Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54041.roa
File: AS54041.roa (raw, json)
Hash identifier: s88pL8CRL78su1aDPVEn1S09rE8WCI8aAwzlrjzjD2g=
Subject key identifier: C2:3A:B7:C2:06:7F:CE:2A:88:B9:38:76:25:86:9E:CE:80:12:B7:88
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2213ADB10E71CB0E31D7EAD930640D2ADBF08800
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54041.roa
Signing time: Tue 05 Dec 2023 02:44:19 +0000
ROA not before: Tue 05 Dec 2023 02:39:19 +0000
ROA not after: Tue 03 Dec 2024 02:44:19 +0000
asID: 54041
IP address blocks: 2a06:a005:1085::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:13:ad:b1:0e:71:cb:0e:31:d7:ea:d9:30:64:0d:2a:db:f0:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:19 2023 GMT
Not After : Dec 3 02:44:19 2024 GMT
Subject: CN=C23AB7C2067FCE2A88B9387625869ECE8012B788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:e4:c7:7b:b9:b6:32:48:4e:9d:15:30:b8:
6c:de:a6:57:74:07:40:68:d5:a6:af:e4:db:eb:fa:
9e:c2:1d:3b:ef:dd:d6:5d:68:da:5d:b0:3a:d2:dd:
ea:b3:dc:7f:41:e3:3f:98:6b:11:50:e6:8e:4f:84:
ad:fa:9d:04:b5:d8:6e:74:41:ac:54:51:49:bc:0e:
95:e1:04:a1:a9:19:75:08:5b:0d:28:1e:39:d7:b1:
f5:72:db:f0:44:45:f2:58:4f:74:83:56:75:97:1a:
b5:50:78:95:f7:40:36:ec:0b:dc:33:0a:e5:e5:c2:
39:13:1e:66:13:a6:b7:2c:f1:0f:58:7e:44:64:54:
45:30:9a:a9:d6:44:5f:f3:0e:01:87:78:0c:4d:71:
44:43:18:f4:a5:bc:3d:42:fe:ba:91:ad:1d:f6:94:
c4:99:3a:2f:bb:8f:22:ba:98:1e:a5:81:93:32:1b:
39:78:a7:27:cd:63:8d:4c:fd:20:35:15:32:94:60:
17:f7:09:c3:63:ab:e8:48:75:fc:c6:7f:25:57:28:
9b:68:4d:06:84:cb:06:cf:06:f8:35:4f:77:e2:2f:
57:c4:ff:35:e1:67:81:96:e2:40:09:6f:0f:0e:cb:
af:45:fc:1d:16:77:e5:c5:c7:46:05:1e:b2:30:4d:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3A:B7:C2:06:7F:CE:2A:88:B9:38:76:25:86:9E:CE:80:12:B7:88
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54041.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1085::/48
Signature Algorithm: sha256WithRSAEncryption
70:f8:30:de:bd:b9:e5:7d:33:1b:41:b4:f4:f7:21:fd:9e:c2:
6e:6b:18:ea:c4:19:55:fb:38:22:9d:a3:d0:78:bc:f4:d5:c8:
56:60:cc:81:90:43:e4:4b:f9:2c:f3:56:42:61:8b:0d:db:c9:
d9:8a:2c:ff:99:08:e0:5a:2e:ff:2b:f0:8f:31:ab:a5:bb:c9:
8b:8e:8e:31:89:1d:fc:46:8f:65:a8:68:f5:ed:92:98:23:36:
47:e9:7c:33:89:a3:94:a4:de:35:65:49:6c:a0:4a:01:e2:6a:
72:1f:9c:43:74:40:d0:59:c7:c3:0c:d5:ff:d6:e0:72:cc:a0:
50:36:be:19:08:58:ad:8c:a5:ef:29:29:79:46:4f:f3:ff:3a:
a1:8f:eb:c9:94:a5:af:58:e5:c3:4e:8f:04:4d:c0:03:2c:e8:
30:2d:71:f2:41:5a:85:f1:2b:dc:6a:10:6f:f8:5e:88:d1:94:
20:93:bc:6a:0d:87:4c:57:86:2e:af:de:0a:7f:93:1c:69:8e:
ff:6d:74:14:5b:08:40:c7:01:d5:ba:39:bf:7f:81:6e:af:86:
5a:74:8a:62:ae:27:b1:98:f9:c1:c2:c3:68:b3:6f:67:a0:0e:
5d:a8:64:42:3c:a5:99:9f:20:9e:6c:12:2c:20:6c:73:57:ef:
41:01:bb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org