Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS62485.roa
File: AS62485.roa (raw, json)
Hash identifier: 9+VTTYfE4R7I+9QO+l/7Nl02pzgehrZYFCWDx1KQqBk=
Subject key identifier: BB:21:09:44:AB:60:CA:1F:6D:8A:B5:F1:74:4C:5B:F6:5F:AA:CE:2D
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4F3956A1CC33B5DB51209EF005AD8C942E461C93
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS62485.roa
Signing time: Tue 05 Dec 2023 02:44:10 +0000
ROA not before: Tue 05 Dec 2023 02:39:10 +0000
ROA not after: Tue 03 Dec 2024 02:44:10 +0000
asID: 62485
IP address blocks: 2a06:a005:150e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:39:56:a1:cc:33:b5:db:51:20:9e:f0:05:ad:8c:94:2e:46:1c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:10 2023 GMT
Not After : Dec 3 02:44:10 2024 GMT
Subject: CN=BB210944AB60CA1F6D8AB5F1744C5BF65FAACE2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:17:7a:7a:9a:1c:27:a6:61:a4:4d:d0:00:
d6:4b:88:fa:69:69:c9:2e:7f:e4:22:70:56:35:90:
e5:19:e1:22:94:31:05:cb:51:32:2f:dd:2b:be:a8:
17:d3:b1:cf:b7:6d:11:74:e9:e5:60:96:5d:48:77:
99:94:31:6e:8b:1f:11:45:22:7c:83:bf:15:82:8a:
cb:80:99:e5:4a:3c:3b:07:df:6f:d4:9c:55:9e:58:
7b:76:b1:60:d5:9d:bc:33:07:b9:c2:88:f5:e3:5d:
18:db:b0:16:89:90:eb:1a:35:67:a9:0b:7b:2e:6f:
5f:ec:36:b7:56:4d:37:4d:cc:b9:31:a6:0a:8e:e0:
c3:7f:27:30:d4:9f:f1:87:c9:89:2d:e2:01:37:82:
20:1e:94:c3:dc:57:fc:f6:4e:51:e3:cc:d7:cd:87:
37:07:6c:36:5c:b7:2a:7e:72:f3:70:39:68:ee:cc:
8f:aa:9d:ce:b2:3f:fb:b0:be:eb:0d:c4:ce:ba:f4:
51:e2:eb:0e:93:f2:f9:69:a3:81:0c:c0:56:eb:6c:
88:f2:cc:d0:a9:9a:3f:e7:1d:9a:b5:24:43:a5:2a:
9d:9a:7d:71:6b:2f:8a:91:e2:37:49:a2:17:c5:17:
af:60:26:08:b2:73:8c:b4:0f:c0:72:a3:77:d9:64:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:21:09:44:AB:60:CA:1F:6D:8A:B5:F1:74:4C:5B:F6:5F:AA:CE:2D
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS62485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150e::/48
Signature Algorithm: sha256WithRSAEncryption
ac:75:e5:10:21:46:be:35:83:06:8e:82:46:9e:36:f2:7d:e3:
0c:6a:11:35:48:be:28:5d:98:b9:2e:e6:38:57:f5:59:6f:d2:
36:a3:c2:b5:d2:29:15:a4:8c:26:16:4b:10:55:eb:eb:62:bf:
91:f1:16:e7:15:ef:e2:6c:ed:f5:34:6d:a9:1c:c5:06:2f:aa:
05:d4:9d:54:b2:a9:5d:f3:ca:7a:f7:3b:19:25:97:b3:ef:64:
a9:63:90:d7:95:4d:26:f2:04:d4:a7:17:6e:e5:2f:3d:71:82:
88:45:3e:d7:0d:7b:24:1b:13:15:55:5a:5f:43:09:ee:a1:57:
6c:77:7b:69:f8:aa:13:bd:a3:48:c6:6d:2f:43:6c:a4:1a:42:
85:ed:37:4a:2a:29:77:87:64:cc:63:d0:3d:9e:bd:8b:f2:b4:
2d:41:5f:92:06:87:19:9a:95:dd:bb:da:8c:f8:1a:f8:96:15:
50:2c:9b:86:75:57:e9:d0:74:f3:1d:49:ec:43:4c:de:49:1a:
92:49:01:95:85:8d:d0:d7:c5:fb:10:29:65:f2:a4:8e:45:fa:
b4:cf:1b:73:0f:1e:35:6b:fc:b2:00:aa:ae:dd:7b:68:94:58:
f0:b4:30:84:f2:c2:5f:da:65:c8:9b:10:50:1a:b8:ff:a8:79:
a3:86:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org