Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57974.roa
File: AS57974.roa (raw, json)
Hash identifier: jpfFEYuxMtDIjXHWdvr63KmcENjVwbkKKDt+/vrQ5no=
Subject key identifier: 49:64:FC:BF:91:C1:21:0A:DA:4E:27:5E:98:C8:D3:AE:AE:A9:C0:F6
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3E47C4E789D235058D2D533E90E13886338C4926
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57974.roa
Signing time: Wed 21 Feb 2024 02:44:24 +0000
ROA not before: Wed 21 Feb 2024 02:39:24 +0000
ROA not after: Wed 19 Feb 2025 02:44:24 +0000
asID: 57974
IP address blocks: 2a06:a005:45b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:47:c4:e7:89:d2:35:05:8d:2d:53:3e:90:e1:38:86:33:8c:49:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 21 02:39:24 2024 GMT
Not After : Feb 19 02:44:24 2025 GMT
Subject: CN=4964FCBF91C1210ADA4E275E98C8D3AEAEA9C0F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:7e:b5:94:c1:3e:90:61:24:01:3c:63:60:
3d:c0:01:5e:17:bf:36:81:f2:56:68:a8:3a:9f:b1:
d0:2f:38:a6:e4:18:f8:9d:95:9c:34:b0:7a:79:99:
90:da:4f:83:88:01:e6:46:31:8f:88:47:10:87:07:
ab:12:56:bb:03:80:01:92:41:21:02:02:ee:c1:ee:
58:45:87:e8:85:23:93:39:86:a4:d9:2a:53:cc:3b:
36:0e:45:cc:8c:11:cf:df:8a:c6:ef:5e:de:ed:72:
38:0c:9c:78:fe:00:62:37:9a:cf:23:fb:e4:c2:10:
53:e2:5d:5e:23:38:82:d0:d4:70:d7:aa:4b:6d:8f:
cc:25:63:5e:d6:14:2d:06:6e:41:8f:3f:68:10:e9:
d0:5b:76:43:fe:52:09:8a:e8:e9:52:a8:b1:4c:88:
4b:88:61:30:35:32:41:d6:1e:23:84:7c:de:68:02:
b7:35:40:a2:0e:3a:c4:68:24:4f:ec:1a:e8:83:a7:
d6:83:6f:3c:35:d1:03:72:0b:88:98:14:4d:62:ab:
8d:9b:9c:e7:b8:0b:36:ad:33:ca:a0:02:cd:56:00:
56:83:f8:57:1c:81:f4:48:00:7d:04:91:91:41:d8:
24:23:9e:9c:3d:18:0b:07:e2:b5:d0:3f:e5:94:ad:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:64:FC:BF:91:C1:21:0A:DA:4E:27:5E:98:C8:D3:AE:AE:A9:C0:F6
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS57974.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45b::/48
Signature Algorithm: sha256WithRSAEncryption
2e:23:b5:63:06:4d:46:3a:6b:32:0d:96:e9:16:7e:ea:db:4b:
ba:aa:65:82:f5:1a:cf:4d:13:ca:fb:b7:fa:71:a3:70:e1:a2:
01:27:38:40:46:c8:f9:9e:d4:60:d7:45:f8:82:ed:61:94:4a:
48:b5:a8:15:dd:96:0a:36:65:be:89:72:25:21:d6:6c:5b:2d:
4c:a2:9e:b8:d8:9b:3e:a6:c6:34:98:e7:51:1d:4b:79:1a:dc:
e6:aa:26:d2:11:c1:f5:14:15:4d:21:6f:66:15:bb:bd:45:76:
19:0b:fc:6d:ee:01:91:32:1d:f2:e6:6d:3a:05:d4:1c:49:89:
08:fa:fa:40:3c:29:31:46:ad:25:0d:0b:25:81:20:b1:fd:f2:
3b:13:9e:7d:a5:72:89:72:3c:8a:e7:71:4f:0e:3f:14:d4:3b:
e6:94:ba:e0:95:fa:d5:4f:b0:4b:29:62:cc:a0:ff:b3:50:d9:
15:70:a4:09:13:c8:28:6c:34:1e:61:81:65:fe:4d:d4:6a:4d:
07:fd:7a:46:4e:8c:e0:95:d6:7c:8c:f0:83:32:ae:35:e3:0c:
cb:e5:79:fd:59:c2:33:d3:fe:36:fd:7a:ae:53:a0:74:36:d7:
3a:9a:1a:85:89:d3:9b:51:9f:5a:dc:43:e2:4e:07:d1:51:38:
c9:20:5c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org