Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199488.roa
File: AS199488.roa (raw, json)
Hash identifier: 4ddeuYduEWusxNmQjdTSffQ6UvjJaCmqjeWnranQSFk=
Subject key identifier: 8F:D5:D1:8B:CE:2B:B5:87:46:92:ED:07:7E:F8:9F:12:0F:9C:76:D1
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 62347690A99BBF9C75D3F64873AD124C8C83CA71
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199488.roa
Signing time: Tue 13 Feb 2024 08:44:24 +0000
ROA not before: Tue 13 Feb 2024 08:39:24 +0000
ROA not after: Tue 11 Feb 2025 08:44:24 +0000
asID: 199488
IP address blocks: 2a06:a005:1941::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:34:76:90:a9:9b:bf:9c:75:d3:f6:48:73:ad:12:4c:8c:83:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 13 08:39:24 2024 GMT
Not After : Feb 11 08:44:24 2025 GMT
Subject: CN=8FD5D18BCE2BB5874692ED077EF89F120F9C76D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:13:19:bb:fb:9f:73:6a:04:c3:b7:fe:45:
97:be:ac:87:eb:a4:1a:e2:9b:d9:2e:d0:7b:30:e8:
a9:6a:ca:71:06:8d:b9:bd:99:e3:24:c9:2a:c1:32:
39:4c:ad:6c:f4:f6:2e:a0:c5:31:cb:c9:2c:53:6c:
4a:2e:88:fb:83:30:a3:e7:71:7f:56:db:2b:da:f2:
ec:58:cc:57:b5:9c:12:3c:9d:8e:6e:bd:9f:d4:b3:
fc:49:86:ef:93:b2:5c:2c:56:64:35:98:e7:c0:ef:
f6:6f:87:97:9c:62:b4:23:ad:9b:df:7c:d1:16:09:
ce:3e:47:ba:8e:d4:9d:c3:9a:04:38:7e:ec:bb:8a:
87:35:fa:b4:6b:1b:59:ab:9a:12:19:19:3f:61:7e:
73:9a:71:80:95:50:bd:7e:0a:48:ea:17:0f:6e:54:
66:d5:fc:f5:90:94:27:80:21:5f:e6:82:ba:77:bf:
c2:ec:47:0c:1c:20:83:8c:d2:1a:ba:d7:20:6b:41:
86:6d:f9:90:55:bd:6a:a7:7a:d8:12:fd:8d:30:e1:
74:75:cb:db:73:91:4d:60:6d:1e:02:8c:d9:67:78:
2d:b9:08:34:0d:3d:96:a7:4d:4a:ec:72:df:d2:87:
33:8f:dd:57:20:61:df:cf:24:a9:b7:71:16:d6:cb:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D5:D1:8B:CE:2B:B5:87:46:92:ED:07:7E:F8:9F:12:0F:9C:76:D1
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199488.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1941::/48
Signature Algorithm: sha256WithRSAEncryption
23:a3:94:88:69:30:ab:1f:1a:ad:1b:ec:21:27:26:2d:82:44:
dc:5f:8c:f4:21:62:87:6a:6a:7b:be:ba:7a:9b:46:30:e3:7f:
97:17:25:8c:6b:5f:80:e4:25:40:9b:59:78:eb:27:91:db:65:
b7:01:07:9e:9a:2c:2c:44:e2:5d:c6:47:72:ab:fd:f6:1b:02:
98:22:e9:23:3b:49:66:72:52:fc:0a:8e:a1:9d:b5:2c:6a:31:
55:03:2f:8a:94:63:ed:c4:bc:c1:e8:cd:1e:a4:30:7e:97:7b:
44:d1:7c:23:3a:ef:85:f0:f5:ed:4f:71:da:bd:f6:a2:fa:09:
92:00:b4:de:f4:a0:d3:e4:83:38:c6:61:f1:b9:d3:26:e0:c8:
e7:d8:b6:76:47:7d:76:2e:b9:59:2b:f1:85:ba:52:97:a4:e8:
64:a3:4e:8e:c6:ed:7b:7e:09:c4:07:ea:b6:9d:0d:17:ff:4e:
c4:85:bd:5f:8c:88:d9:0b:21:28:bc:df:10:74:68:dd:ce:fd:
7d:1b:34:f5:a8:be:44:d8:71:81:12:6e:73:ae:e7:12:7c:70:
06:34:62:fa:43:20:7f:c4:9a:91:b2:c8:cc:0a:0e:c5:63:3e:
d1:95:27:b1:45:4a:8b:c2:9c:3a:a7:8e:39:13:62:fa:04:b5:
74:61:34:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org