Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199467.roa
File: AS199467.roa (raw, json)
Hash identifier: 24OOfjh+fTHTwx7JC3s7KHvRSctW09Q9Gjlw6BP62BE=
Subject key identifier: B1:5A:76:CC:22:B5:8C:D0:D0:F6:6A:F1:69:D3:5C:E9:8D:E8:71:14
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3F06A04EAD23FFF58EC35DAF5C1E3B65A2587D9D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199467.roa
Signing time: Fri 16 Feb 2024 13:44:24 +0000
ROA not before: Fri 16 Feb 2024 13:39:24 +0000
ROA not after: Fri 14 Feb 2025 13:44:24 +0000
asID: 199467
IP address blocks: 2a06:a005:2f10::/44 maxlen: 48
2a06:a005:2fa0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:06:a0:4e:ad:23:ff:f5:8e:c3:5d:af:5c:1e:3b:65:a2:58:7d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 16 13:39:24 2024 GMT
Not After : Feb 14 13:44:24 2025 GMT
Subject: CN=B15A76CC22B58CD0D0F66AF169D35CE98DE87114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:60:30:d4:7b:a4:53:6f:63:20:a5:7e:59:
a2:41:73:4f:c0:cf:a7:c5:71:94:98:c5:a5:50:4a:
a2:a1:71:6a:5a:17:2e:a8:15:8f:43:17:97:ab:fd:
14:b8:a1:4f:71:ac:5c:e9:c0:19:df:03:bd:c8:64:
b0:a9:ba:a7:9c:a6:37:50:67:78:0a:73:8b:02:1a:
02:f4:83:cf:62:9c:04:99:fa:4a:3c:c0:55:01:76:
6c:fa:56:04:16:8b:8c:66:99:15:83:77:14:6c:28:
c7:e3:97:72:f4:52:fd:2d:47:0e:0d:a4:93:fe:63:
22:28:9a:d7:13:fc:7a:49:44:00:4e:6a:3c:bb:ca:
a5:9d:45:69:e8:ac:e1:56:2e:ae:ca:5f:b0:29:7c:
f0:a2:3d:a2:24:2a:af:06:10:70:51:ee:ba:4e:de:
d0:4d:42:55:65:93:d9:72:45:f1:85:c3:ef:9f:dc:
28:82:92:4c:ac:c0:a9:46:58:48:2a:7a:ec:4e:da:
d5:ef:e2:ba:be:80:cd:f9:e2:02:75:3e:a0:bb:4b:
cb:b3:5e:70:0c:fc:5d:17:fc:3f:ff:6c:be:a7:7c:
ba:09:7d:9b:56:65:a7:89:a9:19:49:70:72:53:28:
0d:5d:44:68:2b:3f:86:91:2e:a8:b1:44:fe:ea:c6:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5A:76:CC:22:B5:8C:D0:D0:F6:6A:F1:69:D3:5C:E9:8D:E8:71:14
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199467.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2f10::/44
2a06:a005:2fa0::/44
Signature Algorithm: sha256WithRSAEncryption
58:59:7b:b3:e9:ea:2a:4b:9a:8e:98:55:93:cc:df:8c:06:58:
73:f8:3f:85:30:4f:c1:14:1a:28:7b:c4:fd:a7:be:35:69:35:
ed:d2:f0:80:de:2d:bb:77:35:84:87:74:ac:8e:12:40:e4:3e:
cf:30:44:e8:6b:0e:db:d5:b7:93:54:ac:21:87:f4:a7:db:6a:
09:55:b3:95:9e:81:b5:fc:f6:b0:d5:7b:90:c4:c2:f8:87:4b:
9d:66:ab:ed:29:93:66:4b:37:42:c5:97:26:27:98:96:ad:5d:
cf:5e:0c:f7:d5:d6:ab:da:a4:2d:b0:2b:7c:e8:e0:aa:aa:0e:
d6:42:4b:a1:97:c6:58:9c:bd:a7:5d:40:ee:51:30:f3:f5:73:
f1:64:f1:51:26:07:33:ee:6e:bf:1a:2a:a6:85:12:07:d4:d3:
ce:53:ea:16:f8:b9:b6:8e:bb:3e:34:ec:d4:97:86:7d:bd:df:
62:b8:11:7d:5a:0a:41:b4:64:91:d6:0f:c7:76:d7:61:da:95:
3f:97:b5:bf:32:f5:9b:59:a4:b7:4c:e0:19:77:89:2d:52:9d:
9a:da:73:37:05:74:0b:e8:7d:e9:e5:d7:7a:ee:43:08:73:58:
b5:e7:9e:84:cb:92:f8:15:f1:86:5d:0b:72:0c:ec:27:9e:bc:
d2:9a:f6:da
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUPwagTq0j//WOw12vXB47ZaJYfZ0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMTYxMzM5MjRaFw0yNTAyMTQxMzQ0MjRaMDMxMTAvBgNV
BAMTKEIxNUE3NkNDMjJCNThDRDBEMEY2NkFGMTY5RDM1Q0U5OERFODcxMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDmAw1HukU29jIKV+WaJBc0/A
z6fFcZSYxaVQSqKhcWpaFy6oFY9DF5er/RS4oU9xrFzpwBnfA73IZLCpuqecpjdQ
Z3gKc4sCGgL0g89inASZ+ko8wFUBdmz6VgQWi4xmmRWDdxRsKMfjl3L0Uv0tRw4N
pJP+YyIomtcT/HpJRABOajy7yqWdRWnorOFWLq7KX7ApfPCiPaIkKq8GEHBR7rpO
3tBNQlVlk9lyRfGFw++f3CiCkkyswKlGWEgqeuxO2tXv4rq+gM354gJ1PqC7S8uz
XnAM/F0X/D//bL6nfLoJfZtWZaeJqRlJcHJTKA1dRGgrP4aRLqixRP7qxt/fAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUsVp2zCK1jNDQ9mrxadNc6Y3ocRQwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MTk5NDY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcEKgagBS8QAwcEKgagBS+gMA0GCSqGSIb3DQEBCwUA
A4IBAQBYWXuz6eoqS5qOmFWTzN+MBlhz+D+FME/BFBooe8T9p741aTXt0vCA3i27
dzWEh3SsjhJA5D7PMEToaw7b1beTVKwhh/Sn22oJVbOVnoG1/Paw1XuQxML4h0ud
ZqvtKZNmSzdCxZcmJ5iWrV3PXgz31dar2qQtsCt86OCqqg7WQkuhl8ZYnL2nXUDu
UTDz9XPxZPFRJgcz7m6/GiqmhRIH1NPOU+oW+Lm2jrs+NOzUl4Z9vd9iuBF9WgpB
tGSR1g/Hdtdh2pU/l7W/MvWbWaS3TOAZd4ktUp2a2nM3BXQL6H3p5dd67kMIc1i1
556Ey5L4FfGGXQtyDOwnnrzSmvba
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org