Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199682.roa
File: AS199682.roa (raw, json)
Hash identifier: VTurBioIOQjesIM1rwYB1p7U7wCC8cJR5QgThvoLIJg=
Subject key identifier: EE:BB:54:B7:84:4C:7D:BF:7A:F5:E2:15:C0:D1:CA:2C:75:07:8C:A9
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 616D162A1F24D073759AD665722DC5E034358423
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199682.roa
Signing time: Tue 30 Jan 2024 21:44:24 +0000
ROA not before: Tue 30 Jan 2024 21:39:24 +0000
ROA not after: Tue 28 Jan 2025 21:44:24 +0000
asID: 199682
IP address blocks: 2a06:a005:180c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:6d:16:2a:1f:24:d0:73:75:9a:d6:65:72:2d:c5:e0:34:35:84:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 30 21:39:24 2024 GMT
Not After : Jan 28 21:44:24 2025 GMT
Subject: CN=EEBB54B7844C7DBF7AF5E215C0D1CA2C75078CA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:7b:99:d8:28:7e:06:f8:4f:9c:9e:b7:4b:
5b:9d:c7:4f:e9:f1:73:5d:47:12:15:d9:06:4a:ba:
5a:3b:fc:c5:e3:fd:a0:bb:1a:bd:34:2a:b6:cf:08:
50:ff:58:a5:74:38:e0:51:d8:b5:f5:a3:e9:51:9d:
76:10:f8:69:6c:a4:35:d9:0f:d2:a9:fb:e2:74:8a:
b9:fc:3c:a2:9e:fd:0a:1d:f6:f6:58:6b:3c:90:64:
31:6a:72:90:82:92:0e:56:20:e9:3e:8c:9d:3e:69:
f8:6b:34:36:24:94:3d:a4:40:6d:26:0b:ff:1e:21:
a4:81:f5:63:40:83:19:1c:45:f4:7b:a6:7f:04:07:
76:85:be:7b:c0:8e:5c:5b:9e:9f:80:a9:c4:df:9c:
37:f1:c9:c3:54:2e:06:86:aa:93:67:d3:55:85:c8:
32:f3:12:65:60:df:a1:72:96:ab:39:69:8a:15:db:
41:be:60:2f:66:e3:c9:93:fb:86:ce:a2:35:53:49:
78:79:e6:41:ff:b4:a1:06:40:35:e3:96:0c:81:4f:
76:ab:9a:8e:3a:50:b7:57:09:c7:d3:35:94:42:ff:
9d:39:8a:a7:92:ec:46:d0:13:cd:05:25:59:18:dd:
86:bc:27:74:9b:34:70:49:7d:07:64:1f:e5:62:44:
eb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BB:54:B7:84:4C:7D:BF:7A:F5:E2:15:C0:D1:CA:2C:75:07:8C:A9
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:180c::/48
Signature Algorithm: sha256WithRSAEncryption
a9:aa:e9:6f:48:d2:4d:3e:4d:c5:f3:25:94:08:43:5c:3e:7f:
d1:7e:e9:b3:d0:10:04:31:ae:4d:8b:23:ff:37:ec:16:56:81:
c0:8d:90:6d:35:08:25:99:5e:48:2f:51:3b:20:54:62:ca:d8:
aa:30:1c:b2:fc:d0:dd:45:3b:c0:10:9e:c3:fa:3f:1a:8c:11:
93:35:d6:d4:a6:88:c3:89:6a:21:c9:c0:57:3b:35:11:84:a5:
1c:91:65:30:b3:74:53:4a:82:11:dc:19:cd:70:e4:ad:00:20:
25:00:30:6a:c5:6d:04:9e:84:25:70:8a:42:cd:bf:a2:56:b9:
fd:ce:6f:30:60:3d:91:2e:24:da:73:68:cf:76:8b:fd:4c:bb:
ac:9b:a4:db:64:65:7d:33:6a:8e:dd:54:f3:07:a1:93:c5:a4:
ed:00:09:fb:a8:d8:40:64:66:bb:c6:14:92:16:0b:0e:c6:64:
94:0e:0e:f0:a9:aa:88:c7:de:05:1d:5a:c9:54:dd:55:3b:80:
fb:94:a6:3e:21:a6:97:4e:0f:3a:13:03:ff:dd:27:ea:37:e0:
d9:5e:86:6a:fa:76:5c:2a:1a:52:2b:ea:a2:43:27:00:45:85:
3d:09:ad:1e:6d:ff:ed:69:5e:f9:5b:a2:44:be:28:5f:37:da:
9d:0b:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:11 2024 by rpki-client on console-fra.rpki-client.org