Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS49286.roa
File: AS49286.roa (raw, json)
Hash identifier: 7/uR5d9tyjY7y/qXhX+TCXVjzlNHLXaFKYPP6+0PT5c=
Subject key identifier: 1B:1C:FA:E9:C6:73:14:B1:DF:3E:C2:E2:08:8A:EC:06:B9:6B:AE:55
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 29482AB74503E879B55471CAA7AFE83DE1BF64E3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS49286.roa
Signing time: Thu 25 Jan 2024 20:44:24 +0000
ROA not before: Thu 25 Jan 2024 20:39:24 +0000
ROA not after: Thu 23 Jan 2025 20:44:24 +0000
asID: 49286
IP address blocks: 2a06:a005:b6f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:48:2a:b7:45:03:e8:79:b5:54:71:ca:a7:af:e8:3d:e1:bf:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 25 20:39:24 2024 GMT
Not After : Jan 23 20:44:24 2025 GMT
Subject: CN=1B1CFAE9C67314B1DF3EC2E2088AEC06B96BAE55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:ea:49:3c:68:ea:19:58:20:4d:a7:37:37:
09:cd:f3:e9:2a:e6:cf:53:c9:1a:03:1b:67:dd:8a:
be:96:3c:d4:e2:3f:7b:a0:f0:3d:9e:c8:02:a9:30:
55:b0:fe:7c:15:7f:ee:b2:f7:89:a3:18:d7:e3:f0:
4a:e5:e0:75:3f:a0:c0:fb:04:24:6c:dd:a5:47:d3:
4b:48:07:80:a7:5d:9e:ec:17:41:4d:94:81:85:14:
3c:d0:8f:0e:10:c2:3e:ef:07:e9:a8:22:eb:1e:14:
4b:07:2e:fc:37:91:1f:20:31:5d:d9:e7:a1:85:83:
bd:7d:10:22:a7:08:86:c5:65:aa:83:08:ca:e4:43:
86:89:c5:6f:1a:d4:3d:62:4f:8f:b9:d8:c9:c4:c2:
0f:40:e3:8b:7b:cf:1a:18:2d:a4:ac:aa:70:bc:bf:
81:1e:19:b6:3d:09:20:2d:5f:07:8e:20:ae:4b:3d:
1f:9f:ea:c2:e7:2f:18:01:11:1c:88:bf:25:3b:3b:
25:05:ce:03:e4:d6:d6:ed:d5:f4:89:3e:de:6d:9b:
4b:c4:bd:13:e8:47:95:f5:18:89:24:54:63:ed:20:
f3:50:1a:04:dd:11:fc:55:0e:a3:cc:00:27:3d:1f:
a8:94:8f:ac:c0:24:f4:23:66:86:0a:e5:f8:6a:d3:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1C:FA:E9:C6:73:14:B1:DF:3E:C2:E2:08:8A:EC:06:B9:6B:AE:55
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS49286.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b6f::/48
Signature Algorithm: sha256WithRSAEncryption
1a:18:94:40:12:81:61:a3:4e:d6:88:8b:b2:ed:4b:24:89:b2:
d2:a1:ca:05:47:90:9c:d4:70:2d:9d:45:be:a6:ac:b9:ce:3c:
ee:1f:8d:91:bc:07:a3:24:97:e9:45:71:5f:b5:c5:60:c5:7b:
f6:56:3c:57:93:be:84:0a:2f:a1:6b:1c:09:2b:e2:a2:6c:d3:
d5:af:ce:4b:e0:44:5e:47:91:57:72:f3:97:a6:26:46:6b:7d:
78:63:e0:72:35:41:81:20:23:19:00:f3:0a:3d:8a:32:f6:5d:
19:82:1b:66:ec:c4:60:47:e1:f4:ba:25:3e:2f:6d:e3:96:0a:
10:77:6e:d9:08:cc:62:12:0a:63:0f:8c:b1:bf:45:f2:a5:db:
36:aa:8b:07:c6:30:c4:4b:62:82:a7:ea:62:d4:90:37:28:19:
52:c7:00:37:cc:ad:45:05:6f:09:14:1f:4a:21:19:4e:96:5f:
df:8d:c0:92:b2:bf:ba:f6:b0:cd:ed:d7:13:54:8e:cb:56:38:
66:42:19:94:05:90:98:fe:cc:26:60:fa:c1:66:79:e0:03:3d:
0a:61:11:e2:3f:e4:95:b0:5a:e4:9e:ab:01:d5:2d:08:79:cd:
41:01:73:a2:96:5c:43:99:83:7e:43:52:5d:15:5d:c1:3a:79:
af:e7:e0:90
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUKUgqt0UD6Hm1VHHKp6/oPeG/ZOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAxMjUyMDM5MjRaFw0yNTAxMjMyMDQ0MjRaMDMxMTAvBgNV
BAMTKDFCMUNGQUU5QzY3MzE0QjFERjNFQzJFMjA4OEFFQzA2Qjk2QkFFNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWCOpJPGjqGVggTac3NwnN8+kq
5s9TyRoDG2fdir6WPNTiP3ug8D2eyAKpMFWw/nwVf+6y94mjGNfj8Erl4HU/oMD7
BCRs3aVH00tIB4CnXZ7sF0FNlIGFFDzQjw4Qwj7vB+moIuseFEsHLvw3kR8gMV3Z
56GFg719ECKnCIbFZaqDCMrkQ4aJxW8a1D1iT4+52MnEwg9A44t7zxoYLaSsqnC8
v4EeGbY9CSAtXweOIK5LPR+f6sLnLxgBERyIvyU7OyUFzgPk1tbt1fSJPt5tm0vE
vRPoR5X1GIkkVGPtIPNQGgTdEfxVDqPMACc9H6iUj6zAJPQjZoYK5fhq0zylAgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUGxz66cZzFLHfPsLiCIrsBrlrrlUwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
NDkyODYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB
Af8EEzARMA8EAgACMAkDBwAqBqAFC28wDQYJKoZIhvcNAQELBQADggEBABoYlEAS
gWGjTtaIi7LtSySJstKhygVHkJzUcC2dRb6mrLnOPO4fjZG8B6Mkl+lFcV+1xWDF
e/ZWPFeTvoQKL6FrHAkr4qJs09WvzkvgRF5HkVdy85emJkZrfXhj4HI1QYEgIxkA
8wo9ijL2XRmCG2bsxGBH4fS6JT4vbeOWChB3btkIzGISCmMPjLG/RfKl2zaqiwfG
MMRLYoKn6mLUkDcoGVLHADfMrUUFbwkUH0ohGU6WX9+NwJKyv7r2sM3t1xNUjstW
OGZCGZQFkJj+zCZg+sFmeeADPQphEeI/5JWwWuSeqwHVLQh5zUEBc6KWXEOZg35D
Ul0VXcE6ea/n4JA=
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org