Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50310.roa
File: AS50310.roa (raw, json)
Hash identifier: o6t7HYsTinooFqCrtH9wDFDJlL06Iws/obx1eOCQVXQ=
Subject key identifier: 4A:A0:6A:84:CB:20:A2:B6:59:50:7B:7F:13:62:B1:1F:BA:D6:1C:FB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 651C04C365ACBA66B15257303B9543BD9F6774D8
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50310.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 50310
IP address blocks: 2a06:a005:1d55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:1c:04:c3:65:ac:ba:66:b1:52:57:30:3b:95:43:bd:9f:67:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=4AA06A84CB20A2B659507B7F1362B11FBAD61CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:90:73:f9:fc:58:fe:e4:e7:60:b3:30:e4:61:
4a:ef:37:eb:41:5e:2f:02:66:f8:2b:47:81:eb:9a:
19:fc:df:78:e3:08:1b:5c:93:22:fd:18:60:4f:28:
be:42:f4:28:71:9f:c1:ee:6a:c8:6e:82:60:c6:4f:
f9:95:9e:2f:fa:68:de:0c:18:ac:66:fb:06:83:46:
7e:ea:4a:4f:da:ef:96:d5:ba:48:e7:f9:0b:e6:ea:
37:6b:82:79:8f:5c:14:9c:a2:91:6b:1a:f6:8e:68:
d6:7a:b5:ce:d5:a2:96:d8:60:cb:07:d5:ad:f5:79:
67:f0:40:bc:2d:42:f7:2c:6f:cc:97:ba:c1:57:cc:
9f:a7:06:3b:b8:09:b7:d5:b2:6a:2d:64:d5:17:a4:
e2:74:f3:5c:f1:8b:83:3a:c1:43:33:5d:b5:12:d5:
18:e9:96:7f:fa:a7:48:3c:96:ce:fb:1e:f2:2e:ce:
ea:b4:ec:e7:f8:1d:8d:3f:c6:f2:f2:dc:ac:a5:60:
25:9f:29:0d:c0:a1:19:68:c9:45:cf:90:de:58:e1:
d4:4e:13:17:2d:83:1b:57:87:b2:8e:c1:ab:83:9e:
4f:cf:2e:45:02:3d:30:4f:a1:0b:ec:f9:c6:78:2b:
b5:82:98:ee:7e:59:05:fa:46:9a:09:7d:d4:8e:bf:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A0:6A:84:CB:20:A2:B6:59:50:7B:7F:13:62:B1:1F:BA:D6:1C:FB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50310.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d55::/48
Signature Algorithm: sha256WithRSAEncryption
34:45:83:c6:de:42:f9:a2:69:fb:51:0b:4a:e9:90:d3:6b:52:
de:19:b7:b5:b9:68:69:84:7a:7e:26:b4:88:f3:db:b1:0c:c1:
93:de:89:e2:5c:c3:c4:98:dd:6a:1c:82:29:c0:53:ea:be:17:
d8:6d:5a:5d:01:0b:f1:76:e1:98:41:dc:c4:ae:62:e8:21:73:
fb:16:71:01:af:c4:9b:c5:51:2d:7f:38:b3:d9:8f:8e:49:22:
d7:af:b2:94:8d:17:24:ad:0a:ef:34:ae:26:bb:be:aa:c9:8b:
69:11:3e:19:ff:bc:e5:af:f1:c3:04:b5:77:60:05:2b:17:49:
a2:0a:31:11:69:c0:ab:69:d5:2a:be:a8:5f:31:00:cd:73:4a:
83:cf:f1:bd:a3:b5:a2:ac:7a:39:8d:8b:89:db:61:55:61:ae:
51:b5:3d:d9:e9:23:7d:0b:de:17:40:7c:5c:f6:9b:bf:66:fb:
cc:11:a3:d0:b2:38:c5:90:54:74:32:c1:b5:a7:38:31:28:2a:
09:bb:17:42:25:28:bd:3e:3c:de:96:25:43:45:86:64:04:e7:
c4:67:e6:32:c3:69:3d:b6:08:52:50:f8:11:96:13:cc:49:f2:
16:a8:2f:92:f5:44:47:5b:22:6c:85:d6:07:cb:ce:26:08:e4:
42:ed:77:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org