Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60379.roa
File: AS60379.roa (raw, json)
Hash identifier: ACUy+yme4VzeugBrTc2emi02fMBnpCsmYTOKz7E7ASw=
Subject key identifier: 0F:CC:DE:C5:07:1F:13:71:A4:AC:E9:A5:E2:AC:79:A0:6E:BB:C2:42
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 340E04015025F8957DD37000BC747D15EAAB050A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60379.roa
Signing time: Tue 05 Nov 2024 03:40:05 +0000
ROA not before: Tue 05 Nov 2024 03:35:05 +0000
ROA not after: Tue 04 Nov 2025 03:40:05 +0000
asID: 60379
IP address blocks: 2a06:a005:127b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0e:04:01:50:25:f8:95:7d:d3:70:00:bc:74:7d:15:ea:ab:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:05 2024 GMT
Not After : Nov 4 03:40:05 2025 GMT
Subject: CN=0FCCDEC5071F1371A4ACE9A5E2AC79A06EBBC242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:eb:de:b9:cc:49:ef:d1:05:c3:7b:1f:dc:fd:
a9:f5:94:7d:2d:79:8c:cc:f8:29:87:dc:db:66:e1:
11:2c:84:0b:89:61:57:f1:46:6b:ae:4d:f6:f5:33:
6b:6e:1e:d0:36:af:ff:3f:c4:7d:07:d2:c1:56:8b:
cd:b5:25:93:0a:c1:09:1b:92:34:42:de:b0:d3:92:
09:87:ff:2b:28:59:0e:29:9f:53:51:be:2c:25:f6:
b8:d1:eb:de:b7:d8:40:22:18:47:36:50:8e:87:de:
9e:dd:e8:e1:ca:ea:df:d5:d7:90:4b:98:50:8a:f4:
12:de:29:51:b3:70:09:8f:07:b8:aa:f6:44:5a:31:
de:ae:b9:10:88:23:26:99:71:d6:8b:4e:32:aa:91:
ba:11:88:2e:bd:49:08:de:de:89:2a:97:37:d5:c6:
be:5d:d8:9b:c9:da:d0:df:27:09:7f:e0:cd:5d:d1:
60:88:c7:5d:fe:31:56:0c:1b:9a:5e:c4:f8:91:2b:
67:e6:52:c1:5f:8b:12:b6:8e:2d:cf:78:b3:e6:d9:
28:80:64:8a:26:ba:b9:02:9b:39:8c:f3:f2:93:e2:
2b:a6:cd:47:63:13:51:9a:41:42:1c:01:a8:01:77:
65:43:ce:3a:d7:3e:b9:cd:f8:e0:c6:2a:ee:ff:f9:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CC:DE:C5:07:1F:13:71:A4:AC:E9:A5:E2:AC:79:A0:6E:BB:C2:42
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60379.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:127b::/48
Signature Algorithm: sha256WithRSAEncryption
3e:f1:87:51:3c:3f:6a:99:0a:aa:a1:71:62:94:20:33:57:42:
83:40:b9:e0:83:33:55:37:95:83:34:87:3b:7b:0e:df:ce:b7:
65:3e:72:59:24:d5:12:aa:65:02:51:5d:1d:4c:4a:20:03:da:
5a:92:1f:ab:f8:50:c8:89:ff:99:bb:32:0a:4e:db:3f:30:e6:
51:7a:7d:28:9d:89:dd:57:db:21:a5:e5:6a:e5:20:94:ed:fa:
e4:10:f1:e7:df:88:c5:20:a6:22:e6:7f:90:56:59:ff:cb:e4:
07:67:78:ef:93:ea:b8:db:77:28:fa:4e:d3:08:4b:e1:ab:15:
36:07:25:28:a8:b6:6a:91:0d:a2:42:f4:7d:54:0a:dd:a8:cf:
f0:cc:ab:aa:29:2e:38:f8:00:af:27:2c:57:ef:95:d9:44:e6:
b3:62:1f:bb:42:8a:59:e1:d5:f7:13:7a:45:ae:f9:cc:e6:c7:
20:0f:64:d9:b7:ca:60:64:bb:52:49:31:3c:b6:65:51:91:ef:
d3:f6:02:d2:f3:1e:5d:f5:cf:58:a6:31:fc:80:39:fe:4e:91:
d0:2f:c4:1e:1e:49:8d:a3:88:b8:1b:a6:34:1e:94:34:1e:ad:
1a:9d:cc:38:89:70:8e:4b:0e:00:42:0a:78:84:38:20:c8:06:
62:71:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:37 2024 by rpki-client on console-fra.rpki-client.org