Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS49975.roa
File: AS49975.roa (raw, json)
Hash identifier: mrPNKxtlA6hIAJVlNm0uqO2tkQR3prAylVji0x2vkPU=
Subject key identifier: 1C:94:CB:B2:94:9A:23:F8:01:88:53:35:55:5D:FA:C1:13:C0:29:06
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1D538B2CDDE5C16AECC02BEE4DA8C50A3705E37F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS49975.roa
Signing time: Sat 24 Feb 2024 03:44:24 +0000
ROA not before: Sat 24 Feb 2024 03:39:24 +0000
ROA not after: Sat 22 Feb 2025 03:44:24 +0000
asID: 49975
IP address blocks: 2a06:a004:5000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:53:8b:2c:dd:e5:c1:6a:ec:c0:2b:ee:4d:a8:c5:0a:37:05:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 24 03:39:24 2024 GMT
Not After : Feb 22 03:44:24 2025 GMT
Subject: CN=1C94CBB2949A23F801885335555DFAC113C02906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:1d:f4:de:8b:ca:9a:f9:3d:1d:b5:1f:a1:
49:f8:70:a0:03:66:d5:c9:b3:01:0d:80:e8:02:eb:
8c:c3:11:ac:af:3c:87:5b:68:0f:fe:87:e0:63:9b:
ce:42:ec:80:ce:be:bb:3e:43:7c:c8:0a:d5:c8:fd:
d4:2d:a6:61:bd:cf:37:e5:d9:ea:df:40:96:ee:a3:
9d:d9:78:ec:be:e7:6d:ab:5b:69:44:0e:6b:26:b2:
ee:cc:ba:6b:fc:90:be:87:f4:21:05:45:52:36:54:
dd:a0:a4:11:f4:c7:f3:e4:01:2f:a0:1a:b1:9d:bb:
e9:be:35:ad:f3:09:8e:fd:04:84:d0:c3:b4:10:fb:
2c:dc:7b:9f:e5:3f:f9:03:08:fe:41:a7:e9:3f:e0:
93:4b:51:de:ff:4f:a3:d6:31:74:f7:2c:92:91:55:
b9:cf:f3:c5:db:6e:07:8c:eb:2c:0b:3b:93:73:e1:
34:69:37:49:bb:41:bf:4f:a2:4d:13:77:43:ae:ff:
a3:27:97:6e:61:e8:0a:1b:ec:e4:00:57:8e:65:51:
45:da:e5:19:c4:86:ac:40:9d:40:74:17:52:2c:2a:
f8:b5:45:f2:4b:a2:f8:f0:14:ae:14:ea:1c:71:89:
c0:10:96:f6:47:09:c7:7a:1b:cc:34:75:a8:14:19:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:94:CB:B2:94:9A:23:F8:01:88:53:35:55:5D:FA:C1:13:C0:29:06
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS49975.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a004:5000::/36
Signature Algorithm: sha256WithRSAEncryption
2b:2c:5e:26:64:06:f3:e8:01:26:ac:fb:6a:1b:3e:25:44:46:
f6:3c:a0:c3:19:e0:29:2e:d6:3d:bd:ac:85:7a:80:68:8b:4d:
b5:af:96:9e:9e:89:66:22:e6:ca:0d:29:1b:95:64:72:4c:b8:
fa:80:d7:f9:71:36:3e:81:82:5a:97:bc:58:94:e4:67:f3:53:
7a:6b:3e:66:c7:c5:ec:dd:70:d8:b3:f0:c4:55:3a:ce:cf:21:
fa:9a:ee:46:d2:fe:c2:64:7f:7f:1a:ee:45:50:fd:00:17:b6:
95:0a:45:26:d8:11:f1:4d:a1:5f:79:28:5c:8b:d5:e8:96:b7:
6a:7d:e3:53:f9:b0:96:91:05:d8:62:33:ca:fb:49:ff:21:40:
96:21:96:ca:02:5b:e7:5e:09:80:7f:dd:bb:4b:63:05:7f:16:
c4:9e:36:6e:df:cf:80:5b:df:68:93:fd:00:ed:5c:dd:94:31:
55:9e:d3:7c:40:63:bf:9e:3e:cb:42:36:c4:19:91:c7:21:bd:
e3:a1:f2:04:ce:ba:bc:82:5f:3c:72:63:df:a4:0b:23:69:01:
39:13:b8:fb:f6:ce:53:89:97:70:25:63:32:b7:89:55:2e:a9:
83:60:aa:17:7c:87:5c:b2:30:52:0d:06:7e:e8:e3:ba:05:5a:
a0:46:32:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org