Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48935.roa
File: AS48935.roa (raw, json)
Hash identifier: 1rBHtd/B9SiChj2JiuFXCQ9VBSwLNDo6UEmnnLtS1Lg=
Subject key identifier: 6C:FD:F0:70:09:EB:AA:D1:2A:46:D5:76:0A:09:BF:1D:D4:94:B5:8A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 362F8F1B0588B31D3D17BB830314130A97D1D2F5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48935.roa
Signing time: Tue 30 Jan 2024 22:44:24 +0000
ROA not before: Tue 30 Jan 2024 22:39:24 +0000
ROA not after: Tue 28 Jan 2025 22:44:24 +0000
asID: 48935
IP address blocks: 2a06:a005:180d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:2f:8f:1b:05:88:b3:1d:3d:17:bb:83:03:14:13:0a:97:d1:d2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 30 22:39:24 2024 GMT
Not After : Jan 28 22:44:24 2025 GMT
Subject: CN=6CFDF07009EBAAD12A46D5760A09BF1DD494B58A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:e0:96:00:88:2e:18:1b:ff:46:51:2e:bb:
03:1d:90:4b:cd:4f:58:48:40:19:3e:26:e6:29:ca:
89:42:6a:f2:56:f8:9a:c7:30:29:d2:e8:2a:9d:61:
e2:40:f2:e0:e9:6f:34:9d:4f:1d:10:33:a4:4a:81:
dc:41:18:da:22:4d:01:13:8c:3f:4a:38:80:b1:5f:
9c:a2:cf:b0:1c:06:1d:c2:99:0d:0b:da:b4:1f:c0:
fe:49:88:1a:dd:40:e4:82:ff:fd:46:23:82:f5:77:
5c:cb:8e:eb:77:0f:d0:2f:af:61:ba:80:70:7f:af:
53:5e:1e:9f:3c:ab:18:59:2d:6d:8f:12:15:c8:5d:
5f:5c:57:c5:cf:b9:19:a5:14:60:25:e7:b9:da:25:
df:54:4f:59:0d:3c:68:20:de:b9:60:ec:fd:e0:ed:
d4:33:cc:c1:54:a7:c1:bb:6b:2c:67:59:4d:3b:6d:
ae:ca:f4:04:32:6c:0f:ad:94:8c:8b:f7:09:e5:12:
b3:4c:de:23:74:a6:a5:df:01:60:8e:58:13:a9:76:
56:fb:f8:85:ac:38:c0:10:44:db:fa:7c:27:67:e0:
62:c2:3b:86:70:5a:c0:13:30:2d:20:f7:36:91:66:
0e:51:a8:d2:be:54:89:7f:12:8d:bd:a8:ed:e5:47:
a5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FD:F0:70:09:EB:AA:D1:2A:46:D5:76:0A:09:BF:1D:D4:94:B5:8A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS48935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:180d::/48
Signature Algorithm: sha256WithRSAEncryption
86:fe:f4:90:e9:05:ff:5d:34:95:4c:f5:8d:b9:32:d8:44:6d:
f7:70:e4:bf:34:61:dd:96:43:85:90:98:50:5b:e2:d7:fe:3f:
44:57:d4:55:12:1e:2f:87:cc:8d:15:e5:54:ac:bf:80:da:22:
a4:0f:66:c6:f0:6a:b3:1a:73:05:3e:85:d0:ec:d1:3c:52:27:
54:3c:23:81:87:60:69:4e:d2:0d:52:1a:43:fb:3e:87:30:8f:
9d:57:f6:50:0b:b1:79:3d:7d:3e:57:e8:b9:10:04:db:20:50:
06:e5:ff:5a:19:59:0d:a0:b2:e1:e5:18:ef:41:f2:fd:fe:88:
ba:0d:60:a7:63:73:95:91:a4:21:aa:10:a4:0d:64:32:42:4e:
b1:b4:e0:36:f9:77:3b:d3:9d:87:d6:39:0a:7f:73:59:06:1f:
0e:7b:6d:0b:9c:08:e2:ab:6f:2a:8a:51:09:8c:3b:0d:77:4b:
b9:ab:31:30:a0:f9:ef:8f:98:17:76:75:e8:7e:23:9f:5b:bf:
fb:6f:18:25:43:64:bd:5b:ea:02:c5:fb:88:75:a0:6c:71:65:
74:dd:32:c4:cd:54:98:6a:06:c2:56:7f:34:0f:f8:b2:ed:5a:
12:2d:e7:ea:0b:00:35:ea:fd:ef:c9:f1:77:8c:c4:64:91:19:
db:58:24:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org