Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54681.roa
File: AS54681.roa (raw, json)
Hash identifier: EN8u6GpImNhFbx5VHC9YVUxgOleZxiHaCPHnN8kG7eg=
Subject key identifier: EB:C7:7A:04:7F:C0:78:86:85:66:CA:D9:76:1A:00:EE:75:CF:31:11
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 14209777AC2F81570FB4AA0A97E07D66306A011E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54681.roa
Signing time: Fri 19 Jan 2024 02:44:24 +0000
ROA not before: Fri 19 Jan 2024 02:39:24 +0000
ROA not after: Fri 17 Jan 2025 02:44:24 +0000
asID: 54681
IP address blocks: 2a06:a005:d40::/48 maxlen: 48
2a06:a005:ee0::/44 maxlen: 48
2a06:a005:ef0::/44 maxlen: 48
2a06:a005:f00::/44 maxlen: 48
2a06:a005:f10::/44 maxlen: 48
2a06:a005:f20::/44 maxlen: 48
2a06:a005:1166::/48 maxlen: 48
2a06:a005:1506::/48 maxlen: 48
2a06:a005:150a::/48 maxlen: 48
2a06:a005:1610::/44 maxlen: 48
2a06:a005:18a0::/44 maxlen: 48
2a06:a005:1950::/44 maxlen: 48
2a06:a005:1960::/44 maxlen: 48
2a06:a005:1970::/44 maxlen: 48
2a06:a005:1980::/44 maxlen: 48
2a06:a005:1c7e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:20:97:77:ac:2f:81:57:0f:b4:aa:0a:97:e0:7d:66:30:6a:01:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 19 02:39:24 2024 GMT
Not After : Jan 17 02:44:24 2025 GMT
Subject: CN=EBC77A047FC078868566CAD9761A00EE75CF3111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:f8:f4:da:eb:63:a2:1c:9d:64:75:91:26:
9c:ce:3e:70:d6:a1:c4:9c:a0:a1:38:c0:c0:8c:8f:
57:06:89:12:95:b5:3f:91:12:89:c1:24:31:6a:21:
d9:29:f7:8a:45:23:52:9e:3e:b5:95:50:07:2a:05:
db:60:75:f0:3f:82:15:51:6d:94:53:3f:e3:7d:0d:
82:02:6c:ed:e8:f7:5e:15:51:ef:58:5c:32:f5:95:
5a:e1:33:64:0e:a0:73:30:d2:64:bb:e2:c1:ca:12:
1f:53:e9:cd:ad:ed:a5:bf:1c:28:c7:b1:28:58:36:
7a:f4:45:20:3b:43:29:67:39:50:7a:2c:8c:a5:9b:
0d:2a:e0:e2:59:8e:53:4c:a8:9e:19:3b:28:45:91:
a8:ab:89:b6:59:6e:95:99:42:3f:1e:99:da:60:5d:
fe:84:0f:1d:da:fb:d1:5b:75:98:d3:1d:99:f1:94:
06:83:fc:6b:e0:22:7a:04:82:04:ce:af:be:27:52:
c0:34:09:61:23:10:9a:b7:4f:b1:5e:c7:c3:e1:3b:
c5:3b:1b:f2:d0:ee:ef:d3:4c:fb:c3:a8:9b:5e:7e:
31:30:b2:bc:65:e6:c5:39:9e:36:55:06:0b:fc:92:
04:71:83:b5:9b:e8:ec:36:f0:c9:12:15:7f:de:9a:
e9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C7:7A:04:7F:C0:78:86:85:66:CA:D9:76:1A:00:EE:75:CF:31:11
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d40::/48
2a06:a005:ee0::-2a06:a005:f2f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1166::/48
2a06:a005:1506::/48
2a06:a005:150a::/48
2a06:a005:1610::/44
2a06:a005:18a0::/44
2a06:a005:1950::-2a06:a005:198f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1c7e::/48
Signature Algorithm: sha256WithRSAEncryption
af:5a:57:c2:25:40:47:77:34:f2:60:5c:d3:50:53:a6:88:9b:
6e:d2:63:15:d0:ca:c1:cb:1d:03:5c:c9:5b:86:df:98:d7:3f:
1f:27:c9:1b:f5:87:06:61:40:42:39:7d:8b:9d:31:5a:c5:85:
8e:c4:96:1d:8a:9e:68:0b:fa:05:2b:1b:da:f4:fb:3c:59:75:
d5:f1:f4:ed:17:b4:71:a5:04:5d:7c:49:56:61:02:fa:87:c7:
02:64:41:8d:41:4d:18:25:47:15:df:fb:73:f0:93:b2:3a:f2:
f0:d1:6c:8a:d4:51:92:46:89:9d:00:ea:18:f8:03:73:ff:96:
b1:9a:35:19:c0:9b:44:4b:b4:bf:6a:bf:5c:9e:c3:db:32:f2:
9b:f1:db:4b:f9:f2:96:10:7e:86:48:52:71:dc:62:2d:36:bd:
0a:38:25:c3:03:40:df:3b:20:bb:c7:38:9c:67:16:47:ff:49:
97:65:c8:94:9c:35:78:08:26:74:08:0f:4a:9a:e2:e3:30:29:
b9:01:86:50:1f:a9:2b:26:e3:27:04:1b:6b:7b:c4:3b:3f:63:
81:f9:84:da:77:67:3e:42:9a:06:fb:ab:33:b7:2e:6f:ed:5c:
77:a7:d3:7a:24:f0:b3:5a:63:00:f7:d1:8d:31:6d:ea:f1:b7:
87:6f:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org