Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38041.roa
File: AS38041.roa (raw, json)
Hash identifier: eDREtJmJrdPk3HkyIbErLyzRWReO74asDRyNc+nTrng=
Subject key identifier: DE:4C:34:1A:72:22:7B:E8:05:44:6C:86:E0:44:D3:37:95:51:45:27
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6EF7ACC12C1330143D0D71AE6BFEB152C73A632E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38041.roa
Signing time: Tue 05 Dec 2023 02:44:11 +0000
ROA not before: Tue 05 Dec 2023 02:39:11 +0000
ROA not after: Tue 03 Dec 2024 02:44:11 +0000
asID: 38041
IP address blocks: 2a06:a005:127c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f7:ac:c1:2c:13:30:14:3d:0d:71:ae:6b:fe:b1:52:c7:3a:63:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:11 2023 GMT
Not After : Dec 3 02:44:11 2024 GMT
Subject: CN=DE4C341A72227BE805446C86E044D33795514527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:ae:03:03:87:69:f9:21:e7:88:f1:75:26:
de:be:70:84:a4:d5:4d:15:42:8b:86:12:5a:fa:75:
11:66:9e:9d:6b:e7:d6:af:6e:13:a4:4a:8b:4a:63:
b4:24:22:26:df:19:dd:6f:1a:3f:3b:35:b5:7d:84:
7f:87:30:64:b9:8c:21:f0:d2:91:dd:e6:51:b6:82:
cf:c7:86:35:3f:28:2e:fe:98:f7:e2:9d:85:70:82:
da:ab:2d:11:5a:54:d6:6a:ac:31:5b:79:34:84:82:
5c:28:03:f1:44:4d:02:ab:8c:da:69:f5:c1:86:f9:
7d:90:8d:a3:e3:dd:bb:93:43:68:60:81:31:69:9f:
16:72:44:b1:45:90:4a:0e:ad:35:ea:ec:4c:61:72:
14:64:49:f5:6f:c7:58:55:55:19:a3:e2:48:e5:14:
14:32:21:98:af:d5:47:95:9b:8f:92:21:6f:26:7f:
12:ac:2d:0f:f7:77:8d:e6:bc:c1:e1:57:ba:68:31:
25:fd:c8:18:61:01:1f:03:1a:0c:6c:01:d2:3a:0e:
4b:74:a1:63:41:05:99:a2:ab:d6:56:46:ca:b0:ee:
a0:e7:f4:2b:3d:de:19:80:b9:ed:86:82:7d:21:0f:
b2:c1:74:dc:56:0f:7e:3e:70:de:d9:86:89:3c:eb:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4C:34:1A:72:22:7B:E8:05:44:6C:86:E0:44:D3:37:95:51:45:27
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:127c::/46
Signature Algorithm: sha256WithRSAEncryption
22:e2:6d:ea:af:2f:b1:f4:2f:f7:f4:2e:8b:99:e6:71:56:61:
48:c0:2c:78:5e:c4:c9:ff:97:f4:59:45:47:ed:25:f6:54:80:
81:cb:e1:65:47:ca:44:fb:78:7d:03:0e:4f:16:59:3f:11:64:
ea:35:8e:72:8c:2a:22:07:c3:63:21:6a:f3:44:4b:95:9a:a8:
5c:9c:3b:1b:50:e6:c7:41:ac:e7:38:b6:c8:df:88:ab:b0:b7:
77:bb:b1:56:95:c9:3f:fc:be:d4:12:3f:f3:fe:47:b0:fc:69:
1e:40:18:6e:49:93:ad:f6:76:f6:71:71:39:b6:2f:50:ad:83:
93:24:8f:00:9a:9b:5e:d1:84:ea:33:4e:36:e5:f8:41:a3:1c:
d1:af:83:0c:d7:ba:48:52:57:29:62:79:f3:05:08:80:c2:bf:
ec:c0:14:ea:f6:21:21:67:25:c7:7d:31:61:f9:0e:25:bf:fd:
7f:8d:76:1a:b6:c5:07:fd:56:16:4f:d3:12:6b:4f:55:8f:d5:
59:81:42:00:cc:2a:fc:06:d0:f9:b7:9e:d7:0c:e2:c7:ed:0b:
66:79:50:9a:fd:a2:10:27:5f:70:40:32:2b:bd:77:7e:f0:63:
3f:4e:7b:1a:6b:f3:23:89:a5:a2:d0:9a:02:6f:f1:5e:2a:8b:
50:af:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:57 2024 by rpki-client on console-fra.rpki-client.org