Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS62485.roa
File: AS62485.roa (raw, json)
Hash identifier: sFgnZ72fcRbReVzMOGZELlh43dBdsFsB+FnEem0Xuvs=
Subject key identifier: B1:7A:27:A6:6A:8E:20:8A:3D:78:C0:4A:3C:92:CC:A6:36:38:0F:48
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1FB5FA4D2B2709D4C6299832E0200A91CA4341DA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS62485.roa
Signing time: Tue 05 Nov 2024 03:40:11 +0000
ROA not before: Tue 05 Nov 2024 03:35:11 +0000
ROA not after: Tue 04 Nov 2025 03:40:11 +0000
asID: 62485
IP address blocks: 2a06:a005:150e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b5:fa:4d:2b:27:09:d4:c6:29:98:32:e0:20:0a:91:ca:43:41:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:11 2024 GMT
Not After : Nov 4 03:40:11 2025 GMT
Subject: CN=B17A27A66A8E208A3D78C04A3C92CCA636380F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:ee:3d:46:56:6c:df:03:fe:d9:4a:4f:12:
79:b9:c2:49:52:cf:09:c4:07:34:eb:fc:6f:4b:3d:
ef:4d:e1:d4:01:99:02:0f:65:13:dd:0e:24:b3:1d:
af:f8:20:eb:ba:c3:77:e0:b8:06:d4:0a:e4:08:39:
97:98:d0:a6:76:e9:60:e9:e4:75:b0:6f:97:8b:1b:
ca:43:17:7a:8d:d1:6f:de:b3:a9:be:57:d3:06:17:
a0:b1:44:ab:1a:54:e0:51:aa:9d:11:f3:39:a7:2a:
f9:ab:bd:51:af:da:82:39:7b:92:33:65:b3:b6:bc:
4c:4e:7b:14:b7:c7:d6:8f:84:68:40:00:d5:49:93:
82:75:00:61:a2:5f:43:aa:ef:7d:65:db:93:10:f5:
2d:39:07:06:6c:36:09:17:c2:d2:da:3b:ca:62:f1:
b1:33:b4:fb:26:4b:a1:9c:54:41:6c:e2:6b:2c:3f:
d0:00:06:57:e6:1f:28:13:c6:d0:6c:60:d4:ec:1e:
b4:85:98:8b:77:c8:5c:02:a5:5f:e8:c5:a6:36:80:
7a:7d:b9:90:1f:2d:c6:0a:8e:32:58:b3:af:a8:41:
14:b0:20:24:75:a4:b2:bb:cd:eb:d8:56:6a:0f:49:
79:fd:d3:ff:18:49:23:43:5a:f0:c7:d4:a9:02:5f:
4c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7A:27:A6:6A:8E:20:8A:3D:78:C0:4A:3C:92:CC:A6:36:38:0F:48
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS62485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150e::/48
Signature Algorithm: sha256WithRSAEncryption
21:4d:39:e4:84:93:a2:07:26:2c:95:12:9a:35:ed:a6:19:62:
00:90:23:98:2c:00:f5:b8:85:c9:74:0a:c3:12:36:e2:62:4a:
82:d3:16:2c:90:e8:22:cd:aa:30:42:86:56:54:04:26:ee:e3:
d6:7c:fa:05:2c:ca:9c:59:65:5d:20:d4:e5:45:6a:92:58:ef:
12:68:3f:75:27:4b:7d:a5:44:0a:9e:00:cb:64:b3:ec:e0:98:
df:9c:a3:70:fd:c3:f0:e5:ce:cd:28:af:76:11:aa:75:c3:45:
b5:83:08:4e:92:85:aa:9d:29:18:1b:2a:49:a9:5f:de:14:4e:
da:98:9f:d0:2e:b4:04:a9:0d:a5:39:46:18:08:18:f8:d7:d4:
c5:cb:08:88:f7:fc:7b:df:34:7b:7b:ef:5e:16:27:0d:7a:07:
00:5d:56:8b:7a:7a:24:16:e7:9a:93:ea:37:69:27:0f:e2:dd:
e2:a8:eb:03:f8:ca:0f:08:c4:98:e5:b9:e6:7d:ce:fb:29:8f:
09:43:2c:57:54:c5:a8:5a:ca:77:d2:44:54:ee:49:fa:83:aa:
81:b8:7f:2e:74:77:d3:a7:65:2a:7b:61:27:cf:92:91:71:c5:
b0:40:11:c8:1d:61:1a:f0:83:78:dd:59:35:2f:72:c3:4d:bf:
d6:a3:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:13 2024 by rpki-client on console-ams.rpki-client.org