Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199785.roa
File: AS199785.roa (raw, json)
Hash identifier: s7Q8+trCcx0lZRMhHif4uvI742x39uizw502pdgFpG8=
Subject key identifier: 80:E3:AB:C0:04:3F:A2:F4:E2:E8:7F:E7:D0:8C:2C:D1:B3:D3:35:93
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4BDCD9BDE41F78E67CFB8873E13ED5A58B1C0349
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199785.roa
Signing time: Wed 07 Feb 2024 00:44:24 +0000
ROA not before: Wed 07 Feb 2024 00:39:24 +0000
ROA not after: Wed 05 Feb 2025 00:44:24 +0000
asID: 199785
IP address blocks: 2a06:a005:15db::/48 maxlen: 48
2a06:a005:2cc0::/44 maxlen: 48
2a06:a005:2e90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:dc:d9:bd:e4:1f:78:e6:7c:fb:88:73:e1:3e:d5:a5:8b:1c:03:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 7 00:39:24 2024 GMT
Not After : Feb 5 00:44:24 2025 GMT
Subject: CN=80E3ABC0043FA2F4E2E87FE7D08C2CD1B3D33593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:98:85:99:5a:bb:89:22:aa:00:81:36:8a:
98:dc:6d:21:7e:11:cd:a5:99:d8:c5:8c:f0:e0:bd:
ba:f6:75:0d:c1:14:30:0c:bf:be:29:75:ae:df:37:
43:58:d5:aa:c3:a9:8e:86:16:53:ea:12:01:cc:e9:
f8:6f:98:3f:07:a6:8f:d6:ec:99:4d:33:c7:b6:c6:
b5:8c:2d:a6:d4:a6:85:e3:23:21:ac:c4:43:47:f4:
cb:86:6c:8b:a9:7a:9b:b7:ec:94:ae:58:ec:68:d7:
db:b3:8f:6b:2a:cd:8c:72:68:cc:1d:96:e1:d7:b6:
1e:95:8f:d2:5b:7a:da:6c:5b:76:86:eb:0c:06:95:
82:6a:bd:58:f4:60:99:d0:3d:23:62:96:90:5b:72:
ee:66:57:1b:12:5d:79:13:38:8d:a7:19:a7:27:16:
64:79:23:8b:96:2e:9d:8b:c5:2a:f1:9b:28:61:e0:
6f:8a:4c:4b:0f:cc:14:c3:2c:20:8f:d0:2a:21:c6:
05:ec:73:63:0f:6c:14:a4:f8:82:28:1f:5d:9a:3e:
62:5f:c1:09:5e:b9:bc:b4:d4:be:c6:3a:a3:c5:b8:
89:95:d6:ab:08:fc:42:bc:b7:21:82:52:6f:1d:39:
56:77:ed:b8:16:61:f0:d6:ca:2a:a4:92:05:76:d0:
7f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E3:AB:C0:04:3F:A2:F4:E2:E8:7F:E7:D0:8C:2C:D1:B3:D3:35:93
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199785.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:15db::/48
2a06:a005:2cc0::/44
2a06:a005:2e90::/44
Signature Algorithm: sha256WithRSAEncryption
81:3d:79:5d:68:ed:5a:93:e6:ab:2d:06:48:73:5f:6f:97:aa:
7a:1f:0b:b4:f3:63:45:fa:93:ce:69:23:c0:36:aa:51:13:f3:
2d:95:96:ef:c8:d5:31:c8:35:a2:0c:fd:b4:2d:47:df:29:e9:
5d:15:20:f3:d7:49:7c:89:75:19:fe:ce:20:4a:fd:64:42:5d:
c6:0e:ad:b9:3d:28:4c:d7:04:69:54:4e:bc:82:ae:5a:e4:76:
f5:0c:2e:dd:b3:d6:d3:39:1c:8a:eb:cc:a9:c9:46:b0:2e:71:
20:09:82:dd:ad:2c:db:5e:e3:80:be:49:5f:99:91:15:20:97:
0c:52:b9:8b:8f:30:af:62:69:32:03:5a:38:5b:33:af:79:05:
6b:55:79:b0:78:45:ef:7b:ac:5f:ae:cc:15:a8:df:aa:38:49:
2e:76:87:a0:a4:3e:b2:e5:ec:e5:ae:09:93:d9:d2:9f:57:0f:
85:57:36:c8:a0:33:42:c0:e4:57:df:06:16:9b:f8:69:4e:ee:
96:96:d0:04:4b:2e:98:ad:a2:fb:18:6f:66:4f:81:3b:e4:cc:
10:00:9c:29:09:09:c0:2c:01:f5:32:e1:1b:0a:43:00:26:6c:
c8:21:2e:b6:1a:72:27:b4:b9:93:7c:6f:97:07:23:e6:dc:f2:
a7:75:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:11 2024 by rpki-client on console-fra.rpki-client.org