Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57860.roa
File: AS57860.roa (raw, json)
Hash identifier: GlFt3TwMwEwNSzMdVPbEQCoIHVZz8/hen8mVqDMmnAo=
Subject key identifier: D3:FE:61:D3:DD:60:31:A6:1B:63:DC:78:B1:2A:7E:80:A5:10:F4:A6
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0A8F76C40AF4D722FA6DAC0A00B3FE42723DA040
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57860.roa
Signing time: Tue 05 Dec 2023 02:44:10 +0000
ROA not before: Tue 05 Dec 2023 02:39:10 +0000
ROA not after: Tue 03 Dec 2024 02:44:10 +0000
asID: 57860
IP address blocks: 2a06:a005:2d5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8f:76:c4:0a:f4:d7:22:fa:6d:ac:0a:00:b3:fe:42:72:3d:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:10 2023 GMT
Not After : Dec 3 02:44:10 2024 GMT
Subject: CN=D3FE61D3DD6031A61B63DC78B12A7E80A510F4A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:3c:13:48:d3:f2:0a:59:4a:df:9f:0f:46:
95:7b:e0:44:ad:fd:fc:18:28:30:54:0b:1f:18:4c:
66:b8:0c:d1:b9:de:5c:05:ff:7e:82:b2:94:3b:75:
12:24:0b:e1:94:75:d5:e1:1c:59:1c:26:e4:5d:cc:
a9:b5:4c:40:4f:cd:07:43:d1:da:46:d4:12:03:b0:
bd:07:d6:94:b6:86:de:76:6d:d8:b9:71:10:03:a5:
e6:ea:03:6f:2f:3b:f3:f2:97:12:55:91:28:2e:76:
8c:a0:f5:b1:5c:e7:d5:69:19:b6:4e:48:15:e1:2c:
e6:79:d7:94:63:da:f5:4e:c5:8e:85:b3:e7:da:73:
3e:b3:50:af:a2:4c:2d:5f:36:46:a6:f8:d8:85:fc:
bd:43:e8:a9:df:00:27:c2:6c:aa:ac:8b:1f:43:8d:
9d:1f:96:8c:fd:3c:06:ad:69:0e:9d:7c:e1:a5:cf:
36:4d:50:51:ff:86:0c:29:c5:e9:2b:d8:cd:c2:d7:
1a:4d:3b:b2:22:98:e8:40:91:29:57:cb:53:17:31:
fd:8b:d8:07:73:7e:2d:e8:13:41:2a:3d:39:42:17:
d7:5d:fd:74:51:b5:9b:6b:dc:fc:28:7b:60:c7:ab:
ce:de:3c:39:af:2a:a3:f9:39:e4:81:97:8c:11:e9:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:61:D3:DD:60:31:A6:1B:63:DC:78:B1:2A:7E:80:A5:10:F4:A6
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57860.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2d5::/48
Signature Algorithm: sha256WithRSAEncryption
67:be:2c:03:d6:45:08:ac:f8:3e:42:79:44:fd:3b:43:b7:00:
9e:50:ba:81:a4:09:16:95:a5:e4:0f:79:df:95:e6:ab:91:55:
38:ed:f6:f6:54:f4:ca:29:95:52:ba:ae:86:93:f2:9c:b3:90:
1c:8d:a9:d1:34:25:7c:16:88:7f:e9:2d:08:ed:c2:e1:de:e6:
d8:5b:8f:83:65:76:04:19:0c:44:f5:be:96:21:ab:82:30:c9:
32:60:4d:b8:ef:a4:1c:b9:6c:1c:ef:47:bc:29:a0:54:fe:33:
21:3f:d3:6d:f3:ed:0c:c6:9b:1e:62:fb:f8:d7:19:a0:97:43:
54:0e:4d:ed:6c:43:98:4c:54:33:a3:3a:1f:12:55:19:1c:46:
a5:e3:1c:06:8f:5d:0e:25:90:64:d1:f0:0f:bb:ed:46:ff:fe:
95:21:7f:3e:fb:71:ef:b4:5a:72:ef:54:de:6d:4b:f1:5a:fd:
a1:ce:15:23:c9:28:d8:0c:1e:6e:b8:46:4a:c6:bc:0c:2f:63:
c5:54:67:6e:fc:cf:de:f1:59:b3:bd:d2:4b:a5:ea:86:9c:7f:
23:ad:51:68:cd:0d:e1:4f:9c:03:db:ee:23:81:43:fa:76:4b:
6e:21:2d:be:bc:39:9d:3e:0c:36:05:2f:78:18:cc:03:2f:65:
d2:7b:03:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org