Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60379.roa
File: AS60379.roa (raw, json)
Hash identifier: U04arttKnK+O1T60BTDKRY817NdaUDEyAMPQ+cak0ps=
Subject key identifier: CC:22:69:1D:AB:71:C2:6F:64:60:B6:F6:30:B0:A3:6B:80:6A:EE:0C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6F297285C527861CB8BD7E4DBECBB294484AFCFD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60379.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 60379
IP address blocks: 2a06:a005:127b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:29:72:85:c5:27:86:1c:b8:bd:7e:4d:be:cb:b2:94:48:4a:fc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=CC22691DAB71C26F6460B6F630B0A36B806AEE0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:26:b5:33:9e:f4:90:17:e5:ef:b5:30:ab:
fb:05:1a:c1:f5:0f:7a:0c:c3:87:5e:2a:b5:8c:d0:
c3:3a:41:56:30:a4:1a:e4:51:0e:12:87:f6:2b:5f:
56:7e:73:4d:50:dd:64:ba:d7:e0:4d:4a:96:85:40:
0b:61:17:45:0b:98:bf:a2:a5:95:65:fa:24:93:8d:
95:82:07:e5:a9:65:4f:b3:2c:1a:4b:1e:63:dd:a5:
17:cb:8f:5d:01:d7:6e:37:10:51:59:9e:bf:66:eb:
28:a9:c3:07:70:95:2d:31:ea:31:97:65:94:da:e2:
50:f7:8f:54:97:43:31:10:91:cb:95:9a:33:2b:91:
bf:63:c5:54:d9:dc:08:54:50:32:9d:6b:c2:94:8e:
1a:35:39:8f:83:7e:fe:d3:c0:6b:15:d0:d1:f9:24:
a6:57:05:a8:0f:71:68:7b:ab:58:5b:35:48:53:b7:
05:84:59:c2:bf:0e:8c:02:de:21:28:4f:77:e4:fe:
50:26:27:ba:60:24:59:53:25:e3:32:73:61:a1:26:
73:d4:dc:2f:a8:a2:2b:34:c7:b8:60:b5:f3:e9:f4:
96:54:98:b6:dc:bc:00:df:6e:12:c8:32:4f:d0:22:
d8:43:55:fc:dc:c5:b2:2c:9e:00:f3:73:e5:b8:58:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:22:69:1D:AB:71:C2:6F:64:60:B6:F6:30:B0:A3:6B:80:6A:EE:0C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60379.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:127b::/48
Signature Algorithm: sha256WithRSAEncryption
28:4f:00:13:00:ac:c1:3e:79:cd:74:aa:c8:08:f3:d7:94:14:
20:d4:de:84:77:95:06:11:6a:51:80:0e:dc:23:ce:ed:13:60:
bf:58:e1:83:64:c7:78:94:27:c7:8b:71:f2:f0:12:04:57:36:
8f:8d:93:9e:41:28:79:6c:f5:99:68:ba:40:84:e0:f9:a8:8d:
89:f7:41:08:d3:44:5b:4f:1f:c9:cf:db:ed:d3:93:fc:f4:19:
d0:a0:8e:9a:0a:7c:4c:0a:69:48:dc:c8:35:40:4a:70:ef:2f:
2a:b0:63:ba:73:5a:07:0b:3f:2b:dc:d0:35:b4:23:82:85:af:
11:9c:fb:a9:9d:dd:da:1b:0c:aa:d3:af:9c:bc:0b:08:8e:3a:
a0:b7:fc:aa:6e:ef:47:09:c1:0f:a5:14:03:ec:14:8e:3d:86:
b5:83:00:e9:4d:6e:1d:1c:bd:57:fd:49:3d:48:62:d4:f4:c8:
5e:a6:6a:15:4f:e9:fc:92:95:d8:01:a3:bc:5e:6f:1b:6b:57:
3d:c7:e8:21:00:7b:c5:38:32:5d:d3:99:a2:62:25:85:5d:79:
7f:6d:a1:45:f1:72:47:aa:87:73:16:ba:8a:4d:d1:eb:92:96:
5b:ea:23:4d:05:1d:1d:d7:7b:c5:e6:66:4b:1b:7e:fe:d9:15:
89:11:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:19 2024 by rpki-client on console-ams.rpki-client.org