Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51856.roa
File: AS51856.roa (raw, json)
Hash identifier: 9cNkCGvj4DJ+dB6HyGwPoXL/6sUuZbPU4kTpBgQcZDQ=
Subject key identifier: B1:14:B1:5E:8F:B5:08:F9:9A:62:13:3F:BD:FD:C6:45:49:5B:49:F6
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1B43DBCA3D52A470D8C418A827060D9FFE771518
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51856.roa
Signing time: Tue 05 Dec 2023 02:44:11 +0000
ROA not before: Tue 05 Dec 2023 02:39:11 +0000
ROA not after: Tue 03 Dec 2024 02:44:11 +0000
asID: 51856
IP address blocks: 2a06:a005:1310::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:43:db:ca:3d:52:a4:70:d8:c4:18:a8:27:06:0d:9f:fe:77:15:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:11 2023 GMT
Not After : Dec 3 02:44:11 2024 GMT
Subject: CN=B114B15E8FB508F99A62133FBDFDC645495B49F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:b9:cc:10:4f:93:90:2d:29:25:ab:6b:35:
19:09:ee:6b:ce:ae:53:80:08:dc:89:e3:7d:12:35:
69:95:69:34:bc:ca:3d:cb:7a:92:2c:60:8d:45:2d:
68:52:56:86:10:cb:92:9a:72:36:7a:df:54:a7:c0:
1b:99:8d:a7:7d:59:8a:1a:d4:31:85:84:e1:e0:40:
96:ee:fb:73:68:9f:c2:65:32:74:ad:84:db:7d:79:
41:29:a8:4c:6e:ae:36:94:28:91:5f:53:dc:a7:b2:
41:f0:30:09:c0:19:af:a0:94:48:76:4e:59:f5:d0:
ea:c4:53:12:d6:36:7d:79:26:6c:ef:81:1d:7b:65:
66:55:bd:7b:27:a9:c5:99:f6:1b:37:68:e2:83:33:
96:2e:6d:b0:1c:bd:0f:8d:e8:4d:76:bb:94:8f:db:
33:75:7c:70:67:00:07:61:db:a8:23:d4:42:cd:66:
26:67:29:c4:60:ff:31:71:40:b6:27:0f:93:17:5c:
8a:f1:18:6a:9a:f8:be:17:66:40:fd:79:cb:84:31:
b7:99:56:db:ec:74:9d:97:4b:a9:26:34:b3:8f:7e:
f9:7a:43:7c:2e:39:7a:68:5c:be:85:f3:1c:9e:cd:
f1:c6:68:9a:64:ad:38:10:b8:38:e9:41:90:02:e2:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:14:B1:5E:8F:B5:08:F9:9A:62:13:3F:BD:FD:C6:45:49:5B:49:F6
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1310::/44
Signature Algorithm: sha256WithRSAEncryption
39:d3:6b:2b:86:13:89:b1:41:71:5d:e1:4d:63:1b:5a:35:3b:
e2:9c:2e:89:fb:fe:f5:2f:02:eb:d8:de:12:f0:b4:c5:0a:14:
b4:77:1a:61:e2:6a:e3:e8:ac:c6:ea:4b:13:53:29:d1:ee:bd:
21:ea:15:2a:3e:7b:d7:80:f0:47:7b:6f:88:94:1e:42:cf:18:
16:6e:5f:cb:77:2f:91:61:b8:58:10:f4:29:04:5d:7d:e7:7b:
46:9d:40:09:ec:9e:05:de:5b:43:17:fd:49:be:c6:db:64:00:
23:38:ea:be:e5:3f:e8:57:d4:25:80:c0:f9:4b:35:9a:55:54:
1a:4b:05:5e:7a:b3:7a:78:f4:88:45:36:f0:70:f4:e4:41:71:
2f:d2:fa:b7:b5:77:7a:9f:d5:67:0a:96:ea:57:4d:9a:58:0d:
9a:1c:0d:b2:44:ba:44:6d:d5:e8:aa:00:3c:7a:d8:2c:75:fc:
4b:73:4f:01:4a:e0:93:e7:13:b9:f7:10:72:b5:21:af:0f:1c:
7f:fc:e2:a9:80:32:75:36:c9:98:f2:08:6e:0e:7c:3e:8b:05:
5c:d6:a4:26:9f:dc:43:76:5b:db:67:0d:b2:5f:77:ac:f3:db:
cc:55:01:05:79:40:cd:05:79:61:3b:ae:20:ff:fc:52:fb:1e:
93:12:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org