Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51856.roa
File: AS51856.roa (raw, json)
Hash identifier: O+eJKSFfPt1+CljxCPCXEf4n2+0HJu9ULq1Lwye5Wo8=
Subject key identifier: 69:03:99:DB:B6:EC:74:86:1C:49:98:CB:CA:58:DA:E3:5D:3F:C0:E8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5D7341CB4993E974AC9A9028D51BA3833783B7BE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51856.roa
Signing time: Tue 05 Nov 2024 03:40:05 +0000
ROA not before: Tue 05 Nov 2024 03:35:05 +0000
ROA not after: Tue 04 Nov 2025 03:40:05 +0000
asID: 51856
IP address blocks: 2a06:a005:1310::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:73:41:cb:49:93:e9:74:ac:9a:90:28:d5:1b:a3:83:37:83:b7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:05 2024 GMT
Not After : Nov 4 03:40:05 2025 GMT
Subject: CN=690399DBB6EC74861C4998CBCA58DAE35D3FC0E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:6c:b7:ab:d4:bc:8e:fb:42:04:06:6d:a1:
3c:1c:07:2f:97:a8:9b:34:31:8a:fa:39:74:5c:83:
f1:38:b0:de:ba:3e:14:f8:ca:e1:f0:95:3e:7c:4e:
ab:ce:a0:19:45:bd:e6:d3:42:20:f4:30:90:32:80:
af:3d:23:c0:ca:d7:a0:b4:2f:f4:6d:d8:4c:26:cb:
26:b5:2f:7d:c2:8a:0d:5d:9c:20:a4:e3:b3:4b:b8:
78:b9:f3:4a:90:b9:a0:b5:34:a2:39:a9:4f:da:97:
ff:d0:c6:4a:2e:a4:43:5f:0d:1d:bf:7c:34:af:02:
a4:26:97:88:f3:05:14:0a:e2:d8:e7:69:4a:ab:22:
af:f8:ed:3b:2b:1c:55:ef:2a:a4:9a:73:03:9b:f6:
eb:09:09:e2:4e:17:94:1e:bd:91:bd:ad:05:8d:e2:
86:34:f5:23:ca:1d:a6:1f:42:93:a9:71:0d:56:b3:
b8:2f:20:b6:93:53:5e:1c:9d:c6:4a:3b:dc:9a:79:
14:3f:9b:c0:00:e4:90:f2:b4:44:f7:d8:81:66:91:
e4:4a:70:57:5f:84:ac:82:73:b3:4a:99:5b:b3:81:
37:4c:f2:71:34:3a:09:1c:6a:1d:f1:44:43:5a:dc:
fc:ec:9a:7a:0e:d9:b0:4e:db:b8:fa:4d:83:b2:72:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:99:DB:B6:EC:74:86:1C:49:98:CB:CA:58:DA:E3:5D:3F:C0:E8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS51856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1310::/44
Signature Algorithm: sha256WithRSAEncryption
93:68:28:c1:22:63:88:9f:99:75:06:84:15:59:c7:56:fd:87:
84:79:c9:97:d8:f6:39:9e:5c:c3:2a:5c:e0:97:e4:31:7f:be:
e6:9b:c5:e4:bb:ab:ef:9b:de:06:b7:83:07:20:d0:aa:76:9e:
37:79:b5:f6:45:49:16:e4:04:67:f3:7d:b9:e3:b6:12:3e:7a:
f9:66:3f:8f:13:e8:09:41:2f:51:82:60:7f:c3:20:88:a3:57:
03:4d:b2:d5:fd:bf:56:da:53:37:47:a0:4e:3b:e7:cf:44:2a:
9e:5d:3d:7c:85:23:23:70:8e:27:ef:a9:53:55:9d:72:50:2f:
be:55:93:1f:33:b5:08:cc:5b:19:2b:1f:1e:27:ac:9a:f1:00:
5f:6c:79:ac:26:a0:cb:60:c6:8b:2d:67:14:00:f2:81:f9:f4:
b7:51:93:a5:06:dd:42:59:69:e6:10:18:0f:cc:0f:ad:3d:0e:
03:90:b9:7a:f3:c0:0e:0b:c7:46:5c:31:36:ab:b3:e4:5a:cf:
b7:45:72:5e:72:d6:14:50:6f:e6:87:92:bd:ba:40:3e:72:f2:
ca:e1:b2:00:ba:e4:cf:7a:59:d4:5b:53:dc:c1:d6:bf:f0:96:
da:d1:d3:79:ed:c3:a3:41:61:f8:11:60:b3:d4:07:2d:5c:2e:
d8:55:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:35 2025 by rpki-client