Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50842.roa
File: AS50842.roa (raw, json)
Hash identifier: PR273FOa7SCLSISlvhniIud5Q2OXjSXlmum7Pb6BZkw=
Subject key identifier: F0:9F:EC:18:98:D6:4E:19:2C:E9:69:55:A4:F2:19:F7:E3:E9:37:19
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 10A6070285BC1E6B316297A7F01778897098D856
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50842.roa
Signing time: Tue 05 Dec 2023 02:44:11 +0000
ROA not before: Tue 05 Dec 2023 02:39:11 +0000
ROA not after: Tue 03 Dec 2024 02:44:11 +0000
asID: 50842
IP address blocks: 2a06:a005:1540::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a6:07:02:85:bc:1e:6b:31:62:97:a7:f0:17:78:89:70:98:d8:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:11 2023 GMT
Not After : Dec 3 02:44:11 2024 GMT
Subject: CN=F09FEC1898D64E192CE96955A4F219F7E3E93719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:f5:e5:85:23:9f:30:b7:2c:51:e5:67:3f:
2f:ba:76:d7:41:ce:12:a4:8f:de:28:e8:32:20:ab:
95:b0:f5:88:46:ef:15:f9:07:ed:b6:52:b3:eb:a7:
1c:e9:2f:3b:02:c6:c1:08:89:f9:aa:a0:50:4a:c9:
e6:7e:72:73:6e:1d:f9:3a:5d:a1:2c:8b:8b:7d:fe:
36:c4:76:14:0e:bc:95:1f:cc:ce:e3:c3:c8:76:ef:
24:91:91:55:39:5f:13:4c:97:67:ef:fc:51:d8:35:
2a:00:27:2b:ae:9a:1d:7b:d1:03:51:04:08:39:c6:
58:25:c7:f3:01:94:bd:b9:44:33:6a:77:23:8f:f3:
0f:2e:25:c6:09:90:4a:52:6c:7a:f4:1f:c1:7e:19:
fa:e8:4d:63:2e:b3:da:2f:4d:6e:8c:ee:04:80:c4:
4c:07:a9:07:54:ea:e3:bd:af:1b:bc:44:ba:1c:b1:
fa:d6:35:13:b2:49:9c:cf:4d:50:f5:4b:95:90:b5:
fd:f5:05:e3:57:4d:92:9e:f3:66:a5:b9:a0:79:9e:
26:2a:45:7a:fe:d4:ac:ec:b5:00:68:1d:5a:6c:38:
05:64:95:0d:14:62:8d:3b:43:15:0a:bc:47:79:b1:
e3:be:c2:ca:87:8e:2e:83:e5:2f:15:c2:3d:59:ef:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9F:EC:18:98:D6:4E:19:2C:E9:69:55:A4:F2:19:F7:E3:E9:37:19
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS50842.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1540::/44
Signature Algorithm: sha256WithRSAEncryption
0b:97:86:a6:5a:e7:b4:5f:e4:40:d7:1d:9e:9b:bd:3e:fe:8b:
03:f4:c7:7f:58:f8:42:a3:1d:f3:fb:2d:c0:71:2d:f4:4e:15:
8a:8f:28:62:af:49:d9:53:1c:7f:34:8b:0d:ae:f0:13:e3:4f:
5b:96:d2:65:65:96:11:33:69:d6:f5:3a:b1:71:cd:4a:1b:34:
cc:f0:cb:78:a2:11:c3:67:54:ac:b9:16:69:c2:73:6e:b5:b4:
5f:1a:ef:e9:70:ab:17:c1:cc:f3:4b:9c:27:af:65:6e:2c:70:
4c:1b:72:dd:88:e6:5e:18:0b:75:62:ab:7f:91:bf:f7:0c:7b:
fb:a9:66:f8:c4:5f:af:55:e6:19:f9:c8:9d:2f:73:0f:94:b0:
05:af:de:64:f5:5f:12:b2:e1:4f:d1:f3:a0:7a:9d:a1:8b:bc:
ef:94:56:d1:85:cc:0d:53:03:44:d5:5d:4b:cb:3d:2c:66:bc:
21:47:6e:5b:02:90:3f:56:cf:4a:0e:fb:b2:8e:6e:68:1e:b9:
4a:a0:4b:2a:47:43:a0:8c:f9:22:f5:67:49:c4:77:93:6f:4c:
0b:33:14:f8:83:17:be:19:5a:5c:61:25:08:57:a6:1d:0c:fe:
64:ab:f4:c9:02:98:26:75:ec:bc:64:8a:d9:c6:1a:ef:0a:80:
aa:06:56:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org