Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38041.roa
File: AS38041.roa (raw, json)
Hash identifier: EMgyPM0yeiCtgB8zZFAw2mmeWs2ZtaHkcrN6EuT+Y9Y=
Subject key identifier: EE:50:BE:59:46:83:1A:F1:E0:32:7D:BC:27:A8:40:4D:6C:AE:0B:DB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 56319D1746BD6F87F1C6DF37214D1923453017B7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38041.roa
Signing time: Tue 05 Nov 2024 03:40:01 +0000
ROA not before: Tue 05 Nov 2024 03:35:01 +0000
ROA not after: Tue 04 Nov 2025 03:40:01 +0000
asID: 38041
IP address blocks: 2a06:a005:127c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:31:9d:17:46:bd:6f:87:f1:c6:df:37:21:4d:19:23:45:30:17:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:01 2024 GMT
Not After : Nov 4 03:40:01 2025 GMT
Subject: CN=EE50BE5946831AF1E0327DBC27A8404D6CAE0BDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:3f:27:ed:e3:e1:60:01:aa:2e:54:a9:ba:
52:fe:98:e3:e5:84:46:7c:39:f0:01:cb:95:a1:19:
1b:4d:85:d0:6c:c9:f3:ac:f4:a2:80:66:36:c6:b6:
3f:79:70:a8:1a:67:12:a4:03:2b:ac:c6:c0:33:9c:
77:72:b7:b4:6b:78:6b:b4:02:60:1b:a6:a1:6b:47:
e0:73:ef:bf:f4:26:f7:11:0d:67:b9:88:c4:42:15:
4c:27:97:02:9b:f7:0c:45:07:d1:ea:65:b1:7e:77:
59:5a:66:2e:0c:73:3f:86:7d:42:9f:4e:6c:1e:cc:
52:49:10:87:02:c5:f0:a6:89:fa:a3:94:5d:96:be:
24:46:da:c2:ed:ec:d2:bb:4a:da:0a:d4:52:26:e2:
11:cd:14:59:55:6f:8e:c9:68:c6:b8:9b:e8:4e:06:
1a:66:e3:f0:f3:16:8f:34:8c:74:38:25:84:f4:98:
ff:31:9b:fd:a0:4b:bb:5b:20:34:c4:4d:91:76:9f:
a7:07:83:8e:14:33:72:b7:15:96:27:da:84:c7:4f:
5b:7b:ad:8a:0c:1f:27:33:d2:64:e7:ca:eb:33:2d:
68:0d:ec:24:cd:cd:e2:56:45:3f:64:60:1d:3d:c0:
6f:50:c4:67:09:47:34:3e:37:c2:42:44:5c:d3:bc:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:50:BE:59:46:83:1A:F1:E0:32:7D:BC:27:A8:40:4D:6C:AE:0B:DB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:127c::/46
Signature Algorithm: sha256WithRSAEncryption
c7:b9:b5:6b:51:fa:bd:fe:98:05:ee:99:c2:e3:4d:de:81:e5:
82:50:35:e9:b4:f2:d1:c7:13:de:14:f0:42:1c:7f:26:20:5e:
aa:1b:2b:45:b0:04:a3:49:71:0b:a1:07:b5:0d:57:11:2f:6f:
6b:36:73:59:ea:2a:00:45:35:9d:ad:3b:f9:dd:b3:f5:f0:c8:
df:f5:e3:2a:9e:dd:99:d7:28:0a:cb:0e:de:4b:ef:1a:c4:22:
de:06:9d:7b:dd:da:b1:90:9a:1c:03:8d:5d:e8:a7:ac:1a:02:
ea:67:8d:bf:42:b2:25:96:84:f3:73:29:38:4e:d3:d0:5d:6e:
18:9a:4c:36:a5:c7:23:d3:4b:a0:84:68:da:54:17:fc:79:fe:
be:d4:a1:21:f7:66:5f:6c:4d:23:4f:16:f9:d9:bb:50:ed:77:
6f:3f:a4:14:c5:f8:f3:38:77:b9:34:1f:f4:ae:92:c8:44:b9:
f9:ff:89:e0:46:74:6b:b4:dd:d3:21:bd:44:53:3d:65:07:e2:
86:43:da:c1:94:77:6d:fb:1b:47:27:cf:81:23:f8:33:61:ed:
11:30:bf:c6:9c:fa:a6:61:bc:ed:8d:a8:3d:a5:60:9b:c1:85:
2c:a9:66:0d:7b:62:dd:19:1a:1f:d7:47:35:f2:1f:57:45:e6:
7d:5f:e6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:56 2024 by rpki-client on console-ams.rpki-client.org