Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199751.roa
File: AS199751.roa (raw, json)
Hash identifier: pMqyoSijwXEVefBSPS7J8i/BTLJrw+CnH/tCYvYRRR4=
Subject key identifier: 6A:93:C2:28:7F:D2:42:18:D7:E1:3C:41:68:50:D6:03:C3:B3:25:7C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1CCE94480D86CF39615E1343F654CD6D4C9EEC77
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199751.roa
Signing time: Thu 03 Oct 2024 03:27:09 +0000
ROA not before: Thu 03 Oct 2024 03:22:09 +0000
ROA not after: Thu 02 Oct 2025 03:27:09 +0000
asID: 199751
IP address blocks: 160.202.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ce:94:48:0d:86:cf:39:61:5e:13:43:f6:54:cd:6d:4c:9e:ec:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Oct 3 03:22:09 2024 GMT
Not After : Oct 2 03:27:09 2025 GMT
Subject: CN=6A93C2287FD24218D7E13C416850D603C3B3257C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8e:4e:11:c4:ab:e6:3a:32:62:1d:2f:44:70:
ea:13:d1:48:c1:4e:de:c3:43:3a:3f:6c:a7:bf:a1:
a1:8d:58:b2:61:95:09:d2:a0:61:19:7b:e2:6a:56:
62:e0:e6:fb:22:c3:63:e9:9e:d7:9b:f4:9e:e9:67:
aa:13:59:52:3f:03:21:ed:f7:fe:6d:22:ea:92:58:
21:58:f5:71:09:5b:20:a4:b0:09:59:cc:08:56:9b:
85:3d:7c:19:1b:57:02:2a:14:d9:5a:2d:1b:07:b5:
68:dc:9d:a2:7e:6a:45:48:c7:c8:a0:d7:96:9a:6c:
48:84:cc:53:d1:5d:21:c8:e3:67:69:7f:f9:ed:e4:
bb:12:5a:9d:7c:6b:62:87:27:af:ec:11:b7:b5:d9:
10:d6:e4:41:f2:b2:84:bf:70:aa:88:3c:cb:e4:3c:
3c:4d:85:7e:eb:06:b5:b6:bb:1d:e7:b2:5b:93:fe:
47:5b:dd:68:ea:41:2b:aa:c4:82:3f:0f:77:0b:01:
44:61:6a:44:0b:f2:09:cb:97:3f:7d:7f:33:0d:e7:
ed:95:2a:34:2b:68:ca:8e:40:5b:bb:57:81:6b:37:
84:98:61:f8:b1:03:ef:d1:be:12:83:81:87:36:f1:
22:0b:bd:e7:4f:77:7a:31:61:53:a4:dd:33:20:68:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:93:C2:28:7F:D2:42:18:D7:E1:3C:41:68:50:D6:03:C3:B3:25:7C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199751.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.202.135.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:ef:28:62:67:74:0c:c6:71:f9:9b:ee:25:d9:b5:63:bf:a0:
ec:cf:63:34:a6:1c:a5:cf:cd:ea:26:2e:83:4b:d3:4f:04:c8:
7d:c9:e4:b3:5b:fa:d8:a9:6f:0c:24:ba:1a:77:cd:ae:69:06:
18:bf:9d:2c:72:50:7c:87:9d:69:d4:0e:36:bd:fe:57:ef:d7:
de:5a:91:25:10:ec:eb:b1:58:cb:ee:55:ed:85:f2:10:8b:e6:
bf:47:02:d8:e1:ce:c4:a2:7d:ec:56:25:12:f1:1a:df:82:d1:
7d:14:04:4b:49:8e:32:4f:71:7c:b4:3d:a7:6a:d7:dd:c6:54:
1e:13:3a:3b:18:d1:42:19:8d:ac:b1:c5:83:fa:e0:23:fa:12:
06:2d:f1:bb:3d:f9:86:98:30:cc:f5:99:a1:2d:ae:11:28:42:
3a:6b:eb:0a:45:67:16:4c:e9:d3:76:83:f4:84:76:67:56:81:
ac:86:e9:e6:4f:e2:4f:e1:43:5e:3f:65:88:ca:8a:3c:c7:d2:
ab:0c:aa:23:f2:8b:48:d5:cd:4f:2a:36:ac:38:2e:9b:0f:99:
11:fe:5f:bb:e2:5b:e9:5d:f5:12:20:8f:6c:b8:c6:1d:e8:f2:
d6:67:57:fe:4e:ae:f4:b8:6f:54:f5:e2:90:c9:5f:88:3c:22:
cf:85:a7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:34 2024 by rpki-client on console-fra.rpki-client.org