Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61228.roa
File: AS61228.roa (raw, json)
Hash identifier: jwbi1872T/pUAbGkDHGK/ZwUP1YlpcoFR7Bu+0LxOow=
Subject key identifier: 68:6B:1E:E3:F0:78:67:85:69:0B:D9:C4:47:BD:F7:7E:9E:8E:F7:27
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 57A27FC081820109FC30D262D11186B8ABCB38CD
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61228.roa
Signing time: Tue 05 Dec 2023 02:44:12 +0000
ROA not before: Tue 05 Dec 2023 02:39:12 +0000
ROA not after: Tue 03 Dec 2024 02:44:12 +0000
asID: 61228
IP address blocks: 2a06:a005:5ad::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a2:7f:c0:81:82:01:09:fc:30:d2:62:d1:11:86:b8:ab:cb:38:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:12 2023 GMT
Not After : Dec 3 02:44:12 2024 GMT
Subject: CN=686B1EE3F0786785690BD9C447BDF77E9E8EF727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:25:4d:18:3a:6b:c4:eb:69:45:9e:96:ba:
24:7b:a5:dc:b8:93:ef:06:37:5e:a9:0b:7f:b9:aa:
58:bb:08:bf:06:77:50:60:3e:90:da:30:43:24:9d:
07:5c:4a:08:5f:73:1d:25:46:2c:0c:34:19:fc:3f:
b4:a8:bd:0d:db:84:99:41:b5:7a:8f:29:d6:47:e5:
94:79:4e:bd:40:fb:d7:88:69:cb:a9:a8:33:c6:b9:
8a:9f:05:ad:69:02:ae:d6:81:bc:2e:66:c8:27:95:
a2:d9:cb:c2:9f:04:7d:16:62:e9:61:96:83:58:8c:
96:b1:18:23:cd:b1:f1:6e:5a:a9:a2:2d:4b:aa:a3:
50:c8:12:ea:47:0e:58:cf:86:f9:6b:df:58:8d:85:
fd:16:a5:5d:f6:d9:b3:f1:3f:04:6b:a8:5f:96:3e:
70:8f:66:ad:f5:d1:9d:a7:62:99:f3:e7:20:00:ed:
eb:a9:f8:d0:0b:82:34:5a:8b:c3:c7:c9:d5:b8:25:
e4:e3:d7:5c:0e:90:38:d6:a9:c4:3f:c4:fc:1c:19:
a9:a1:43:f0:07:14:a0:18:e3:a1:1a:ae:af:6d:23:
6e:6c:a9:3f:2e:29:34:99:1a:72:02:f0:77:27:dd:
fc:e0:35:3a:ec:2a:8e:e0:55:24:e6:1d:0a:bf:1c:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:1E:E3:F0:78:67:85:69:0B:D9:C4:47:BD:F7:7E:9E:8E:F7:27
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS61228.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5ad::/48
Signature Algorithm: sha256WithRSAEncryption
6b:a0:0a:6f:07:8d:67:1d:1d:06:15:b3:c1:92:54:df:d1:ed:
f1:22:b0:74:dc:74:7b:a7:44:d5:14:7a:17:29:82:f3:19:b9:
c1:3c:ff:29:0d:a3:09:46:e3:bf:82:e3:21:a7:a2:37:fa:25:
a8:22:0e:46:06:95:a4:6f:00:27:3f:d6:01:38:30:af:fa:a9:
1e:b2:ed:80:3d:a0:d4:70:41:b6:02:ac:0c:f4:59:11:1e:b8:
fd:6e:92:c0:4d:97:05:1b:97:f1:1a:ca:44:c0:0e:d9:14:e0:
71:7b:1d:88:64:fd:96:3f:19:35:8b:d9:3e:64:cf:4e:4d:f7:
1e:88:fe:07:28:81:3e:c3:32:fa:01:c4:ec:3c:cb:f4:d8:81:
8c:ca:67:2d:81:ff:88:39:08:7a:ed:b9:76:11:6d:74:4a:ae:
35:76:52:78:c8:9e:8a:05:60:02:63:9a:f1:a3:3e:25:27:b8:
d7:7e:3a:d8:a7:f3:1c:27:e0:ed:cc:f1:a4:3f:c1:a8:39:84:
02:f2:30:10:44:7b:54:b3:e5:82:09:a9:41:1d:18:96:78:89:
1d:fd:a6:13:80:9c:e2:5c:9a:35:bb:fc:b7:87:10:85:e8:47:
57:b7:d1:ac:84:2d:5f:17:33:b0:a2:e7:1f:b8:6e:2b:cc:90:
37:c9:65:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org