Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38846.roa
File: AS38846.roa (raw, json)
Hash identifier: sU3VXm2jwSz9y5cyXbE0mh3xaRkolA/4VHGHRQV9ixQ=
Subject key identifier: CC:2E:0A:FF:3E:4F:47:A7:C5:6D:C5:0D:66:2B:17:13:71:6F:79:7E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 51A1B6D3E3A9F41E5DFA54D6D4A9EACD21CA1826
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38846.roa
Signing time: Tue 05 Nov 2024 03:40:06 +0000
ROA not before: Tue 05 Nov 2024 03:35:06 +0000
ROA not after: Tue 04 Nov 2025 03:40:06 +0000
asID: 38846
IP address blocks: 2a06:a005:1e00::/44 maxlen: 48
2a06:a005:1e10::/44 maxlen: 48
2a06:a005:21b0::/44 maxlen: 48
2a06:a005:21f0::/44 maxlen: 48
2a06:a005:2890::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:a1:b6:d3:e3:a9:f4:1e:5d:fa:54:d6:d4:a9:ea:cd:21:ca:18:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:06 2024 GMT
Not After : Nov 4 03:40:06 2025 GMT
Subject: CN=CC2E0AFF3E4F47A7C56DC50D662B1713716F797E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:43:54:2e:e6:ea:93:3f:93:38:00:2b:57:ef:
f9:ea:69:88:5f:69:d5:17:cf:25:7d:56:d3:64:13:
5a:e3:2b:70:60:3f:f4:20:7d:e9:a7:c3:f0:bb:db:
da:61:2a:36:ee:6f:bd:20:89:7b:8b:c4:18:43:5a:
48:5b:f1:07:e3:87:3f:2b:a9:1f:45:ca:2d:9f:e6:
89:f3:96:a9:de:1e:cb:1e:55:1b:e5:37:27:6e:0f:
30:50:04:0d:12:2c:ae:38:b9:a9:3b:b7:a8:b6:a4:
9d:67:fb:4b:3e:17:38:e9:30:04:44:d3:27:ac:c1:
af:68:b4:75:1c:14:31:60:bf:50:64:ec:2f:e0:48:
4d:c0:3a:7e:f8:d0:2b:84:47:71:af:bc:a0:ce:4d:
dd:4c:5e:b1:19:56:89:ea:33:c5:53:a8:74:56:40:
7f:78:bd:5f:9c:02:94:f2:cf:2c:53:70:c4:35:93:
b2:4f:73:30:b7:3a:1f:50:44:81:2e:d7:ef:76:bb:
72:3b:f0:d0:22:48:a8:90:c7:93:64:4b:0e:04:e4:
cf:8c:6a:81:7e:52:37:1b:85:5b:d2:37:5c:27:19:
14:5e:2a:5b:b5:08:74:8f:b5:55:0c:1e:99:ed:db:
98:92:3b:ac:c8:6e:b5:5a:5f:94:75:fb:29:bb:ca:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:0A:FF:3E:4F:47:A7:C5:6D:C5:0D:66:2B:17:13:71:6F:79:7E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38846.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e00::/43
2a06:a005:21b0::/44
2a06:a005:21f0::/44
2a06:a005:2890::/44
Signature Algorithm: sha256WithRSAEncryption
ca:8c:bb:75:0d:00:98:e5:53:fd:38:db:25:61:56:2f:00:76:
6c:d8:f8:50:3f:4f:57:f2:36:7f:d5:cf:2f:87:26:0e:2d:5e:
d4:c7:be:c2:a9:c0:ac:80:a8:ae:d4:61:f5:7d:63:22:c5:ec:
85:bc:3f:48:81:d8:19:3d:d6:76:ad:32:bd:d2:1c:d6:26:93:
f6:b7:2b:18:3a:70:7a:8d:85:e9:f6:f9:c1:18:d4:1f:29:0f:
2a:ae:ac:1e:c1:81:06:83:a1:dd:49:06:c8:e8:20:87:31:39:
16:f4:08:c5:de:b8:b6:15:49:de:4c:cd:45:a0:34:49:27:36:
9f:18:b6:e6:94:fd:0f:89:c6:01:f5:bc:09:24:03:f3:fb:95:
3f:a1:cc:00:66:5d:16:3d:32:70:ad:ce:a5:af:bd:94:01:54:
8e:32:1b:2b:c8:80:88:df:3c:f9:e7:d5:62:de:ee:92:df:f8:
c3:11:51:db:31:9c:3c:36:60:79:57:e6:06:c2:b5:84:fe:dc:
9a:af:ba:e0:17:d6:ee:c0:47:93:06:9d:d8:5f:74:ea:56:f4:
81:97:e5:e1:15:58:1d:b7:03:5b:89:1f:7e:0d:90:82:ca:c6:
bb:92:06:b0:19:3f:66:39:d4:d2:1e:18:80:06:af:e5:66:0a:
a6:03:c4:51
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUUaG20+Op9B5d+lTW1KnqzSHKGCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDZaFw0yNTExMDQwMzQwMDZaMDMxMTAvBgNV
BAMTKENDMkUwQUZGM0U0RjQ3QTdDNTZEQzUwRDY2MkIxNzEzNzE2Rjc5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Q1Qu5uqTP5M4ACtX7/nqaYhf
adUXzyV9VtNkE1rjK3BgP/Qgfemnw/C729phKjbub70giXuLxBhDWkhb8Qfjhz8r
qR9Fyi2f5onzlqneHsseVRvlNyduDzBQBA0SLK44uak7t6i2pJ1n+0s+FzjpMARE
0yeswa9otHUcFDFgv1Bk7C/gSE3AOn740CuER3GvvKDOTd1MXrEZVonqM8VTqHRW
QH94vV+cApTyzyxTcMQ1k7JPczC3Oh9QRIEu1+92u3I78NAiSKiQx5NkSw4E5M+M
aoF+UjcbhVvSN1wnGRReKlu1CHSPtVUMHpnt25iSO6zIbrVaX5R1+ym7ynvBAgMB
AAGjggIMMIICCDAdBgNVHQ4EFgQUzC4K/z5PR6fFbcUNZisXE3FveX4wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
Mzg4NDYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcB
Af8ELjAsMCoEAgACMCQDBwUqBqAFHgADBwQqBqAFIbADBwQqBqAFIfADBwQqBqAF
KJAwDQYJKoZIhvcNAQELBQADggEBAMqMu3UNAJjlU/042yVhVi8AdmzY+FA/T1fy
Nn/Vzy+HJg4tXtTHvsKpwKyAqK7UYfV9YyLF7IW8P0iB2Bk91natMr3SHNYmk/a3
Kxg6cHqNhen2+cEY1B8pDyqurB7BgQaDod1JBsjoIIcxORb0CMXeuLYVSd5MzUWg
NEknNp8YtuaU/Q+JxgH1vAkkA/P7lT+hzABmXRY9MnCtzqWvvZQBVI4yGyvIgIjf
PPnn1WLe7pLf+MMRUdsxnDw2YHlX5gbCtYT+3JqvuuAX1u7AR5MGndhfdOpW9IGX
5eEVWB23A1uJH34NkILKxruSBrAZP2Y51NIeGIAGr+VmCqYDxFE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:56 2024 by rpki-client on console-ams.rpki-client.org