Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199682.roa
File: AS199682.roa (raw, json)
Hash identifier: lcZ2HHvy+weAHM6dyfKgvTNxwLZ9QPFtxU+9519Hbic=
Subject key identifier: F0:43:5D:82:BA:97:68:00:1A:B3:38:A2:6B:CF:CE:EB:AD:94:0E:A0
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 725AC76D423A52A48C6D30A4D3F178F05021AE9D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199682.roa
Signing time: Tue 31 Dec 2024 22:40:12 +0000
ROA not before: Tue 31 Dec 2024 22:35:12 +0000
ROA not after: Tue 30 Dec 2025 22:40:12 +0000
asID: 199682
IP address blocks: 2a06:a005:180c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5a:c7:6d:42:3a:52:a4:8c:6d:30:a4:d3:f1:78:f0:50:21:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 31 22:35:12 2024 GMT
Not After : Dec 30 22:40:12 2025 GMT
Subject: CN=F0435D82BA9768001AB338A26BCFCEEBAD940EA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:c1:04:b7:21:e3:5e:4d:68:4e:96:62:73:
4a:d6:bb:94:8b:10:30:fa:4b:12:4b:2b:db:97:5a:
35:29:ca:27:0b:ee:49:44:6f:64:3a:b6:22:dd:0a:
55:64:51:a2:6e:5e:8f:54:10:80:a0:1e:c4:7b:30:
98:d1:6e:c9:62:63:6a:7a:fe:70:b8:8a:a3:33:ab:
51:de:9e:d2:4a:ac:60:09:f1:30:2f:59:39:1f:17:
12:47:bb:21:13:3a:41:1d:df:2d:78:61:15:98:9f:
96:a7:56:ca:a0:bb:5a:e0:30:1e:b3:b6:3d:8e:ab:
bf:64:01:45:05:73:09:92:54:5f:0f:5a:29:aa:11:
4c:29:81:bb:26:bc:ac:59:05:f4:f4:05:60:6c:b2:
05:73:bf:00:5d:37:f3:57:f4:b2:fb:d3:9e:c1:7f:
3c:a8:94:1a:30:f4:a6:23:a8:c6:4c:26:e9:1d:4e:
51:71:09:30:c6:4d:9b:ab:3f:54:a6:ba:ea:1d:bf:
9b:f9:93:bf:b0:3b:94:0c:38:c9:a1:d7:df:5e:23:
d5:c5:e1:0f:8c:fc:20:9d:f8:7e:c4:3a:67:d5:a3:
1e:10:91:69:dd:e8:58:88:08:5e:30:4e:7d:6d:91:
54:93:ed:bb:67:ef:5b:4b:88:29:aa:00:53:c5:55:
a6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:43:5D:82:BA:97:68:00:1A:B3:38:A2:6B:CF:CE:EB:AD:94:0E:A0
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:180c::/48
Signature Algorithm: sha256WithRSAEncryption
5c:dc:95:06:33:07:59:2d:c1:27:64:ba:f3:10:41:92:0b:0e:
7d:9c:74:2f:8e:9f:28:b9:13:04:1d:44:c1:a7:e3:ff:77:58:
f9:c3:9a:8b:5f:9d:c7:6f:80:11:e3:db:3b:6c:0f:ef:55:8b:
96:60:0a:f8:37:25:6a:2c:57:1d:e0:fe:0e:0f:a6:08:73:22:
99:91:f3:0b:59:11:be:f3:1b:c4:52:51:99:ef:6a:ec:a4:e4:
83:c2:d9:68:bb:56:27:84:69:18:eb:47:46:ef:08:ff:2e:cb:
4b:34:f3:a4:44:78:84:c5:7a:00:94:51:f2:38:e4:7a:f6:e8:
9c:5c:26:9d:51:af:6c:e1:06:23:12:61:e0:c6:2f:ea:2b:fc:
8e:9b:07:01:9c:c6:1f:ca:f0:7f:94:91:6e:d6:59:36:e6:f7:
34:4d:6e:87:0b:0c:71:0b:e3:7c:80:bf:b3:b9:57:45:e3:ac:
ff:94:54:10:f8:19:48:d0:a6:f1:b2:70:a6:59:7d:87:e1:5e:
80:34:b5:37:0a:9f:ef:74:d5:93:11:06:74:ff:e3:0d:43:40:
94:7a:7b:c0:b8:1f:6a:cf:b8:a6:5c:89:eb:b3:45:7a:3c:be:
51:a1:a6:51:88:b6:fa:80:d5:3d:bd:fe:fb:29:15:4b:a4:a6:
e0:be:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:05 2025 by rpki-client