Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199959.roa
File: AS199959.roa (raw, json)
Hash identifier: cSuPaGqTtMhWwggDy6U5VZa8Uh2z/gbwMYDp7b9kVvg=
Subject key identifier: 7B:11:93:E9:6A:BC:63:7A:B4:57:DF:37:8B:FB:B4:0A:B5:BA:23:12
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 58D31D6BEDB793E4C59B6EBC0629B7168D613AAA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199959.roa
Signing time: Sat 25 Jan 2025 07:03:45 +0000
ROA not before: Sat 25 Jan 2025 06:58:45 +0000
ROA not after: Sat 24 Jan 2026 07:03:45 +0000
asID: 199959
IP address blocks: 185.121.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Mar 2025 05:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d3:1d:6b:ed:b7:93:e4:c5:9b:6e:bc:06:29:b7:16:8d:61:3a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 25 06:58:45 2025 GMT
Not After : Jan 24 07:03:45 2026 GMT
Subject: CN=7B1193E96ABC637AB457DF378BFBB40AB5BA2312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:bd:03:bb:85:65:a6:d8:60:af:3d:47:d2:
e3:5d:11:df:44:0b:67:40:65:f6:52:41:ba:f8:87:
bf:ad:78:57:64:8d:17:e3:01:a5:94:24:e5:da:5a:
39:e9:02:a0:8d:53:34:1e:13:c5:57:f9:ae:3d:28:
76:b4:9d:49:ec:c7:44:d9:7a:ea:7d:03:0e:5e:69:
2d:a1:bc:e1:ad:57:2f:c3:df:fd:ae:2a:72:32:25:
f4:3a:9c:f8:dd:e8:ec:d3:f8:a7:42:4f:a6:f2:48:
cf:3a:6c:a7:88:1d:8a:86:b9:f3:dd:aa:9f:bf:35:
d0:77:5b:d4:cc:fc:11:fc:1e:6b:c8:09:fa:9e:82:
2b:ea:c0:ba:d8:6c:93:df:45:1c:b1:5c:7e:a1:2b:
92:f5:be:fb:04:41:fa:0b:2c:9d:53:94:52:ea:3a:
df:51:bd:60:d1:c7:be:56:a2:da:08:2a:c9:d9:26:
99:de:8e:b0:2e:e5:c3:a3:ff:5a:76:d1:22:e4:7b:
62:3a:57:ba:85:33:31:09:94:35:c5:53:d8:e5:fb:
f7:e1:0c:41:c5:c6:12:c0:23:6e:1e:db:3f:87:42:
aa:83:a2:cf:fa:74:4f:fb:e8:f2:27:53:79:b2:42:
60:eb:ab:b0:b4:76:4c:d0:e8:43:a5:15:41:2d:c1:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:11:93:E9:6A:BC:63:7A:B4:57:DF:37:8B:FB:B4:0A:B5:BA:23:12
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.176.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b7:73:4b:60:4d:6c:30:6e:b9:fe:f1:eb:86:f2:86:80:a7:
ae:ec:4f:bc:60:6d:ef:82:1e:a6:79:7b:2b:fe:fe:4c:4e:5a:
e3:02:4b:c2:55:10:ac:7b:8f:7c:60:42:3a:8b:d0:a0:6a:3d:
69:bf:81:56:f9:18:61:72:0f:87:5c:28:81:9c:f0:47:8f:c1:
1d:fb:1b:d9:ae:00:43:6a:bd:d0:e6:9e:0f:a9:af:db:e6:56:
fb:6b:73:43:eb:bb:bb:29:73:60:af:a6:11:b1:d9:a6:bd:ea:
e6:3e:86:5d:36:43:3f:da:63:1a:2a:cc:72:3b:a4:27:75:4d:
01:89:80:48:17:2d:ca:cc:bd:4b:b0:d5:fe:b2:4a:15:80:17:
da:3c:bf:cb:3a:ac:11:1f:3a:d1:ae:31:83:69:23:d7:e7:41:
81:3a:df:30:4f:12:40:2f:9b:bb:d3:14:1e:56:a2:15:5e:bb:
26:ff:54:ad:44:2e:98:ec:c9:86:e2:ec:52:5c:5b:24:14:16:
89:fb:0b:d3:d0:81:16:0c:c7:0e:39:9e:b9:89:b4:2e:b0:03:
c6:37:e8:12:03:23:2f:23:e1:bc:b0:ba:99:5f:97:35:ed:53:
03:95:db:ae:f1:bb:e3:2d:67:d9:1d:38:0f:31:dd:9e:d2:a0:
39:25:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 19:19:53 2025 by rpki-client