Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200122.roa
File: AS200122.roa (raw, json)
Hash identifier: xmW/cJ0ixUWnyRQSPkfueu/Xk7SwEUJ1cCYbMkUWCS4=
Subject key identifier: 3C:B1:2D:2F:6D:EE:10:60:B3:1D:A4:A2:15:01:5B:C2:E4:17:DE:FF
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 32D191F9EB84DA416AFC21FC34055691CEB4BE6B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200122.roa
Signing time: Wed 31 Jan 2024 16:44:24 +0000
ROA not before: Wed 31 Jan 2024 16:39:24 +0000
ROA not after: Wed 29 Jan 2025 16:44:24 +0000
asID: 200122
IP address blocks: 2a06:a005:1874::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d1:91:f9:eb:84:da:41:6a:fc:21:fc:34:05:56:91:ce:b4:be:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 31 16:39:24 2024 GMT
Not After : Jan 29 16:44:24 2025 GMT
Subject: CN=3CB12D2F6DEE1060B31DA4A215015BC2E417DEFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:8f:98:c5:b8:37:bc:f4:1c:7f:82:9b:28:
b8:c5:b8:0c:2b:c3:c9:b7:8b:84:db:54:42:4a:4a:
07:b4:17:a9:a3:3b:ac:7f:3d:50:cd:cf:d1:76:68:
a3:5c:85:1d:a2:df:7d:28:34:39:0f:39:a9:43:d1:
f0:09:b9:bf:d1:e3:9a:57:09:6f:70:79:de:c1:d8:
93:cb:24:32:7b:ab:89:29:9c:c4:b6:a7:05:a4:da:
c8:52:f6:fd:75:19:bb:cb:f9:33:04:6b:65:0d:11:
df:ca:11:63:9a:36:f2:d0:8a:c0:71:72:ce:6f:b1:
9f:f0:7e:05:17:d2:90:67:d5:38:a1:37:7e:7e:ce:
c3:4e:2d:d6:b9:05:b2:b0:7e:87:4b:b2:be:11:cd:
d8:99:8a:39:24:fb:50:78:8a:82:70:21:68:35:80:
9f:c0:51:24:c8:aa:5e:c0:4d:8f:cf:86:3a:17:9f:
8f:4e:20:ab:3c:db:91:f4:f6:13:6f:dd:46:e6:53:
0a:43:8e:17:ed:42:50:a6:84:e6:51:bd:4a:96:98:
f1:06:3a:ec:86:28:e3:78:a8:47:3c:71:49:5e:57:
12:62:4b:32:27:27:a7:44:cc:34:b5:16:84:28:f9:
c7:34:00:e8:d8:4e:24:74:2b:8e:a5:2b:d4:bb:d3:
5a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:2D:2F:6D:EE:10:60:B3:1D:A4:A2:15:01:5B:C2:E4:17:DE:FF
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200122.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1874::/48
Signature Algorithm: sha256WithRSAEncryption
71:b3:ca:71:eb:0a:3e:14:f3:1b:4c:ff:23:79:40:c9:a1:05:
e6:44:ae:bf:45:13:c4:9d:a7:1b:18:62:22:2f:d8:99:b2:27:
b8:ed:71:81:87:c3:69:df:b4:b5:19:65:c7:60:9e:9b:e0:c3:
1c:09:ad:b5:43:24:44:2d:6f:00:37:22:e7:00:ed:1a:3a:a1:
46:ce:5e:ab:21:1a:cd:7c:44:3d:72:d2:2c:bc:24:cc:c2:32:
6d:ad:19:e1:dc:4d:17:07:12:3c:fc:16:ad:34:92:35:46:45:
da:f0:c1:a8:ac:d0:1f:69:f4:36:57:1a:76:f7:e5:c4:19:1c:
ad:12:27:58:d5:11:9d:29:ad:4d:69:da:4d:8a:c3:32:89:90:
c4:9f:88:d9:6e:91:75:b3:cb:39:55:43:d5:4a:a9:9b:c4:32:
65:c2:09:87:fe:fe:da:d5:e8:2e:03:cd:48:d9:96:c1:7f:fa:
a6:de:41:dd:7a:e8:5f:c3:df:fe:a6:e3:34:13:44:6b:03:b8:
45:0a:64:c3:23:8e:20:41:34:61:8d:6f:bc:9b:92:84:4b:16:
66:23:be:9a:ca:87:85:b6:e6:f7:21:81:ea:e7:20:72:3a:41:
12:f4:28:9e:81:a1:7a:f1:b4:ef:71:0f:79:55:15:f0:c3:63:
34:84:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:22 2024 by rpki-client on console-fra.rpki-client.org