Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS58270.roa
File: AS58270.roa (raw, json)
Hash identifier: rSriomnqitnfJiK1tlboIn+zvmdWNLibSLHTbGxUBfg=
Subject key identifier: 07:84:C5:28:5C:11:F2:75:C3:10:5A:07:97:CF:71:16:30:6E:9F:12
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 28B681C60B92C6E4FA0FCA575243913299927951
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS58270.roa
Signing time: Sat 25 Jan 2025 04:40:16 +0000
ROA not before: Sat 25 Jan 2025 04:35:16 +0000
ROA not after: Sat 24 Jan 2026 04:40:16 +0000
asID: 58270
IP address blocks: 2a06:a004:2000::/36 maxlen: 48
2a06:a004:3000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:b6:81:c6:0b:92:c6:e4:fa:0f:ca:57:52:43:91:32:99:92:79:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 25 04:35:16 2025 GMT
Not After : Jan 24 04:40:16 2026 GMT
Subject: CN=0784C5285C11F275C3105A0797CF7116306E9F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:84:dc:f2:8e:79:e1:c2:c8:59:a9:9a:d9:
f0:35:c2:89:61:0e:9c:22:59:f9:25:19:be:cf:5b:
3e:e4:41:75:4d:ec:46:55:8d:c0:73:3f:27:fa:6f:
c9:64:6d:c5:73:d8:c6:80:f6:88:12:4d:72:66:29:
72:50:95:00:04:bb:93:4c:7f:69:60:ce:27:85:3e:
18:99:ab:d5:3c:a5:c5:15:77:14:c0:50:b9:63:90:
06:f1:07:bf:47:1d:2a:b2:a0:15:a8:85:0b:ea:23:
30:44:96:e3:9c:33:c7:64:04:97:36:30:5d:22:68:
0f:ed:d5:af:ea:c5:77:84:7e:40:70:b6:d5:12:f7:
63:2b:40:71:9a:50:bf:b1:2c:c8:34:09:b5:96:73:
36:b6:95:cb:d9:50:12:94:b1:f2:ae:b3:bf:41:9e:
65:cd:dd:aa:a3:50:51:b1:2c:92:53:7b:4c:be:e0:
a6:8c:25:a7:d9:0d:fb:c5:d3:1d:b0:03:fb:fd:fe:
72:4f:73:63:15:35:4b:27:a9:d5:f2:15:ec:1e:ff:
8c:c0:fb:b6:ed:ca:79:26:2c:81:78:26:ce:5d:a2:
00:88:eb:56:f6:b4:09:90:54:0a:8e:53:7f:b7:c9:
16:69:13:df:6f:9e:85:f5:71:0d:45:fd:79:c4:e2:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:84:C5:28:5C:11:F2:75:C3:10:5A:07:97:CF:71:16:30:6E:9F:12
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS58270.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a004:2000::/35
Signature Algorithm: sha256WithRSAEncryption
60:2a:36:28:f7:0d:98:91:52:88:2e:fe:23:1b:96:d4:c1:74:
74:80:06:16:cb:12:76:6d:52:da:07:02:9e:b4:bd:89:c6:5a:
eb:28:2b:92:cc:1d:3a:dc:11:eb:19:79:5d:95:2d:9f:45:b7:
ce:41:c9:aa:6c:0f:3e:72:8b:92:28:75:be:f7:8c:c3:27:ed:
e6:f0:19:95:43:6f:04:d4:a1:29:19:ef:aa:a9:41:41:0d:7a:
d6:6f:27:2f:49:c6:5e:0e:d9:b7:7d:99:b1:6d:5e:ec:19:1d:
1e:db:8c:9b:9c:ab:95:1a:92:00:24:40:ae:e9:7d:91:e8:81:
d2:10:31:a0:cf:ad:7f:92:0e:16:d6:12:1c:17:8a:60:68:ed:
36:1b:06:77:b2:a7:b1:67:65:82:01:fd:15:24:7d:c8:d0:66:
34:94:16:a1:04:83:e5:02:44:f8:ca:32:3f:e8:37:22:6e:2c:
e5:16:7d:79:3c:67:5d:9a:87:a1:d3:f8:9b:9d:cb:14:e8:69:
7b:c0:fd:a7:ba:83:63:b7:20:fd:a2:57:6c:74:86:9a:86:0e:
85:9d:00:56:8a:b2:56:fd:15:88:01:b2:f9:40:3e:8e:bd:ee:
4c:58:ca:4f:b1:ce:d5:b0:7e:9d:55:00:d5:a8:8e:e2:6b:5b:
e5:2f:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:24 2025 by rpki-client