Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44406.roa
File: AS44406.roa (raw, json)
Hash identifier: R/J9iW5O7ClP1aiSZaJDt98LZ3tt1arq5FF5W1mopIg=
Subject key identifier: 99:AF:E9:6A:84:07:DE:0D:60:F4:4D:1E:15:D3:E8:E0:A7:4B:A3:B4
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1A97508441865A155CC7F9B8BACAD9A7F5AB327C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44406.roa
Signing time: Tue 05 Dec 2023 02:44:18 +0000
ROA not before: Tue 05 Dec 2023 02:39:18 +0000
ROA not after: Tue 03 Dec 2024 02:44:18 +0000
asID: 44406
IP address blocks: 2a06:a005:670::/44 maxlen: 48
2a06:a005:740::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:1e70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:97:50:84:41:86:5a:15:5c:c7:f9:b8:ba:ca:d9:a7:f5:ab:32:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:18 2023 GMT
Not After : Dec 3 02:44:18 2024 GMT
Subject: CN=99AFE96A8407DE0D60F44D1E15D3E8E0A74BA3B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:65:c7:73:c6:e0:b0:7a:b0:d4:6b:27:6f:
d8:d4:a1:82:e6:01:4e:c3:0c:00:10:4e:23:d9:11:
5c:dd:5e:ca:8b:ad:15:ec:db:24:16:f3:8e:78:c1:
85:32:3b:b6:7e:eb:2e:12:5b:7d:74:54:67:87:71:
89:eb:b6:c8:4a:4d:a3:31:cf:dd:24:d1:7b:1c:cc:
9c:28:2a:3b:4a:cf:de:4c:d0:49:82:37:90:8f:65:
83:86:51:e1:e9:23:d1:3a:61:3f:bc:44:7b:fd:d5:
71:0d:a2:94:be:2b:88:01:7e:b5:5d:1c:f1:df:f2:
ad:ab:5b:fc:d3:9d:46:22:12:51:6b:8d:c4:80:d6:
35:2b:88:89:9c:4d:4b:09:58:06:19:83:88:4c:b3:
ea:73:09:10:3e:b9:e4:40:7b:65:85:cb:d1:05:88:
87:7d:a0:62:af:d1:0a:8a:42:7d:c8:f9:9b:71:66:
79:29:1b:b5:69:33:1f:f1:b2:a7:e6:69:9d:6e:27:
4c:be:f6:52:a9:57:14:b4:ec:30:27:1d:73:5a:ef:
5f:70:70:d1:c6:e4:12:66:51:21:86:d8:35:bd:60:
f2:44:7a:e8:3a:01:d4:f3:1f:16:1e:e3:87:a1:c1:
e5:a4:ea:28:9f:32:4e:c4:8d:b4:3c:75:e3:51:6c:
50:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AF:E9:6A:84:07:DE:0D:60:F4:4D:1E:15:D3:E8:E0:A7:4B:A3:B4
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
2a06:a005:1e70::/44
Signature Algorithm: sha256WithRSAEncryption
62:2a:e9:78:21:aa:1d:33:10:0b:0f:a2:27:ef:c4:0b:90:e6:
2e:4b:2b:89:65:6c:19:d7:07:e3:4f:bb:33:fb:43:88:2e:67:
e6:cf:38:f6:79:eb:8b:59:5f:fe:d5:70:6e:0b:c5:cb:38:ea:
79:aa:af:74:44:cf:59:0d:03:dc:7d:f0:ff:40:bb:45:a8:35:
c2:2a:17:ce:8d:c7:22:21:9e:f9:4b:aa:63:27:63:fd:c0:cc:
29:cd:28:eb:cc:64:da:c0:e9:06:0f:b0:c4:38:b5:aa:bf:73:
3d:8d:fd:65:ea:81:b5:c5:c5:2c:e1:ad:b4:b3:0f:c9:7c:7d:
f6:e6:68:6d:74:4e:30:58:a1:ac:99:0e:1d:86:bf:bb:5b:2f:
4d:a3:1e:0a:99:50:ab:d1:ab:18:3e:2c:8b:ae:01:87:ae:7a:
55:b8:c3:d4:a7:12:89:7b:e2:ae:f0:4b:76:25:c2:cd:ea:ff:
50:24:bd:56:3d:d6:12:5f:0a:3e:5c:70:60:d2:fb:ee:fd:c2:
fe:1d:bf:90:71:32:81:32:57:06:31:18:0e:0d:b9:7d:6d:88:
ce:57:b8:fa:71:69:c0:05:82:ad:60:f0:45:00:aa:fa:7b:f0:
b1:bb:ac:36:15:44:38:90:a1:cd:ba:f1:cf:9f:9d:d4:65:9e:
39:43:08:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org