Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51312.roa
File: AS51312.roa (raw, json)
Hash identifier: 8yq4aAJIViCLwQfeN2Q1jQDqZrhZvPgqXTBh4ntbzV8=
Subject key identifier: BC:72:B1:D0:46:16:A7:C3:50:DC:64:6F:0D:19:CD:19:50:36:62:6E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 017B040EFF85BB64D385BE7705F81CD28D5BE1E4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51312.roa
Signing time: Tue 05 Dec 2023 02:44:16 +0000
ROA not before: Tue 05 Dec 2023 02:39:16 +0000
ROA not after: Tue 03 Dec 2024 02:44:16 +0000
asID: 51312
IP address blocks: 2a06:a005:2280::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7b:04:0e:ff:85:bb:64:d3:85:be:77:05:f8:1c:d2:8d:5b:e1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:16 2023 GMT
Not After : Dec 3 02:44:16 2024 GMT
Subject: CN=BC72B1D04616A7C350DC646F0D19CD195036626E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:a5:aa:e2:02:2a:72:2a:bc:a7:89:5c:2e:
5d:35:ff:1e:fb:1c:74:02:15:d8:81:e6:6d:f5:ee:
5a:b6:13:a5:ff:26:00:0d:69:3c:61:9e:84:0c:e8:
68:a9:0d:c6:88:b5:52:22:d9:8e:9f:27:c7:2f:30:
e6:59:22:72:34:77:50:ad:fc:a9:91:1b:ff:ae:d8:
c0:16:b0:6c:2b:91:8d:0a:62:47:ac:91:65:38:8e:
e9:49:00:97:38:f6:f9:e6:9f:cd:5c:05:a7:73:e0:
b5:fd:96:93:72:0c:02:17:fe:9d:e5:9e:ce:6a:4e:
f6:ec:e7:99:61:c3:bf:d5:56:7b:b7:0c:24:5d:62:
05:f2:62:a6:aa:c9:6f:f5:67:6c:03:cc:76:59:d8:
83:17:22:98:40:6c:0e:f8:f1:70:32:12:fb:f0:70:
50:c1:a7:e3:71:3d:4b:46:39:3a:cc:b7:8f:dc:fe:
7f:e8:fc:65:4d:70:fc:f6:db:23:8f:27:85:ef:c2:
aa:f0:c1:71:e8:22:12:a6:2b:dd:d4:ea:dd:74:66:
e9:63:6d:bb:ed:a2:b1:91:a8:51:21:b6:63:1e:54:
ad:f0:b2:08:f3:1d:f7:75:09:67:b0:4b:9b:e1:85:
f0:b6:e8:5f:b9:aa:ad:5f:ef:1f:80:15:7a:14:e7:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:72:B1:D0:46:16:A7:C3:50:DC:64:6F:0D:19:CD:19:50:36:62:6E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2280::/44
Signature Algorithm: sha256WithRSAEncryption
a5:14:4f:fc:43:08:20:5a:03:7a:e0:26:b1:39:dd:57:a0:7c:
6e:21:01:19:8b:75:cc:cf:27:0f:88:bd:e5:75:ac:11:3c:f9:
c5:99:96:14:2c:30:05:37:fe:4b:b6:c1:12:23:b5:dd:0e:89:
cf:22:6b:b9:6d:15:70:0c:a2:e9:05:32:53:28:59:c5:92:62:
84:d7:94:88:a6:50:ba:c4:98:a7:f3:60:a1:a6:fb:da:41:eb:
3f:f9:e9:00:f3:16:f9:e9:5b:d1:26:c5:a1:8b:b6:1b:cc:f5:
eb:a5:80:fc:d7:58:05:cd:f3:87:27:90:49:10:cc:ca:0f:74:
9c:ad:8d:34:e8:75:9e:f3:0b:a6:ea:ea:2d:22:17:44:c6:e0:
53:8b:bd:6d:a6:88:13:76:4f:7e:ff:bc:b8:f3:33:76:e0:52:
87:2f:c2:0f:af:3d:75:0d:ce:7d:1a:f1:ae:fe:41:73:af:8f:
19:cb:4f:fa:b9:d1:0c:8f:06:6a:db:6c:2c:dd:73:21:0b:0b:
e2:00:6b:ee:f7:3c:9b:8f:44:3b:4a:c4:af:94:fa:30:14:06:
41:4f:62:37:49:0e:94:ad:e6:4a:b5:10:50:15:6f:41:42:08:
d1:b2:a8:3d:8a:87:ec:1d:f8:67:86:12:85:32:03:4c:a6:57:
4b:1f:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org