Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57481.roa
File: AS57481.roa (raw, json)
Hash identifier: aQ2VxJMA9IV93PVA/1ki7OYu0vhMRdoox/swp6XNvJc=
Subject key identifier: 57:2B:10:86:29:E1:4C:70:52:6C:28:C5:C2:2E:2E:2D:3C:22:76:ED
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3715E39CC1D0CA3C116C1E75FB02E5612A6D3EF3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57481.roa
Signing time: Tue 05 Nov 2024 03:40:02 +0000
ROA not before: Tue 05 Nov 2024 03:35:02 +0000
ROA not after: Tue 04 Nov 2025 03:40:02 +0000
asID: 57481
IP address blocks: 2a06:a005:1d20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:15:e3:9c:c1:d0:ca:3c:11:6c:1e:75:fb:02:e5:61:2a:6d:3e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:02 2024 GMT
Not After : Nov 4 03:40:02 2025 GMT
Subject: CN=572B108629E14C70526C28C5C22E2E2D3C2276ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:17:81:97:f9:ba:eb:46:88:6c:81:43:22:
91:f4:9c:37:e5:31:0c:69:fa:f1:5a:9d:9f:26:ad:
3e:0f:3a:a5:21:ce:2c:2b:8a:a4:83:c2:63:39:f8:
1f:14:4e:f4:c4:bf:d5:11:bc:5d:d6:c8:4c:29:35:
53:44:20:72:c2:b2:5f:88:bb:fc:88:1a:21:a4:f2:
76:02:7c:4a:b0:9f:00:61:cc:e3:5b:15:c5:10:3f:
b5:60:a2:e0:c6:50:72:0d:99:e5:4b:b4:dc:fc:00:
23:1c:fd:fb:d7:8e:0d:0a:95:85:ba:18:05:5b:9a:
a9:e2:88:42:a8:a4:76:39:4c:ad:dc:47:fa:9b:fe:
e2:de:7a:b4:4b:49:5d:51:9b:41:cc:07:dd:94:5f:
40:71:94:90:ca:49:35:52:19:ab:1a:0e:c7:fa:0a:
fd:43:26:e8:88:02:d6:e4:13:96:52:b3:ac:f8:ac:
9f:3c:96:e5:cc:57:f3:15:67:60:b5:c7:ca:d7:40:
7b:6c:71:68:a2:2f:7f:8c:e7:51:98:9e:36:09:ce:
70:9f:6c:ab:d5:7f:55:72:9b:70:82:ff:6f:9e:d4:
7b:ac:37:12:22:8b:3f:ca:26:08:01:c1:80:17:e9:
d3:ba:ac:29:e4:96:bd:3f:02:92:9a:e1:26:c0:c0:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2B:10:86:29:E1:4C:70:52:6C:28:C5:C2:2E:2E:2D:3C:22:76:ED
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1d20::/44
Signature Algorithm: sha256WithRSAEncryption
68:45:42:7f:2b:52:0c:d5:a5:78:b6:74:72:ce:d5:ab:fe:f7:
5b:0b:6e:ff:57:0b:4a:11:81:10:b3:d9:43:c4:ca:bd:a6:89:
e4:9b:51:c1:40:f1:22:04:3c:b9:7c:ae:89:ca:5a:76:25:47:
52:b8:e2:35:0b:a3:5b:45:6b:ca:04:93:b2:06:2e:29:a2:11:
27:79:00:69:7d:af:0c:42:4e:c1:92:31:a5:38:14:0d:df:36:
2b:e4:01:d0:59:ca:db:5b:27:20:2f:fa:92:41:4b:3f:7a:4a:
13:2d:e6:fa:13:99:be:bf:8b:41:37:16:76:54:c1:c6:5a:f8:
8a:47:e3:11:af:39:f7:7c:1e:92:36:fe:38:b0:25:f0:8b:1b:
3b:ba:dc:90:a9:d1:41:f5:ce:e4:b2:d2:de:ab:1a:1d:84:5d:
f2:e6:b2:3b:22:71:47:40:38:76:bf:81:14:32:df:ea:3f:19:
87:31:31:04:70:76:f6:32:11:b9:a8:7c:70:b7:bf:28:3c:0f:
66:61:f2:63:28:46:62:c7:c6:8e:65:6f:40:dd:a3:df:f2:3a:
90:56:fc:b6:ca:f4:67:07:2c:97:16:a7:7c:d4:97:ba:2c:76:
b2:14:ee:f2:8a:45:b3:22:5a:e9:4c:99:fb:e2:6e:ca:a1:1c:
20:69:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:56 2024 by rpki-client on console-ams.rpki-client.org