Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57851.roa
File: AS57851.roa (raw, json)
Hash identifier: D4Yo0Vcfdl6x5iUaZKhaTNQHM81zbwMocylh61YQwSo=
Subject key identifier: EC:2B:3F:9C:26:FC:03:35:45:3A:33:EF:13:66:37:05:0A:25:49:21
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0C92A5B9CF680F1D0096DE92B89B34A3CC81E546
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57851.roa
Signing time: Mon 15 Jan 2024 16:44:21 +0000
ROA not before: Mon 15 Jan 2024 16:39:21 +0000
ROA not after: Mon 13 Jan 2025 16:44:21 +0000
asID: 57851
IP address blocks: 2a06:a005:1802::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:92:a5:b9:cf:68:0f:1d:00:96:de:92:b8:9b:34:a3:cc:81:e5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 15 16:39:21 2024 GMT
Not After : Jan 13 16:44:21 2025 GMT
Subject: CN=EC2B3F9C26FC0335453A33EF136637050A254921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ce:62:22:58:b4:60:14:5b:58:f0:15:d5:19:
65:95:84:3c:af:b0:e8:be:02:2c:d9:fe:11:44:f1:
6a:89:6e:08:d5:5f:85:16:ab:e0:c8:18:c3:65:fb:
f7:c9:97:5b:99:ca:af:20:8f:8b:46:74:e6:6b:86:
03:38:db:06:d2:ca:e4:db:b0:48:42:de:90:5d:74:
59:7e:06:70:0a:76:64:84:ca:56:1b:cb:6b:bd:99:
f3:ba:68:6b:98:1f:94:5b:9f:04:86:2f:89:7b:dd:
64:df:ed:a9:c9:d1:c0:b7:dd:16:eb:d0:40:49:f7:
33:c5:c3:07:a1:44:fd:4a:2d:24:b8:ae:f3:39:05:
33:3d:6e:32:37:bb:5b:b2:40:84:5a:b6:b5:27:67:
82:99:91:6f:45:49:2f:30:24:16:48:fa:f4:5e:d5:
86:5b:7d:67:1a:7f:11:85:f5:0b:c8:ea:26:4e:8b:
da:82:67:66:fb:17:cc:b8:f2:d5:c3:cb:25:f7:6b:
86:64:ee:60:7d:57:2e:0c:2a:b6:c3:4d:f8:49:71:
c3:85:a9:39:78:a2:27:b0:53:49:22:6e:0a:08:a7:
90:7e:ea:9c:f4:14:1e:41:12:7d:b9:33:66:77:56:
d1:e6:99:18:97:94:b5:12:f3:a8:6a:cb:46:1e:28:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2B:3F:9C:26:FC:03:35:45:3A:33:EF:13:66:37:05:0A:25:49:21
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1802::/48
Signature Algorithm: sha256WithRSAEncryption
a7:80:e9:c1:e8:5d:65:5a:5f:84:a1:27:c7:6d:89:3b:c4:90:
e8:b2:3b:39:62:20:b3:ed:03:c9:87:96:d8:2b:95:6e:a7:4a:
68:17:41:96:45:44:45:39:25:ef:17:7a:d3:ee:6f:0e:21:4f:
ea:f4:c8:8e:fd:81:8d:34:98:3c:6a:09:30:f0:75:8c:4f:3b:
12:af:58:8d:46:73:00:fd:68:62:c6:fd:3f:36:fb:c3:f2:9c:
03:d7:c9:8c:fd:1f:25:78:e8:b0:21:92:ef:0a:63:49:89:bb:
63:54:94:e0:e5:b6:75:37:08:d1:51:3a:ca:57:42:c9:39:f6:
50:a7:69:7c:e4:3d:4f:64:55:9a:52:df:a9:a9:a1:b2:60:a6:
fd:07:82:40:bb:f5:0f:18:70:3b:36:32:9d:96:7f:72:ac:2e:
7d:f3:3a:d9:de:1e:7f:01:80:5d:22:9d:86:74:92:0d:75:fa:
e9:bb:6e:77:08:f7:e7:25:97:88:37:84:0d:96:52:37:fa:6c:
7c:a8:2d:ee:07:2f:af:1d:cf:75:ad:ff:ec:ed:03:0a:8a:89:
bf:cb:4e:c5:a0:dd:65:3f:28:8b:71:1e:bd:d1:93:6b:70:3d:
69:2c:ca:99:7f:88:a4:8b:fa:47:a8:1d:7d:6e:8c:88:6a:06:
c9:41:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org