Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57349.roa
File: AS57349.roa (raw, json)
Hash identifier: PbDasZn5G1WnP+PiM1Ty7dXrpPid6iZTuBTDyWlkF+w=
Subject key identifier: 0D:AB:2D:5E:FD:49:74:7C:58:C6:87:F8:1A:79:43:0C:33:25:D0:21
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1DEE3975890B34B89B238AB2E49DDC409F7FF401
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57349.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 57349
IP address blocks: 2a06:a005:a15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ee:39:75:89:0b:34:b8:9b:23:8a:b2:e4:9d:dc:40:9f:7f:f4:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=0DAB2D5EFD49747C58C687F81A79430C3325D021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:3f:11:4e:3e:80:84:c4:06:cf:58:a0:16:
98:58:a0:31:f7:3b:54:23:bd:ca:c5:65:95:a5:32:
11:e9:ea:03:0f:9d:84:34:72:fc:9c:37:53:d8:f2:
76:cd:9a:e5:4d:3b:4a:da:25:fd:64:b5:b9:35:ad:
d7:9d:00:75:5b:0a:ec:22:7e:37:2c:b7:07:52:8f:
cc:21:7c:7c:a7:29:40:43:a4:a7:f4:57:3f:34:de:
04:43:f0:d7:2e:01:47:de:25:19:10:ae:05:26:65:
eb:e6:47:df:20:3b:24:f3:62:5a:af:8c:52:a6:62:
62:1b:38:99:0b:e1:f2:e4:a2:03:f5:1d:56:bf:c8:
78:ca:3b:6d:7e:31:ab:0d:ae:6f:c8:7d:fe:26:6d:
90:b3:99:44:f6:de:16:83:c7:1f:10:cc:e3:93:11:
67:db:2a:e4:68:73:36:9a:0a:18:d4:8e:82:e4:66:
10:eb:0b:8e:c5:1d:6d:69:c1:7e:4f:d4:f0:33:94:
ae:f3:a5:9d:22:8e:72:22:b4:36:86:b5:75:8d:3b:
47:ad:72:4d:a8:3c:52:6a:bc:a8:fd:fa:ed:12:e7:
b3:fb:50:a3:58:33:5f:0d:e6:a6:0d:17:89:ae:46:
e1:72:ae:c7:c0:cf:b4:ea:ad:10:6c:fb:77:7a:cf:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AB:2D:5E:FD:49:74:7C:58:C6:87:F8:1A:79:43:0C:33:25:D0:21
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57349.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a15::/48
Signature Algorithm: sha256WithRSAEncryption
94:7a:1c:42:fe:fc:44:50:cb:da:44:f5:fc:0e:82:56:bd:d2:
4c:1f:38:76:f6:79:3e:82:ea:a7:1b:73:05:83:df:93:6f:8f:
89:3a:0f:6e:c1:6c:ab:e9:b2:2d:4e:a4:66:d7:6b:d3:d8:70:
37:f9:31:a7:ac:4b:8c:fe:35:9c:f1:10:bc:8e:9e:42:52:9f:
7b:79:3f:8f:28:10:28:ef:94:3a:e7:7f:47:8e:e2:6c:ab:18:
8e:b2:6c:1d:d1:12:fb:3b:2e:c0:09:b4:07:7f:5a:25:d6:2c:
e4:b2:51:34:33:db:cd:34:73:d5:d9:7b:d0:d3:de:58:91:de:
94:72:f4:9c:05:68:c3:2e:df:c8:c5:5c:ae:53:71:58:81:91:
e8:96:8c:c7:82:b3:96:29:a3:8c:33:56:cd:a7:3e:12:91:4e:
6f:af:c9:06:a1:f5:6b:35:ad:af:68:87:a1:59:69:de:dc:18:
a9:6f:08:76:43:49:d9:8c:98:39:2d:0e:cb:93:d3:74:e3:77:
5e:8c:fd:97:c6:eb:3b:20:2c:e8:48:2d:d9:84:89:3a:35:0d:
58:49:3c:5d:aa:d6:9a:3c:5c:6a:d7:45:d1:48:2a:c1:37:a9:
1f:b2:9e:10:01:a2:13:bc:14:c4:b0:9b:df:87:cf:17:88:87:
82:75:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org