Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199929.roa
File: AS199929.roa (raw, json)
Hash identifier: wlYt0OMmP4IC1QT6/Zl3YDNF7LrLLp4251dU9yUX6E4=
Subject key identifier: E7:F8:3C:C7:30:58:82:1C:E6:CB:85:18:B5:9A:B5:94:49:DE:1F:51
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 384F2262EA9D40C799FD2ACC5680728CECE4D3C6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199929.roa
Signing time: Fri 12 Jan 2024 15:44:21 +0000
ROA not before: Fri 12 Jan 2024 15:39:21 +0000
ROA not after: Fri 10 Jan 2025 15:44:21 +0000
asID: 199929
IP address blocks: 2a06:a005:1f60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:4f:22:62:ea:9d:40:c7:99:fd:2a:cc:56:80:72:8c:ec:e4:d3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 12 15:39:21 2024 GMT
Not After : Jan 10 15:44:21 2025 GMT
Subject: CN=E7F83CC73058821CE6CB8518B59AB59449DE1F51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:4d:c2:6a:ce:eb:7d:cb:ba:20:23:45:d1:
d3:63:4c:90:2e:2e:87:cb:7e:b5:45:60:89:1d:bf:
42:74:92:b0:f1:63:d3:97:72:b0:53:10:d5:7b:b1:
e1:a8:18:88:d2:a1:90:37:79:6e:bf:ff:e8:9a:ab:
04:73:8f:8a:4d:2c:c6:17:1d:ac:17:21:99:7f:ac:
03:8a:9b:d2:81:99:aa:52:c4:b2:1e:c9:a5:41:4c:
0a:36:c7:97:2f:f0:03:6a:c5:e3:2f:0d:f2:9b:c2:
f9:99:55:e9:80:22:49:f3:c7:5f:37:6b:c6:d5:7d:
b9:9b:d5:78:2b:7c:4a:e9:19:c9:f7:cc:06:43:ee:
d3:93:07:67:6a:85:83:24:63:4c:ad:2d:3a:8d:01:
04:df:5d:26:0e:1a:a3:6d:3c:5f:59:2e:91:b4:78:
ec:e3:8c:43:ab:16:0b:12:99:cd:50:57:43:b9:5a:
e3:a9:ee:a6:12:ab:ee:8d:6b:c9:fc:09:4e:3c:be:
f0:80:b2:19:d6:95:9a:ae:65:87:d4:05:1a:cc:f2:
eb:fb:08:3c:87:6e:37:0a:c6:84:76:f5:0e:80:61:
79:b0:62:1c:90:82:21:e8:ec:e6:49:d6:5c:24:59:
ef:10:64:56:85:ff:73:57:d2:23:64:37:a7:48:b8:
bd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:3C:C7:30:58:82:1C:E6:CB:85:18:B5:9A:B5:94:49:DE:1F:51
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1f60::/44
Signature Algorithm: sha256WithRSAEncryption
93:85:02:1a:ac:76:b2:ab:e0:7e:7d:4c:dd:6b:3b:76:fb:97:
99:7f:97:0b:0a:93:44:cc:e3:da:0b:51:54:06:26:1a:6d:a0:
f6:92:cb:15:8c:a0:13:47:29:29:e2:3f:c1:f2:ab:94:76:7a:
66:57:0f:7f:55:ca:cd:96:87:ed:89:7a:6e:53:0c:7d:ec:74:
6d:bb:8a:f1:a7:1c:4b:71:44:c9:f9:ba:96:62:f9:88:d8:e2:
15:90:7b:d2:c1:dc:f3:d0:91:c3:d5:e8:81:7c:61:d7:c0:5d:
36:1a:ac:cc:b3:aa:eb:83:e6:30:6e:fe:d0:50:60:a3:d2:00:
4f:9f:72:2c:04:68:d7:ed:c6:6d:eb:39:40:d2:38:ef:7b:c0:
ad:42:d3:f9:69:33:79:1a:f0:c4:80:4d:93:b3:dc:3f:69:9e:
11:d9:db:49:8d:98:a5:e1:9a:4f:b8:01:8a:14:ee:34:b9:31:
9f:5a:d5:f3:be:be:17:a0:78:27:e9:64:37:da:4d:89:1e:a3:
28:3e:42:9c:37:40:2f:0a:6b:18:74:b1:f6:16:27:b5:8e:de:
9c:15:83:31:3e:1c:6d:d7:db:23:3a:4f:c4:3e:be:eb:b4:81:
3e:78:af:5f:50:e9:d8:fb:c3:40:66:54:19:3d:2a:72:91:5b:
00:bf:65:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org