Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS58015.roa
File: AS58015.roa (raw, json)
Hash identifier: DC06wxxQBYYBS/OBM3Rnj5N47Ira2oQXE27OgrteyHg=
Subject key identifier: 9F:B1:6B:38:50:DF:B6:63:7E:FB:8C:24:5B:25:14:37:BA:C2:65:85
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0B5E84AA97E04CFC143F807DFFFFBDC48DD19E09
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS58015.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 58015
IP address blocks: 2a06:a005:4dc::/48 maxlen: 48
2a06:a005:4dd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:5e:84:aa:97:e0:4c:fc:14:3f:80:7d:ff:ff:bd:c4:8d:d1:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=9FB16B3850DFB6637EFB8C245B251437BAC26585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:e6:be:32:97:0c:27:38:c6:09:3c:bd:c2:
06:ac:0e:85:ff:30:48:c3:06:7f:97:48:42:cb:bf:
77:39:8d:88:26:1f:41:9c:bd:dc:24:0d:5e:80:c0:
4a:f7:92:56:8b:28:b4:89:02:5e:13:a7:9a:ba:f4:
b0:89:c5:53:f1:23:27:8d:28:95:9a:52:41:ad:3d:
cc:eb:46:5a:a6:09:b8:74:62:f5:11:9b:6e:1e:f0:
07:3f:91:b8:28:2f:f8:3b:90:c1:24:19:49:91:6f:
db:50:70:4c:47:a1:0e:b8:ed:9e:80:f3:32:6b:4a:
a8:ce:f5:2b:80:75:ac:89:73:a8:ef:0a:8d:c1:90:
ef:8c:a0:9d:da:7f:65:e7:52:22:e8:3b:55:fb:62:
87:ac:fb:78:ea:ab:28:18:7d:d9:e9:67:54:15:bd:
b2:46:a0:9f:77:50:e3:db:bf:47:cc:c5:b0:f7:91:
80:ee:c8:ea:4d:8a:77:9c:a3:47:44:f1:ab:08:f7:
b2:0f:25:6d:0a:6f:db:20:87:74:0f:d8:70:bf:43:
d0:d2:4b:5d:0f:43:99:7e:4e:44:8d:9a:4c:0a:0e:
50:60:df:94:fd:96:ba:1a:65:ce:03:2f:9d:d5:c0:
b4:b8:15:75:b3:67:48:94:42:62:8b:da:c4:fc:73:
0c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:6B:38:50:DF:B6:63:7E:FB:8C:24:5B:25:14:37:BA:C2:65:85
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS58015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:4dc::/47
Signature Algorithm: sha256WithRSAEncryption
01:72:d7:8a:14:c6:7c:a7:4b:6a:84:6c:d5:d1:0b:a4:52:e9:
47:c9:80:04:d8:10:7c:30:a5:d0:fd:fa:ca:2f:84:2b:cb:62:
bd:e8:66:8a:3e:90:72:63:30:66:ef:5b:77:ec:eb:31:60:41:
e7:f7:49:f4:f4:70:b0:76:ef:ad:35:45:1b:5c:a8:74:6b:9f:
09:69:9a:14:da:91:5b:c1:16:bf:f9:12:f7:63:0f:3c:db:29:
59:2d:c6:b0:79:28:ee:a5:74:83:ed:d5:64:f9:8b:59:bb:d3:
5a:a2:b5:86:dc:cd:4e:76:cd:95:75:f6:5b:34:5c:6e:ab:a8:
fb:8f:92:6b:1a:c5:03:19:1d:f0:84:b5:e7:a3:e8:3d:90:d3:
35:fb:c1:a7:f0:67:42:5a:42:b0:a2:3b:12:a0:46:62:57:c0:
62:09:26:b6:bf:4a:b8:02:a4:52:62:98:96:98:4d:35:49:47:
8c:22:15:d1:4e:bf:53:0c:dc:7e:f8:19:43:6b:36:a8:76:b3:
9b:bf:55:8e:a7:1a:93:2b:9a:b5:fc:9c:2e:37:9a:38:00:ec:
d1:2e:51:eb:79:9e:a7:a2:a4:c4:92:df:c4:e6:a9:ae:c9:ab:
cb:9a:7a:ea:19:c0:42:87:8e:57:0a:04:66:17:b7:5d:81:de:
14:18:c2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:37 2024 by rpki-client on console-fra.rpki-client.org