Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51312.roa
File: AS51312.roa (raw, json)
Hash identifier: Yy4FMBzplrquwtqRV0Ndq9Ac9leEliR7fvzq86v8UXs=
Subject key identifier: 61:CC:7C:D9:9E:FF:D3:D3:90:E1:87:54:F9:B5:CB:20:C6:86:0F:8A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 514E442552E9F2005E131A205BA9B9928AD4398B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51312.roa
Signing time: Tue 05 Nov 2024 03:40:05 +0000
ROA not before: Tue 05 Nov 2024 03:35:05 +0000
ROA not after: Tue 04 Nov 2025 03:40:05 +0000
asID: 51312
IP address blocks: 2a06:a005:2280::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:4e:44:25:52:e9:f2:00:5e:13:1a:20:5b:a9:b9:92:8a:d4:39:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:05 2024 GMT
Not After : Nov 4 03:40:05 2025 GMT
Subject: CN=61CC7CD99EFFD3D390E18754F9B5CB20C6860F8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:06:f9:5d:d4:33:b3:e3:ba:f3:44:53:5a:
68:cc:55:8d:9e:02:ec:33:08:91:ef:1d:8d:27:7c:
ce:b1:cc:8d:ef:77:03:7a:97:4f:95:6d:4d:d3:af:
bf:35:1c:59:b9:ba:eb:d0:7f:1e:27:93:7f:b4:a5:
e2:ef:1c:43:85:cd:a5:57:d9:73:cc:66:db:10:6b:
f3:fe:31:31:2d:fc:f0:df:dc:0d:d2:cd:9d:23:9b:
3d:fb:41:2d:3d:74:2d:02:0d:c4:c2:87:7b:91:f4:
fa:31:85:42:1a:19:5c:7b:95:bf:ef:e2:52:32:ab:
6d:a8:2c:24:23:18:b8:44:01:08:64:1a:c7:f5:c2:
09:80:3f:0b:97:5e:d7:f6:22:44:fa:59:36:6f:1b:
d5:ba:1a:f7:49:3d:21:ed:c3:77:cb:b1:38:e3:52:
2b:e4:dd:6c:33:59:7a:e3:7f:db:ad:63:3b:a6:bc:
ba:c8:ce:7d:3e:b4:ab:f2:d8:f6:70:e4:5f:64:22:
65:07:2b:24:e9:42:6c:f6:4c:c8:5e:b5:87:b4:f4:
c9:cf:1e:b7:a7:a7:d0:f2:b8:e4:77:12:60:f4:e9:
f2:61:66:14:d3:03:d8:c1:de:9b:b7:41:60:79:c5:
40:27:1a:81:3f:bb:fd:78:78:82:90:dd:a0:23:6a:
d3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:7C:D9:9E:FF:D3:D3:90:E1:87:54:F9:B5:CB:20:C6:86:0F:8A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51312.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2280::/44
Signature Algorithm: sha256WithRSAEncryption
4e:c9:5b:bd:77:76:dd:47:45:dd:88:34:92:68:40:b0:e0:84:
b1:5d:d1:f2:55:a5:f2:7e:2d:ff:87:53:16:bf:43:52:d4:3e:
5d:2c:26:72:2c:b3:97:cd:80:5d:1e:8f:7f:ba:ee:71:d3:24:
c1:79:0d:20:22:51:a4:7d:22:e4:8a:8f:fc:0b:4f:3f:ab:93:
d8:67:8a:62:ad:cc:a1:35:d6:0f:2f:66:e6:72:9d:c3:2c:80:
75:87:26:6b:59:d1:d7:09:ff:cc:e5:6b:6c:91:ba:e3:ae:ea:
58:e9:e3:af:e6:49:3f:d4:5e:d2:8f:bf:2b:51:d1:e5:42:57:
3a:cf:6c:ac:b2:65:c0:f1:66:07:5b:cb:54:7b:b9:0e:85:46:
2c:6d:dd:43:3c:54:a7:b2:88:e9:59:7c:c2:6f:43:22:4e:23:
b2:fd:ab:b9:18:f2:f5:fe:21:29:0a:5b:de:75:d7:59:ec:a3:
54:75:4f:28:88:2f:6b:21:91:65:d8:e6:11:11:15:8a:f0:69:
26:37:e2:9a:1f:a1:65:d8:c5:0c:93:2c:fd:12:9a:b9:c4:93:
7b:74:7d:bb:d1:de:ce:20:46:78:a5:97:6c:6b:77:55:45:7a:
19:aa:e3:25:15:1c:39:7d:ff:b9:d4:39:cb:ae:70:a8:05:ce:
ef:3d:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:13 2024 by rpki-client on console-ams.rpki-client.org