Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60391.roa
File: AS60391.roa (raw, json)
Hash identifier: 1QOJFNv9fe49SX0E2PNsADIRgtIWfm+fQR3tDxDWZX4=
Subject key identifier: 54:E1:98:F7:B9:B7:37:2F:C5:3B:D5:E1:B7:85:36:8D:EA:74:0C:15
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 033398B6DDEA748896B2BE69A4C4E47B3E82B405
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60391.roa
Signing time: Thu 15 Feb 2024 13:44:24 +0000
ROA not before: Thu 15 Feb 2024 13:39:24 +0000
ROA not after: Thu 13 Feb 2025 13:44:24 +0000
asID: 60391
IP address blocks: 2a06:a005:da0::/44 maxlen: 48
2a06:a005:2300::/44 maxlen: 48
2a06:a005:25d0::/44 maxlen: 48
2a06:a005:2f30::/44 maxlen: 48
2a06:a005:2f40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:33:98:b6:dd:ea:74:88:96:b2:be:69:a4:c4:e4:7b:3e:82:b4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 15 13:39:24 2024 GMT
Not After : Feb 13 13:44:24 2025 GMT
Subject: CN=54E198F7B9B7372FC53BD5E1B785368DEA740C15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:1c:48:37:eb:7d:a8:c9:51:96:d5:1b:2d:
38:ef:74:d6:1d:6a:35:57:65:1c:8d:dc:ed:9c:d7:
62:ce:ff:76:93:b0:bd:c5:4e:73:09:92:d5:9e:62:
21:71:9f:a0:2d:1f:0e:0f:81:eb:8a:fd:3d:f4:54:
04:87:fd:3f:74:4b:10:5b:6d:f0:87:9d:17:61:38:
da:24:08:95:2d:3e:bf:ad:e5:21:86:05:d9:b2:06:
d6:83:14:54:64:17:b1:bd:32:97:b9:21:7e:8f:ab:
9d:dc:53:7f:6b:b0:ff:c2:20:61:2a:9d:a2:1e:a1:
a6:fd:48:52:17:42:c7:e3:70:83:8f:e5:00:2d:39:
7b:40:58:b8:78:87:c1:0e:20:c0:4e:fd:01:59:b5:
56:a4:14:8d:f6:40:c1:77:ec:43:e3:4c:07:f7:f8:
36:44:7c:43:3a:8f:5b:21:12:9e:36:e4:d1:34:5f:
17:27:0e:54:87:10:61:0d:57:d9:84:c0:e0:92:a1:
c3:4a:34:06:ee:a3:65:b3:d4:5b:51:ca:2e:24:f3:
78:99:7c:4a:99:e7:66:98:c3:07:1c:e4:e9:5d:5d:
0a:0d:fa:57:36:21:3e:94:67:c5:41:ea:4d:11:f5:
38:17:19:69:e6:7a:4a:b1:23:dc:de:a0:2a:d8:0b:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E1:98:F7:B9:B7:37:2F:C5:3B:D5:E1:B7:85:36:8D:EA:74:0C:15
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS60391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:da0::/44
2a06:a005:2300::/44
2a06:a005:25d0::/44
2a06:a005:2f30::-2a06:a005:2f4f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
77:fc:cd:2e:d8:e4:2a:c6:12:58:33:43:f1:32:69:87:ca:bc:
19:96:78:fb:6e:d7:40:f7:46:d5:de:93:75:69:5e:15:22:6b:
52:2a:22:f7:91:54:8d:da:ca:e7:a0:8c:5f:0d:bd:14:64:6f:
91:e0:37:e4:c4:85:78:0e:44:fc:97:9d:e8:de:6c:ff:21:8e:
41:50:a5:a6:80:0e:5e:e2:57:90:3b:6f:6c:ad:15:ca:95:fb:
a8:5f:cb:07:e7:84:c0:ae:dd:06:1d:af:51:f1:14:33:d9:86:
8d:ae:dc:77:a4:62:b8:1b:bb:41:b8:43:67:76:51:50:df:c2:
fd:ac:4c:96:ba:d1:1f:b4:d3:49:99:b9:2d:f3:6e:90:65:91:
60:70:9c:8a:3f:fc:c7:b0:09:c2:78:7e:8e:32:5c:15:2f:87:
62:3b:98:c1:74:84:c0:ea:9a:0d:d1:d8:62:68:57:98:a5:9c:
54:bb:6d:99:e1:3f:84:32:d7:c2:ce:ae:a4:9f:f4:21:2e:b8:
2c:e1:b5:5d:83:40:9a:93:f5:f0:31:e5:70:03:32:ab:d3:16:
b0:bd:f4:78:2a:cd:d5:e6:28:15:66:56:b0:13:4a:64:fe:0c:
a6:4e:a0:ed:42:6c:d9:df:15:15:f9:81:43:b0:0d:44:39:d9:
65:0b:65:54
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUAzOYtt3qdIiWsr5ppMTkez6CtAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMTUxMzM5MjRaFw0yNTAyMTMxMzQ0MjRaMDMxMTAvBgNV
BAMTKDU0RTE5OEY3QjlCNzM3MkZDNTNCRDVFMUI3ODUzNjhERUE3NDBDMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0hxIN+t9qMlRltUbLTjvdNYd
ajVXZRyN3O2c12LO/3aTsL3FTnMJktWeYiFxn6AtHw4PgeuK/T30VASH/T90SxBb
bfCHnRdhONokCJUtPr+t5SGGBdmyBtaDFFRkF7G9Mpe5IX6Pq53cU39rsP/CIGEq
naIeoab9SFIXQsfjcIOP5QAtOXtAWLh4h8EOIMBO/QFZtVakFI32QMF37EPjTAf3
+DZEfEM6j1shEp425NE0XxcnDlSHEGENV9mEwOCSocNKNAbuo2Wz1FtRyi4k83iZ
fEqZ52aYwwcc5OldXQoN+lc2IT6UZ8VB6k0R9TgXGWnmekqxI9zeoCrYCzUfAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUVOGY97m3Ny/FO9Xht4U2jep0DBUwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
NjAzOTEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUHAQcB
Af8EOTA3MDUEAgACMC8DBwQqBqAFDaADBwQqBqAFIwADBwQqBqAFJdAwEgMHBCoG
oAUvMAMHBCoGoAUvQDANBgkqhkiG9w0BAQsFAAOCAQEAd/zNLtjkKsYSWDND8TJp
h8q8GZZ4+27XQPdG1d6TdWleFSJrUioi95FUjdrK56CMXw29FGRvkeA35MSFeA5E
/Jed6N5s/yGOQVClpoAOXuJXkDtvbK0VypX7qF/LB+eEwK7dBh2vUfEUM9mGja7c
d6RiuBu7QbhDZ3ZRUN/C/axMlrrRH7TTSZm5LfNukGWRYHCcij/8x7AJwnh+jjJc
FS+HYjuYwXSEwOqaDdHYYmhXmKWcVLttmeE/hDLXws6upJ/0IS64LOG1XYNAmpP1
8DHlcAMyq9MWsL30eCrN1eYoFWZWsBNKZP4Mpk6g7UJs2d8VFfmBQ7ANRDnZZQtl
VA==
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org