Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44406.roa
File: AS44406.roa (raw, json)
Hash identifier: pOmwhpXNQHjJdGzmOpHXEIjBcSZSScH2Zr2G5I8k9Lo=
Subject key identifier: E6:26:54:6B:7C:14:D0:D4:CF:C8:DD:99:05:08:19:11:46:9F:D5:43
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 26DFD43A4D24A2223D245F992FA67B4983639E6B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44406.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 44406
IP address blocks: 2a06:a005:670::/44 maxlen: 48
2a06:a005:740::/44 maxlen: 48
2a06:a005:760::/44 maxlen: 48
2a06:a005:780::/44 maxlen: 48
2a06:a005:1e70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:df:d4:3a:4d:24:a2:22:3d:24:5f:99:2f:a6:7b:49:83:63:9e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=E626546B7C14D0D4CFC8DD9905081911469FD543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d4:2d:91:94:11:28:07:76:0f:8a:b4:ee:2b:
63:42:7c:aa:0b:ee:ce:e7:3b:ac:c7:6d:ef:0c:62:
9c:93:0f:49:d7:d7:1c:ba:e1:37:8c:cd:40:5a:8e:
f4:75:df:1e:23:f8:a6:6b:a9:9f:9e:75:7e:c4:f5:
d7:c0:89:15:90:eb:cf:c6:f8:0a:d9:c2:23:c1:59:
7b:d4:d9:93:c9:d1:78:44:e9:89:3c:fc:bf:72:46:
f0:7b:55:02:89:84:f1:68:6f:94:7a:b8:65:e3:d3:
63:19:7b:98:a8:fb:25:0f:50:01:e0:6b:5e:f8:e1:
72:08:73:a5:22:29:0a:de:32:b8:90:06:4c:4c:bd:
94:51:76:3e:fd:cf:6e:6f:f7:fe:cb:78:55:9e:3d:
e3:0d:e1:33:39:52:b9:a2:be:9e:8f:6a:8e:63:5e:
9c:9a:b3:83:cd:bb:64:0b:ca:27:c4:d1:f6:27:b8:
30:b6:4f:e8:dc:3c:9f:0d:02:fb:90:4d:aa:98:76:
c7:5a:c3:57:9a:bb:db:d6:f1:3b:73:e6:68:ed:48:
f2:45:ec:62:b3:44:19:d5:af:bf:55:22:74:0a:18:
60:b1:b9:94:a2:2e:f2:fa:cf:92:72:dd:09:f3:57:
d0:71:83:4c:4f:e3:19:fd:72:31:e5:17:b1:96:a0:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:26:54:6B:7C:14:D0:D4:CF:C8:DD:99:05:08:19:11:46:9F:D5:43
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS44406.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:670::/44
2a06:a005:740::/44
2a06:a005:760::/44
2a06:a005:780::/44
2a06:a005:1e70::/44
Signature Algorithm: sha256WithRSAEncryption
2b:d3:1d:a9:5e:34:fe:a1:8d:2e:c9:7a:2e:1c:8b:ca:31:64:
74:db:ac:a7:c9:02:93:fc:0e:fb:26:aa:a7:0c:6c:03:c8:ef:
26:dc:d6:aa:bb:53:32:3d:ae:cb:83:e4:68:c8:fe:a7:3a:76:
c1:a9:f0:31:b6:88:fd:2a:28:d8:7e:09:d8:c5:86:88:be:dd:
5a:54:d7:a5:12:38:0c:16:51:97:6e:e6:61:7b:af:6e:2c:e9:
e3:d1:5c:e4:2c:85:db:9d:ff:f3:fe:a0:bc:b7:2d:6a:c0:61:
48:92:db:21:da:aa:e3:3c:3e:c3:ee:b6:0c:55:76:52:47:f8:
18:9d:4a:3d:be:36:d1:bf:01:b1:b4:ed:5e:40:85:25:b1:e8:
00:9f:77:ae:f9:89:ab:93:59:10:7e:46:da:b0:6c:68:fd:ef:
7a:49:18:81:27:b8:b7:82:0b:9e:9d:8c:48:a7:11:e1:18:c8:
89:7b:94:7a:a6:50:12:e0:3e:86:f9:95:a9:ee:e8:40:c3:5d:
29:ce:44:11:2e:4f:22:c7:d3:cf:94:42:d6:0c:11:10:6a:70:
4b:b3:b4:22:75:2f:a0:6c:f4:25:7f:be:1b:a7:4a:34:0e:e0:
6a:17:d2:3a:72:14:8b:fe:46:79:ad:d3:ba:6a:c3:e1:e6:d0:
30:ec:95:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:37 2024 by rpki-client on console-fra.rpki-client.org