Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199459.roa
File: AS199459.roa (raw, json)
Hash identifier: oXckDhHdW8fyBcr9MaFGvJ+Gcd18w0f3ebF4kZbO93Y=
Subject key identifier: 9F:4A:6E:64:58:B3:FC:AB:18:41:ED:27:7E:53:C1:53:AA:F1:13:81
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 59FED2D5551683231DD4D9391482664D284EA859
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199459.roa
Signing time: Mon 02 Sep 2024 15:55:59 +0000
ROA not before: Mon 02 Sep 2024 15:50:59 +0000
ROA not after: Mon 01 Sep 2025 15:55:59 +0000
asID: 199459
IP address blocks: 2a06:9f44::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 11:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:fe:d2:d5:55:16:83:23:1d:d4:d9:39:14:82:66:4d:28:4e:a8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Sep 2 15:50:59 2024 GMT
Not After : Sep 1 15:55:59 2025 GMT
Subject: CN=9F4A6E6458B3FCAB1841ED277E53C153AAF11381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:41:45:f5:72:03:86:9e:c3:5c:df:f1:48:
48:9b:cf:32:26:b4:06:e1:41:7e:5e:93:cb:1c:1e:
43:cc:69:9f:a8:96:00:6f:d7:fb:b7:7b:52:b9:7f:
8e:d5:5c:33:80:52:26:8b:88:a1:b2:3f:37:f8:08:
a0:3b:53:03:38:bb:76:e3:7e:b6:e1:d1:5f:6d:f5:
3b:b9:e7:82:5e:af:e4:e5:14:ca:e3:b2:ea:8f:54:
f0:41:45:1c:33:51:f4:47:59:a6:70:ce:07:7b:8f:
0c:09:8d:97:c4:09:8a:37:50:94:77:a4:e0:56:6b:
4e:b4:b1:ff:f7:f5:3e:43:e0:40:c5:fe:b8:cb:49:
7a:17:33:25:76:70:ae:97:25:30:b4:47:d6:2c:cb:
be:c7:2c:b5:9e:fd:db:e2:3d:67:32:2b:c3:2d:de:
bd:33:29:06:25:2b:9d:2d:8d:f4:52:05:41:59:91:
d7:a1:c7:a0:be:a3:20:bc:72:b4:63:0e:c9:2a:08:
15:b0:bb:a4:60:31:a8:03:56:06:a3:5d:95:35:46:
ce:9b:24:b8:15:0b:85:b1:55:e9:31:f9:10:0e:5a:
02:0d:70:38:f0:a8:d8:67:74:09:8f:d9:32:29:b1:
14:53:a5:3c:02:c6:2a:ff:9e:59:dd:fb:6e:20:fe:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4A:6E:64:58:B3:FC:AB:18:41:ED:27:7E:53:C1:53:AA:F1:13:81
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199459.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9f44::/36
Signature Algorithm: sha256WithRSAEncryption
5b:d6:28:e2:aa:46:db:07:5f:13:50:13:2a:ee:65:72:05:03:
9c:94:c8:af:a2:4b:3a:18:38:1c:e3:37:ff:69:35:0d:1a:75:
f8:de:6f:49:47:d2:a6:7d:a9:60:cd:dd:05:d1:6b:71:b7:a9:
24:d7:11:b6:e2:3e:d9:1f:fa:67:0e:7c:cb:ae:99:18:a5:92:
d5:be:5d:2c:eb:e2:42:11:18:52:d5:1f:42:33:e7:0c:60:25:
79:b6:20:37:e6:5c:00:ec:8a:77:c9:09:b6:d3:b7:e5:7d:04:
de:a0:93:8c:55:f0:7d:e6:fe:9f:8f:58:f4:05:03:fd:32:74:
53:d2:76:d8:2b:15:91:7c:f4:8d:2a:68:0b:70:99:49:d2:04:
93:02:93:89:f6:b9:db:0b:71:7e:42:dd:78:98:ba:4b:15:d9:
41:3d:aa:d6:d0:c7:9d:25:fd:d6:f2:01:99:a6:5f:c1:1d:82:
a6:85:94:9e:35:9e:db:08:c2:34:91:51:28:cd:f2:71:29:3c:
ab:a9:17:81:ed:ae:a5:ea:d3:d0:ea:a3:0f:41:a1:fa:fc:04:
66:14:f4:bb:80:c8:49:6c:a8:77:53:26:28:eb:c1:f7:3c:f1:
c4:1f:a5:40:a8:01:74:16:22:04:2a:3a:85:e9:8c:28:06:fe:
f6:1c:a4:94
-----BEGIN CERTIFICATE-----
MIIE5zCCA8+gAwIBAgIUWf7S1VUWgyMd1Nk5FIJmTShOqFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDA5MDIxNTUwNTlaFw0yNTA5MDExNTU1NTlaMDMxMTAvBgNV
BAMTKDlGNEE2RTY0NThCM0ZDQUIxODQxRUQyNzdFNTNDMTUzQUFGMTEzODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEq0FF9XIDhp7DXN/xSEibzzIm
tAbhQX5ek8scHkPMaZ+olgBv1/u3e1K5f47VXDOAUiaLiKGyPzf4CKA7UwM4u3bj
frbh0V9t9Tu554Jer+TlFMrjsuqPVPBBRRwzUfRHWaZwzgd7jwwJjZfECYo3UJR3
pOBWa060sf/39T5D4EDF/rjLSXoXMyV2cK6XJTC0R9Ysy77HLLWe/dviPWcyK8Mt
3r0zKQYlK50tjfRSBUFZkdehx6C+oyC8crRjDskqCBWwu6RgMagDVgajXZU1Rs6b
JLgVC4WxVekx+RAOWgINcDjwqNhndAmP2TIpsRRTpTwCxir/nlnd+24g/sM1AgMB
AAGjggHxMIIB7TAdBgNVHQ4EFgQUn0puZFiz/KsYQe0nflPBU6rxE4EwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTk5NDU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKgafRAAwDQYJKoZIhvcNAQELBQADggEBAFvWKOKq
RtsHXxNQEyruZXIFA5yUyK+iSzoYOBzjN/9pNQ0adfjeb0lH0qZ9qWDN3QXRa3G3
qSTXEbbiPtkf+mcOfMuumRilktW+XSzr4kIRGFLVH0Iz5wxgJXm2IDfmXADsinfJ
CbbTt+V9BN6gk4xV8H3m/p+PWPQFA/0ydFPSdtgrFZF89I0qaAtwmUnSBJMCk4n2
udsLcX5C3XiYuksV2UE9qtbQx50l/dbyAZmmX8EdgqaFlJ41ntsIwjSRUSjN8nEp
PKupF4HtrqXq09Dqow9Bofr8BGYU9LuAyElsqHdTJijrwfc88cQfpUCoAXQWIgQq
OoXpjCgG/vYcpJQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:55 2025 by rpki-client