Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48266.roa
File: AS48266.roa (raw, json)
Hash identifier: pjxZ7itwFOdIDG6wYJcE/1mGhILHuPDTq17jI94wRIc=
Subject key identifier: A1:FE:8F:96:69:12:0C:E6:78:B2:A3:E9:4C:3D:0D:88:64:4C:3C:90
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 536B2B9441FF37BCD6539C0028F95B6248B4B5A7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48266.roa
Signing time: Mon 05 Aug 2024 13:39:58 +0000
ROA not before: Mon 05 Aug 2024 13:34:58 +0000
ROA not after: Mon 04 Aug 2025 13:39:58 +0000
asID: 48266
IP address blocks: 144.48.80.0/24 maxlen: 24
2a06:a005:90::/44 maxlen: 48
2a06:a005:a0::/44 maxlen: 48
2a06:a005:350::/44 maxlen: 48
2a06:a005:870::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6b:2b:94:41:ff:37:bc:d6:53:9c:00:28:f9:5b:62:48:b4:b5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Aug 5 13:34:58 2024 GMT
Not After : Aug 4 13:39:58 2025 GMT
Subject: CN=A1FE8F9669120CE678B2A3E94C3D0D88644C3C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:5c:74:41:a0:d3:c3:f8:6a:d7:0c:41:2a:
5d:53:14:3a:91:3c:eb:54:d5:66:d1:e0:2e:23:46:
71:25:a0:7f:cc:27:7d:7a:78:82:8e:2c:7b:07:3f:
07:38:a2:40:63:44:f3:d0:39:aa:b6:fb:94:11:79:
d1:f1:65:b8:a7:41:1d:db:4b:6e:41:35:83:e6:a2:
7d:ac:6f:91:2e:5c:cd:51:27:7e:ce:ea:4a:c7:15:
bc:eb:c8:5e:b5:9a:21:dc:ec:07:19:40:63:6b:e7:
02:48:54:93:c4:dc:3d:9f:cd:d3:21:27:8c:30:39:
c3:a8:29:54:01:fd:fe:1e:25:4c:b3:93:1e:52:ea:
dc:7d:e9:76:4c:ec:59:26:5a:43:e4:84:eb:a7:92:
ac:cc:29:27:d4:0b:9a:fc:5d:ac:cf:65:0b:78:da:
06:1f:70:a1:bd:da:67:83:d4:bb:c7:06:c6:9f:61:
9e:6b:31:d0:61:58:45:b0:86:7a:f9:51:ac:68:d9:
b3:4c:38:b6:68:d2:70:90:c7:ed:75:31:be:65:25:
ca:2a:cf:56:96:9c:0c:9f:13:1a:aa:e7:d7:76:7e:
ea:79:23:0e:81:99:d6:53:c8:bb:b1:aa:30:63:17:
a9:df:1c:ca:49:2b:69:cc:ab:77:ba:ba:8c:57:29:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:FE:8F:96:69:12:0C:E6:78:B2:A3:E9:4C:3D:0D:88:64:4C:3C:90
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48266.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.80.0/24
IPv6:
2a06:a005:90::-2a06:a005:af:ffff:ffff:ffff:ffff:ffff
2a06:a005:350::/44
2a06:a005:870::/44
Signature Algorithm: sha256WithRSAEncryption
5c:72:cc:0b:cc:55:64:94:a6:26:d9:31:68:30:84:8e:dd:f0:
9b:d0:fe:fd:3a:c2:ec:7d:15:18:9c:4c:49:7c:5e:d2:f3:da:
ee:38:41:08:5b:86:1c:0c:88:d0:e6:e6:9e:d1:2e:ab:fa:43:
50:07:b6:72:95:f7:a1:73:a8:dc:c4:11:09:44:3b:eb:16:85:
00:47:88:4c:a2:39:55:05:7d:d0:8c:88:9a:94:d3:06:ab:26:
a4:9f:7c:d8:4c:d3:67:f5:5d:d0:d9:9d:5a:e4:e7:66:aa:80:
ff:6b:82:b4:38:c0:3e:75:ef:dc:35:03:5a:92:b8:05:8d:5f:
42:46:a3:f4:58:1f:31:67:0d:d8:ca:28:16:e5:ff:6a:47:0a:
43:ee:ab:0c:33:78:89:26:f3:b1:62:18:9f:53:c4:9e:b3:2b:
03:ea:fc:8e:66:f9:10:8a:b8:4a:d0:05:15:c0:ad:4c:89:12:
51:95:f8:04:f2:0b:2c:39:a6:9b:17:9a:61:d3:b6:bc:97:16:
61:7c:09:ae:24:e2:99:da:21:5f:33:f1:99:d5:df:f3:34:ba:
a3:a7:63:9d:c3:fe:1e:55:79:0d:7e:99:08:76:09:d4:5e:21:
16:bd:91:4e:20:97:8c:8f:c4:23:50:84:fd:ea:fd:6f:74:7b:
96:49:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:56 2024 by rpki-client on console-ams.rpki-client.org