Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51082.roa
File: AS51082.roa (raw, json)
Hash identifier: 5ow5/5IGQexCD97rYfdjq2LYMXtHfD+oNKjo7ZyalF8=
Subject key identifier: B8:43:F5:A1:92:EB:DC:8C:68:8B:30:4F:06:91:DE:3B:FA:F8:E4:E8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7849FCBFCF6B0964167A12BE43F5B50813F32E43
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51082.roa
Signing time: Fri 26 Apr 2024 22:30:58 +0000
ROA not before: Fri 26 Apr 2024 22:25:58 +0000
ROA not after: Fri 25 Apr 2025 22:30:58 +0000
asID: 51082
IP address blocks: 2a06:9f47::/32 maxlen: 48
2a06:a007::/32 maxlen: 48
2a0a:6046::/32 maxlen: 48
2a0d:d903::/32 maxlen: 48
2a0d:d904::/32 maxlen: 48
2a0d:d907::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:49:fc:bf:cf:6b:09:64:16:7a:12:be:43:f5:b5:08:13:f3:2e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Apr 26 22:25:58 2024 GMT
Not After : Apr 25 22:30:58 2025 GMT
Subject: CN=B843F5A192EBDC8C688B304F0691DE3BFAF8E4E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:e9:9a:c1:4a:b9:94:3b:2e:a9:65:c0:58:
07:fa:7d:0f:e2:27:97:2b:4d:22:d9:5d:02:a8:18:
a3:72:0f:13:5a:2f:eb:5e:60:06:50:d7:0d:b5:d7:
2d:69:1b:fb:ca:4f:f4:e4:99:9c:9d:40:fd:e0:b6:
a9:fe:bc:4d:5c:00:d5:ed:dd:91:3f:9f:20:c7:5b:
3d:4d:0f:74:da:73:79:3f:53:84:49:24:6e:8c:b4:
14:63:61:e1:b3:3c:c8:6d:ea:04:86:73:d9:a4:4f:
25:24:a1:b4:e2:ba:94:f0:f9:9d:eb:38:d9:19:71:
f1:8e:bf:13:94:b7:e2:cf:9c:45:e6:d3:05:40:b3:
79:8c:a8:2c:9c:5c:f5:a0:f0:df:78:84:82:c4:e6:
b7:60:dd:d3:15:4d:4f:b0:7a:c4:23:85:5e:6d:e2:
10:a0:73:ca:98:4a:d4:7d:7e:bf:90:49:dc:9a:90:
d2:aa:c5:24:fe:9c:4d:26:68:0d:c4:6a:87:68:58:
0e:03:07:78:1d:57:e6:73:22:8b:c4:36:a6:60:8f:
5b:9e:fa:13:01:1c:70:a1:45:5d:4e:df:f6:dd:8e:
79:79:9f:35:d1:4f:9c:5a:94:81:a9:d3:fe:3f:1b:
1b:0f:22:01:45:59:d4:2e:18:92:4e:8b:cd:33:69:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:43:F5:A1:92:EB:DC:8C:68:8B:30:4F:06:91:DE:3B:FA:F8:E4:E8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51082.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f47::/32
2a06:a007::/32
2a0a:6046::/32
2a0d:d903::-2a0d:d904:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:d907::/32
Signature Algorithm: sha256WithRSAEncryption
14:ac:4d:8a:35:62:70:ba:17:7e:92:ab:3a:1c:ef:d7:bf:74:
07:e1:72:de:e1:b7:53:ed:d3:34:66:fd:c1:c9:c3:e9:23:0e:
6a:0e:98:4f:2d:03:bf:95:39:ba:66:60:d4:e2:cc:ae:d3:41:
44:11:af:ff:ba:bd:48:ba:ad:79:7d:8d:e5:02:d1:e7:fd:7b:
ab:29:60:1a:1b:fa:5f:e7:80:a4:14:52:f6:f2:ad:04:9d:2a:
ce:eb:11:1f:49:87:53:e1:40:ee:4b:b6:33:3e:bb:b9:ea:a0:
d6:2c:14:d6:2f:be:c2:4f:51:a4:00:75:5b:7a:9b:a6:48:3d:
f4:b2:26:e4:9a:8e:4c:b0:0a:ce:05:03:c6:ce:2f:09:d2:ec:
6f:61:97:a5:57:33:39:ba:b4:cf:5f:96:dc:9f:ba:cc:8c:61:
c9:12:1f:b3:89:0c:24:ab:c7:c4:2e:d8:82:27:6d:62:a0:56:
c7:9b:78:26:c3:8d:bd:a7:07:2b:7a:da:20:30:75:87:4d:f0:
74:21:cd:d7:94:93:bf:5c:9b:bf:f2:65:8d:ed:5e:96:e3:11:
81:5b:bf:0b:d3:e9:2b:6a:85:7b:09:12:1a:8d:31:e3:02:5c:
43:8a:92:75:76:d9:14:8b:4b:91:4d:28:02:46:64:f4:36:1d:
61:6d:30:ad
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUeEn8v89rCWQWehK+Q/W1CBPzLkMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDA0MjYyMjI1NThaFw0yNTA0MjUyMjMwNThaMDMxMTAvBgNV
BAMTKEI4NDNGNUExOTJFQkRDOEM2ODhCMzA0RjA2OTFERTNCRkFGOEU0RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtRemawUq5lDsuqWXAWAf6fQ/i
J5crTSLZXQKoGKNyDxNaL+teYAZQ1w211y1pG/vKT/TkmZydQP3gtqn+vE1cANXt
3ZE/nyDHWz1ND3Tac3k/U4RJJG6MtBRjYeGzPMht6gSGc9mkTyUkobTiupTw+Z3r
ONkZcfGOvxOUt+LPnEXm0wVAs3mMqCycXPWg8N94hILE5rdg3dMVTU+wesQjhV5t
4hCgc8qYStR9fr+QSdyakNKqxST+nE0maA3EaodoWA4DB3gdV+ZzIovENqZgj1ue
+hMBHHChRV1O3/bdjnl5nzXRT5xalIGp0/4/GxsPIgFFWdQuGJJOi80zada/AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUuEP1oZLr3IxoizBPBpHeO/r45OgwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
NTEwODIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRQYIKwYBBQUHAQcB
Af8ENjA0MDIEAgACMCwDBQAqBp9HAwUAKgagBwMFACoKYEYwDgMFACoN2QMDBQAq
DdkEAwUAKg3ZBzANBgkqhkiG9w0BAQsFAAOCAQEAFKxNijVicLoXfpKrOhzv1790
B+Fy3uG3U+3TNGb9wcnD6SMOag6YTy0Dv5U5umZg1OLMrtNBRBGv/7q9SLqteX2N
5QLR5/17qylgGhv6X+eApBRS9vKtBJ0qzusRH0mHU+FA7ku2Mz67ueqg1iwU1i++
wk9RpAB1W3qbpkg99LIm5JqOTLAKzgUDxs4vCdLsb2GXpVczObq0z1+W3J+6zIxh
yRIfs4kMJKvHxC7YgidtYqBWx5t4JsONvacHK3raIDB1h03wdCHN15STv1ybv/Jl
je1eluMRgVu/C9PpK2qFewkSGo0x4wJcQ4qSdXbZFItLkU0oAkZk9DYdYW0wrQ==
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org