Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS58015.roa
File: AS58015.roa (raw, json)
Hash identifier: p556YB50DdOzqmyVIsReoPRWqS16lV87P5TPqga4Km4=
Subject key identifier: 31:B5:65:F2:CA:DF:CC:87:67:06:9A:B8:8F:32:35:58:26:78:F0:C7
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2BDAD3E0C65DDEBFCEEEAB74C30077C264E090B9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS58015.roa
Signing time: Tue 05 Dec 2023 02:44:10 +0000
ROA not before: Tue 05 Dec 2023 02:39:10 +0000
ROA not after: Tue 03 Dec 2024 02:44:10 +0000
asID: 58015
IP address blocks: 2a06:a005:4dc::/48 maxlen: 48
2a06:a005:4dd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:da:d3:e0:c6:5d:de:bf:ce:ee:ab:74:c3:00:77:c2:64:e0:90:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:10 2023 GMT
Not After : Dec 3 02:44:10 2024 GMT
Subject: CN=31B565F2CADFCC8767069AB88F3235582678F0C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:c7:b9:59:ee:36:20:37:91:f4:8c:44:86:
83:ff:12:a9:df:0b:10:14:7a:00:c4:95:98:47:6d:
38:c6:7e:19:47:df:01:62:b6:fe:3a:9d:a6:50:2e:
d1:df:ce:fa:0d:37:0d:e9:c3:c2:34:49:0d:ff:0d:
1e:7b:81:eb:a9:fc:39:80:ca:15:e5:61:f1:c6:72:
03:91:ea:cf:81:7f:8e:0a:98:a5:fe:e0:e3:77:17:
14:78:c6:d3:9e:d2:69:f6:9e:13:95:0e:b6:39:96:
5a:9e:d2:3f:20:58:7d:88:59:3b:2f:60:bc:69:f5:
54:f3:b8:c5:e9:4b:8f:af:22:3b:56:7f:3b:1b:da:
f9:f3:54:ee:fb:37:2c:87:5e:14:30:97:27:3c:57:
f3:11:22:ee:40:12:b6:2b:eb:d9:8d:9f:4b:0c:cc:
2e:09:bc:44:6c:5b:31:5e:95:b4:0a:e3:88:21:03:
5f:99:75:96:49:b3:70:47:a3:39:c1:37:db:64:1f:
6f:09:76:82:05:44:24:d1:11:6c:91:43:9a:1b:a9:
ed:af:7b:9c:53:02:c5:20:a5:46:2f:4c:83:0a:51:
7e:9a:a2:da:6a:84:49:91:7f:6b:5e:2f:0d:09:ec:
80:bd:d5:8d:71:08:6b:33:ca:3d:fe:bc:23:87:71:
88:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B5:65:F2:CA:DF:CC:87:67:06:9A:B8:8F:32:35:58:26:78:F0:C7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS58015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4dc::/47
Signature Algorithm: sha256WithRSAEncryption
a3:d0:86:29:66:4a:bb:15:83:7a:9e:90:74:66:dd:81:6b:9e:
72:b9:96:ab:07:30:7e:35:46:86:f7:20:69:6d:d4:cf:49:b6:
4f:a1:98:ef:d7:58:d6:d4:1d:00:6b:aa:a1:a0:b3:5c:5f:21:
6f:e9:7a:58:56:eb:bd:9c:3a:79:12:73:60:bc:fb:bd:ca:5d:
ea:bc:56:6d:a0:45:8d:66:95:5a:ea:76:d9:c1:6f:b9:cc:4a:
e5:cf:7c:5f:dc:fa:81:6b:db:d0:6d:b5:59:58:7e:69:b0:98:
0e:84:3d:70:71:8e:50:0b:10:48:19:22:d4:d0:82:0b:d3:69:
de:80:1f:92:53:3d:be:5c:68:4d:39:60:7a:fb:69:04:46:02:
1a:6f:eb:e3:df:2a:82:81:84:13:40:1d:94:f1:24:b6:1d:a0:
2f:e2:a3:f1:8b:2a:dc:2c:d9:8c:38:53:b2:57:8a:f5:10:b0:
c0:ab:cf:9b:33:8c:2d:da:11:6e:a5:a9:c1:f3:64:12:82:db:
8e:65:81:6b:b6:11:c7:30:e1:81:57:c6:d4:9d:8b:13:7f:65:
7b:1e:e0:43:78:ec:c5:c3:83:02:c9:9f:e1:40:e6:95:90:57:
06:5d:ea:f9:12:f1:1b:29:d1:86:45:40:17:c3:98:04:f8:3d:
9c:9e:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org