Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38846.roa
File: AS38846.roa (raw, json)
Hash identifier: W5pMrxzULTPvjUGJZJc6MwkTPuaKfGcdHaWkLE34/UU=
Subject key identifier: 2C:39:0B:60:04:AA:C6:4B:AB:6F:26:82:87:64:35:11:14:4C:13:80
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5FC5990D30D425FA4A3681FD067D247EBF6598B2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38846.roa
Signing time: Tue 05 Dec 2023 02:44:13 +0000
ROA not before: Tue 05 Dec 2023 02:39:13 +0000
ROA not after: Tue 03 Dec 2024 02:44:13 +0000
asID: 38846
IP address blocks: 2a06:a005:1e00::/44 maxlen: 48
2a06:a005:1e10::/44 maxlen: 48
2a06:a005:21b0::/44 maxlen: 48
2a06:a005:21f0::/44 maxlen: 48
2a06:a005:2890::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:c5:99:0d:30:d4:25:fa:4a:36:81:fd:06:7d:24:7e:bf:65:98:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:13 2023 GMT
Not After : Dec 3 02:44:13 2024 GMT
Subject: CN=2C390B6004AAC64BAB6F268287643511144C1380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:80:00:be:94:c0:2d:a6:c6:e3:45:66:18:
54:23:d3:b3:d1:5b:73:eb:a1:c5:0c:1a:b2:9e:56:
d3:32:1b:d5:fb:9b:ee:7d:3c:82:fe:20:5c:19:0b:
8c:b0:d2:c9:89:d0:1d:62:65:ca:2d:3f:07:36:ff:
d5:5c:01:62:55:8b:70:41:75:f3:c6:0b:c8:32:fa:
a3:7e:79:f2:3c:84:e7:cf:27:ec:66:f1:e0:e7:f5:
97:3a:da:59:5b:72:bf:0e:c8:f2:a6:53:06:28:b6:
03:f3:19:b0:f7:1d:19:05:85:63:b4:b0:61:53:db:
38:11:78:57:25:d3:73:8c:da:a1:07:5e:7c:e1:18:
42:6b:c5:62:f8:a6:66:81:5b:14:83:81:6b:b2:da:
68:aa:35:89:b6:cf:3d:59:6b:ed:e0:2b:65:51:a6:
aa:5f:ef:ca:67:7c:f0:27:cf:30:60:29:7d:e0:62:
e1:1a:a5:e9:61:53:c4:89:26:4c:73:98:97:90:b0:
de:bc:f9:04:12:4d:d1:7e:79:5e:fe:ed:bf:d9:03:
e8:c0:f4:c6:23:f3:62:87:74:9f:fe:a1:cb:6f:b3:
32:80:d2:a3:44:87:e0:58:14:a4:53:40:44:5d:0d:
d4:7c:d4:34:24:1e:ae:50:d3:a5:85:a6:27:ef:7f:
ec:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:39:0B:60:04:AA:C6:4B:AB:6F:26:82:87:64:35:11:14:4C:13:80
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS38846.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e00::/43
2a06:a005:21b0::/44
2a06:a005:21f0::/44
2a06:a005:2890::/44
Signature Algorithm: sha256WithRSAEncryption
3a:3a:fd:13:6e:70:f6:d0:da:f0:3f:78:2b:b2:72:a5:85:1d:
44:87:a6:d4:06:82:0f:28:cc:80:16:4f:93:e4:e3:06:7a:bf:
6f:51:98:14:30:0a:9d:fb:ed:e8:bb:ab:f8:7a:47:11:90:f9:
53:64:62:7c:8d:da:6e:ae:6f:05:5d:af:87:e6:94:e3:e7:47:
c2:57:b2:d2:00:76:8f:36:3e:6a:d6:28:d1:b3:20:0f:7a:d1:
20:0f:56:8b:9f:b6:6c:3c:c5:49:ff:78:91:ce:3b:42:54:45:
27:91:56:af:8a:ea:89:f1:e5:15:cf:6e:5e:8b:8c:36:d9:16:
14:27:f2:04:89:4f:15:ce:fa:e2:31:cf:a4:d8:a9:12:1f:5e:
73:87:c4:fe:ba:0c:ac:ba:b2:3b:61:aa:31:cf:79:ff:ce:05:
d5:d3:fb:3a:ca:8e:3c:15:9e:13:3b:05:56:d3:65:ac:de:da:
b1:51:b2:3e:8e:62:f5:bb:9a:0f:6e:34:0a:ad:ee:81:9d:bc:
d2:f8:67:bb:1e:77:cb:2d:03:2e:65:d2:1a:db:11:29:44:80:
af:6b:8b:8e:42:dd:f2:02:bd:d1:c0:ae:5b:72:ce:08:2b:5c:
84:cb:ed:7f:67:9e:25:7b:d9:f4:a8:79:a0:ac:54:d7:47:47:
24:7c:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org