Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61228.roa
File: AS61228.roa (raw, json)
Hash identifier: mT+fFCtPJHEOTeCzN6Y0tnrxpQJQEcDN0Iu2XuW6KfY=
Subject key identifier: 9F:54:29:99:A7:FB:06:13:A1:88:EB:7C:B6:3C:FD:76:D7:FE:E5:33
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 61519B5A47F928CA0FFF0393C8EA856AAF8B3FF0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61228.roa
Signing time: Tue 05 Nov 2024 03:40:05 +0000
ROA not before: Tue 05 Nov 2024 03:35:05 +0000
ROA not after: Tue 04 Nov 2025 03:40:05 +0000
asID: 61228
IP address blocks: 2a06:a005:5ad::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:51:9b:5a:47:f9:28:ca:0f:ff:03:93:c8:ea:85:6a:af:8b:3f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:05 2024 GMT
Not After : Nov 4 03:40:05 2025 GMT
Subject: CN=9F542999A7FB0613A188EB7CB63CFD76D7FEE533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:a6:81:4c:79:30:60:e0:1d:be:f0:2b:03:
bc:57:b7:34:fa:0b:81:2b:5a:06:c8:85:e6:9e:50:
3b:1d:ba:e0:6a:d8:fc:64:79:4d:e5:06:ed:31:1f:
f3:af:4e:d9:13:e0:1a:a7:2a:9e:f3:98:52:ea:68:
fe:e8:d9:f3:e2:65:11:a7:ef:3a:90:a2:7c:59:aa:
15:35:93:80:19:23:0d:4a:30:b8:96:a5:fd:20:79:
22:a7:51:65:78:60:88:67:2d:1f:a3:e9:fd:be:67:
91:d2:3b:78:b1:f2:85:49:b1:74:1f:7d:ae:3c:fe:
48:61:9a:bd:90:c3:ec:95:60:d1:37:13:69:24:2b:
d5:8f:a1:76:be:25:fd:9c:61:e8:7b:b4:14:e7:43:
b0:6b:40:96:16:0a:da:23:a6:4a:cb:44:66:59:1a:
e2:38:11:fd:80:3d:96:3b:45:23:14:b1:65:eb:aa:
64:0f:5f:31:55:86:80:8e:83:dd:15:21:da:fc:32:
59:90:62:a9:28:4d:4d:b7:7d:15:2b:09:21:d4:70:
72:90:d6:05:a2:2b:76:5b:47:cd:66:96:ea:1e:07:
43:09:af:5a:4e:ba:95:08:7a:85:03:a8:27:66:de:
a6:7a:47:ad:2c:f7:4c:a8:ca:f7:fe:ee:64:3a:ac:
db:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:54:29:99:A7:FB:06:13:A1:88:EB:7C:B6:3C:FD:76:D7:FE:E5:33
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61228.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ad::/48
Signature Algorithm: sha256WithRSAEncryption
c4:64:a5:e2:6a:c4:78:40:90:90:4f:5e:27:ed:da:62:00:05:
d6:d6:81:8b:e9:e9:0a:67:86:85:30:95:e6:c1:7e:b4:ad:cb:
8a:63:35:d0:17:12:40:ed:2d:35:c1:45:c2:d7:71:51:56:ef:
6a:0d:07:d8:1c:fe:5c:49:5c:53:43:8f:4b:3f:1b:a7:e5:01:
5c:05:94:d1:1c:89:9e:67:b1:90:0a:31:21:69:04:96:1c:38:
36:c0:b3:0f:53:71:91:2e:b5:01:bc:f4:d3:a7:00:9a:32:b2:
12:9c:cc:a8:57:b5:cc:3c:c1:3b:bc:29:20:65:96:fe:a9:c9:
10:3a:d7:48:a3:6f:fb:98:e7:32:fc:4e:57:f4:6e:0b:a7:58:
ef:92:e0:9b:34:84:ff:af:4f:7f:e3:8f:16:25:ae:72:ee:0b:
ea:01:71:73:e9:81:27:ca:0a:c8:0a:10:9b:76:07:28:f5:dd:
0f:7e:72:a9:e9:6b:54:9a:7a:f4:68:03:5b:a4:e1:bf:e2:a5:
fd:f4:5c:58:c8:27:f3:14:8f:02:d2:48:d2:f8:53:dc:ea:e9:
26:90:b9:28:3d:0e:48:4f:bc:e4:85:3f:42:6a:dc:70:b3:75:
3b:69:4f:e9:2e:78:05:59:5d:c7:d1:64:37:d8:89:bf:6d:ae:
fc:d7:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:13 2024 by rpki-client on console-ams.rpki-client.org