Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48605.roa
File: AS48605.roa (raw, json)
Hash identifier: TyXn4Ge4DzQLW9lQsQ/17BW6GqypmQv4KOQs97BIYgo=
Subject key identifier: 08:3B:36:82:AB:E7:99:CE:7D:A5:EA:DA:7F:BF:E8:01:58:41:D4:56
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 345220ED9A89299CE7F2888C9323950636A2BA73
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48605.roa
Signing time: Tue 05 Sep 2023 01:38:26 +0000
ROA not before: Tue 05 Sep 2023 01:33:26 +0000
ROA not after: Tue 03 Sep 2024 01:38:26 +0000
asID: 48605
IP address blocks: 144.48.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:52:20:ed:9a:89:29:9c:e7:f2:88:8c:93:23:95:06:36:a2:ba:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Sep 5 01:33:26 2023 GMT
Not After : Sep 3 01:38:26 2024 GMT
Subject: CN=083B3682ABE799CE7DA5EADA7FBFE8015841D456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:02:16:5b:fb:18:41:2e:70:f0:79:ba:32:
9b:7b:3d:64:79:63:ff:8f:75:d1:e1:7f:8a:5a:f7:
68:75:d4:68:9d:a1:4d:a6:2f:8b:c7:b6:89:95:dc:
49:92:59:02:33:ae:68:03:96:bf:91:1a:75:bf:17:
d1:5d:cb:47:1f:61:69:51:0a:13:dd:b5:f0:6d:9e:
7c:25:18:54:2f:a2:f4:9b:54:29:d2:33:80:e2:fb:
49:1f:11:b6:ed:95:76:5e:17:66:57:56:df:83:7b:
ba:41:89:06:29:00:20:39:5d:14:d9:59:06:b7:91:
03:f1:eb:f1:c9:a0:8d:d0:22:67:a3:32:24:67:c0:
6f:9e:46:3c:9d:55:65:5b:c4:00:ca:5e:63:7f:8f:
ff:fe:30:0f:91:12:7e:17:24:40:6f:50:4b:10:a3:
87:80:1f:db:a4:5d:32:a9:7a:08:30:78:90:c9:99:
bc:0c:43:e7:7c:78:12:fd:49:8e:f3:0c:d9:0d:86:
44:c7:80:a5:dd:16:22:59:34:04:71:81:24:0e:15:
ed:2e:6b:8b:71:85:67:ca:58:ef:bc:fe:39:bd:53:
35:07:c9:3e:55:a9:13:eb:1c:b9:ef:c0:5f:f9:df:
f5:bf:c1:90:97:1e:03:6f:a5:b8:59:4d:5b:cc:4b:
88:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3B:36:82:AB:E7:99:CE:7D:A5:EA:DA:7F:BF:E8:01:58:41:D4:56
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.48.81.0/24
Signature Algorithm: sha256WithRSAEncryption
36:8c:b0:a2:8c:4e:bd:de:a8:7d:0b:0e:3e:b4:86:37:24:d0:
a8:e0:61:f8:a3:13:24:0b:7a:29:dd:a6:6e:08:b6:06:45:4d:
e1:3f:59:e9:19:bd:64:b1:f0:a6:2a:1c:92:cd:9e:90:b5:30:
d5:e5:08:a0:5a:28:22:5d:0d:8f:49:23:52:ad:d8:d5:c7:8d:
88:41:e3:e0:8e:2b:30:93:aa:1c:42:7f:d4:d2:6f:2a:80:80:
c2:54:5d:d8:5d:a9:e4:29:b6:30:5e:b7:3e:f6:8a:f5:2b:a5:
87:75:ac:85:d2:f4:1b:b1:bd:39:7b:45:bf:ec:21:92:07:e2:
a3:e3:07:c5:f8:42:ac:b5:5c:8e:d1:35:72:12:1c:0e:b4:cd:
64:63:c9:9c:2e:1e:63:82:23:9f:7e:35:6d:c8:6f:49:9c:26:
00:a4:f9:5d:ac:12:64:bd:bc:01:81:92:5e:36:72:cc:9f:95:
37:d3:33:d3:63:8f:b4:b1:41:13:ad:97:f6:73:82:c3:6f:eb:
03:5c:e7:17:39:e4:05:9e:1b:ae:83:fc:54:63:a1:fa:2a:19:
3b:54:98:a6:6a:d6:45:6b:8e:3d:55:27:47:96:20:8d:ab:3c:
14:cb:99:2a:5a:dc:a0:60:5f:26:e3:eb:d8:81:df:3c:81:11:
4c:45:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org