Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57429.roa
File: AS57429.roa (raw, json)
Hash identifier: KENGvSVDs5EOxeGA9pHO+eL623iqzDtSu2jhocgWG8c=
Subject key identifier: B1:57:92:6A:90:C6:EC:C6:FD:EC:FA:43:AF:E9:A4:F0:1B:39:40:E3
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3036725B7A6B178884798E97E4A40D9E587A0DB3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57429.roa
Signing time: Tue 05 Nov 2024 03:40:06 +0000
ROA not before: Tue 05 Nov 2024 03:35:06 +0000
ROA not after: Tue 04 Nov 2025 03:40:06 +0000
asID: 57429
IP address blocks: 2a06:a005:190::/44 maxlen: 48
2a06:a005:1a0::/44 maxlen: 48
2a06:a005:1b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:36:72:5b:7a:6b:17:88:84:79:8e:97:e4:a4:0d:9e:58:7a:0d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:06 2024 GMT
Not After : Nov 4 03:40:06 2025 GMT
Subject: CN=B157926A90C6ECC6FDECFA43AFE9A4F01B3940E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fd:da:1e:ef:a1:ca:fc:b1:b1:cf:07:2c:5e:
fd:01:e0:e5:ff:af:6a:44:f1:ef:53:ec:3a:67:34:
96:dd:ef:4a:a0:56:56:67:bb:d0:56:48:c4:ba:9a:
3c:5e:23:23:f8:b6:02:1e:92:0d:87:fb:cd:51:d6:
06:44:16:f0:8d:f7:0a:b9:7e:2d:9b:b6:dc:b5:38:
b4:27:bb:7f:92:39:b3:f5:22:b3:99:2b:f6:d9:c9:
94:4f:79:a3:b5:9b:61:9e:fd:5d:fb:76:96:52:6d:
01:24:e6:c2:c6:62:f2:5e:78:5d:ba:c5:98:10:0d:
1c:96:fc:f9:3d:d5:a7:d7:ff:da:9d:64:91:16:63:
76:c2:7d:dd:a9:49:09:fb:81:e8:4a:e0:28:9e:6f:
d5:aa:0e:4f:2e:0d:0e:5a:07:72:f5:b5:74:12:5a:
5e:b3:8b:b0:68:63:1f:86:4a:d6:7d:e7:4a:b9:85:
b5:ec:cb:5d:5e:63:0f:1f:af:89:dd:c9:f5:4f:50:
ad:99:72:ea:b4:8c:32:ca:fa:0d:b0:b5:29:e3:99:
87:0e:32:0f:91:36:f7:d4:78:2d:3d:fd:ad:61:b5:
09:64:4d:7a:66:5d:11:f6:73:50:0d:a1:93:d4:f2:
45:93:f9:3b:51:71:57:fe:35:14:67:05:23:25:3d:
e4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:57:92:6A:90:C6:EC:C6:FD:EC:FA:43:AF:E9:A4:F0:1B:39:40:E3
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:190::-2a06:a005:1bf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d4:6f:79:68:86:cc:f9:3a:3b:19:7a:ef:4a:43:86:ae:6d:29:
4f:fe:87:a9:4f:b0:e1:b7:44:8c:bf:75:f2:15:55:17:09:5e:
38:75:0a:ba:c3:84:85:1a:ba:0c:8c:34:b3:15:02:e0:7c:11:
0f:a0:49:7e:2c:d2:54:fa:8a:55:64:9c:80:06:a9:42:b1:5f:
70:32:5a:72:09:5a:bc:41:48:2e:8f:1d:40:70:02:53:54:9d:
0e:90:45:1e:71:4b:f3:1f:6a:f5:97:6f:fe:a8:a7:6f:8c:6f:
f6:15:cf:12:ba:60:7c:5f:46:80:0e:72:99:a8:71:4a:ab:a7:
05:46:ae:e5:85:23:70:e3:23:94:67:02:ee:2d:b1:b4:51:71:
26:4c:8c:0c:23:8d:af:e2:e2:45:78:e1:91:2e:74:2b:36:88:
98:dd:a2:96:b3:40:f3:0e:99:5c:e7:8c:90:88:92:7e:20:55:
01:67:f2:1d:d8:b5:bc:38:ee:43:63:87:b8:a2:00:25:29:66:
60:fd:2b:15:22:df:32:cf:a6:81:1d:3d:bc:1b:cd:e0:a7:9a:
c3:b3:71:62:b0:15:9e:b2:fc:11:97:30:44:bc:86:8e:fa:98:
31:64:63:7c:c4:6b:28:67:bd:e8:f1:02:a0:de:3b:01:d7:a3:
80:b3:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:56 2024 by rpki-client on console-ams.rpki-client.org