Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS64264.roa
File: AS64264.roa (raw, json)
Hash identifier: KWC0BlPxZzyCx+cBTIiVnXwC9fkhcgaA5QxArxS7zI8=
Subject key identifier: A3:9E:22:C0:C1:1A:E5:0B:B8:AB:7C:A3:09:B7:C9:17:DE:75:88:88
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2591611F0FE010706005F15CB5FA273A59EF12DC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS64264.roa
Signing time: Sun 14 Jan 2024 16:44:21 +0000
ROA not before: Sun 14 Jan 2024 16:39:21 +0000
ROA not after: Sun 12 Jan 2025 16:44:21 +0000
asID: 64264
IP address blocks: 2a06:a005:11a0::/44 maxlen: 48
2a06:a005:11b0::/44 maxlen: 48
2a06:a005:11c0::/44 maxlen: 48
2a06:a005:11d0::/44 maxlen: 48
2a06:a005:11e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:91:61:1f:0f:e0:10:70:60:05:f1:5c:b5:fa:27:3a:59:ef:12:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 14 16:39:21 2024 GMT
Not After : Jan 12 16:44:21 2025 GMT
Subject: CN=A39E22C0C11AE50BB8AB7CA309B7C917DE758888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:e1:03:59:bd:58:04:7a:3e:9a:62:9f:95:
ff:2c:70:77:d0:e5:7a:41:5f:3f:25:f3:e2:6b:41:
70:9e:c8:5a:43:0a:0d:9d:6e:4f:d3:42:cc:e1:df:
56:70:40:b3:26:02:9e:2b:1a:53:f4:c4:6d:e6:e3:
28:ee:51:40:b3:b8:be:b4:96:19:a1:5d:12:f7:1d:
cc:40:a3:cd:e6:4c:8d:62:12:bb:34:20:c6:c7:ed:
46:14:4e:36:84:9d:ab:f8:be:f6:87:1f:fc:82:68:
68:95:2b:96:48:d6:38:28:fc:3d:1f:21:95:34:bb:
91:32:27:a9:dd:c1:0a:43:32:ea:36:e1:45:28:60:
31:c2:e3:9a:f4:f0:ad:5a:a6:6d:0d:0e:8d:56:f7:
17:05:1a:8d:a0:f6:41:f2:73:62:3d:b0:75:81:96:
36:93:01:ac:42:d2:88:bc:b8:92:b9:b3:07:41:78:
01:fe:a9:1d:b3:7e:d4:f1:cf:e0:d0:fc:5a:c7:12:
1d:83:b6:e8:5a:30:82:01:19:1e:a2:f8:45:a5:f7:
ee:00:c8:7a:ef:07:4e:81:0f:d6:bd:48:85:0c:7a:
90:8f:1e:ca:5e:26:17:da:41:74:1d:e8:65:44:d6:
a2:2b:28:09:8c:82:cc:bb:72:4c:72:97:99:79:d8:
0a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9E:22:C0:C1:1A:E5:0B:B8:AB:7C:A3:09:B7:C9:17:DE:75:88:88
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS64264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:11a0::-2a06:a005:11ef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a7:f8:6e:a3:d0:c0:79:8a:95:5b:72:d2:26:29:7f:e6:21:a6:
4e:64:32:25:2b:81:c3:9e:e9:97:61:f3:f2:6f:32:62:98:ac:
e5:b5:8c:86:47:34:85:d2:ef:65:a3:9a:cc:5f:2f:ce:79:60:
c1:c8:98:62:04:ed:38:e6:1d:76:4e:63:5b:22:c7:7d:86:61:
9d:03:5b:8c:05:44:e7:9b:86:f0:9a:44:ac:14:28:10:26:2c:
1c:0c:ab:45:13:cd:97:84:30:1b:8b:11:4f:28:45:9d:a0:4e:
af:72:04:2e:27:46:48:1f:ee:a8:27:22:7c:fc:4c:0e:3f:fd:
f2:c1:5d:36:0f:95:d9:23:3c:94:65:8d:52:39:c8:0e:cc:85:
08:83:3a:db:68:13:6d:dd:ba:93:53:2b:82:3c:6b:b5:2b:35:
e8:10:1e:e5:b0:74:83:1f:0e:93:28:ac:69:6d:2e:2f:c1:06:
a4:1d:b6:e0:d2:24:18:fd:39:bf:d7:b5:72:24:60:d4:6c:9e:
76:29:d3:79:55:20:45:0d:4a:30:cb:29:f3:b5:32:79:aa:bd:
90:3e:87:57:bd:85:06:ec:54:42:50:74:62:01:29:71:34:63:
05:fe:98:ec:8f:bc:14:74:0b:cf:a2:77:15:1d:52:00:93:d2:
23:da:7a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:13 2024 by rpki-client on console-ams.rpki-client.org