3:5d:b8:aa:ba:dd:c8:4e:96:6c:48:07:24:0e:a5:
53:1c:f1:c3:8b:a0:70:e6:a9:2f:b4:0e:44:0a:84:36:13:a9:
10:9b:05:f0:43:9d:59:0f:49:34:73:b0:ff:6d:ab:dc:df:7b:
d4:0b:68:b1:5e:c7:99:ec:21:66:49:47:3e:ba:5c:85:ef:67:
96:81:de:43:46:24:10:8a:50:d7:88:9d:b5:5a:93:65:37:c1:
64:09:b5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:01:11 2024 by rpki-client on console-ams.rpki-client.org