Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200179.roa
File: AS200179.roa (raw, json)
Hash identifier: JFrea62dPFQLGlmlsYpAICl0quBQ+sCPy5TZhbJG0WE=
Subject key identifier: 07:43:73:73:E1:AC:2B:03:9F:DE:38:4D:9D:AC:96:79:A9:55:23:4A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 515788CEFAB0820ABE51E8FF0DD72A245088F4FC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200179.roa
Signing time: Mon 25 Dec 2023 17:44:21 +0000
ROA not before: Mon 25 Dec 2023 17:39:21 +0000
ROA not after: Mon 23 Dec 2024 17:44:21 +0000
asID: 200179
IP address blocks: 2a06:a005:1275::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:57:88:ce:fa:b0:82:0a:be:51:e8:ff:0d:d7:2a:24:50:88:f4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 25 17:39:21 2023 GMT
Not After : Dec 23 17:44:21 2024 GMT
Subject: CN=07437373E1AC2B039FDE384D9DAC9679A955234A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:ac:26:91:39:95:05:d5:04:65:97:cb:3f:
24:5c:75:a2:e8:bf:1e:48:75:e5:9f:9b:bc:9a:4d:
5a:1f:4b:15:a5:1f:df:29:15:b5:4a:00:35:4e:8f:
e9:bf:7b:36:88:6c:95:f3:cd:c5:15:92:11:d6:11:
00:84:05:09:94:2f:a9:71:d8:68:f4:82:6b:d5:84:
8c:55:2a:96:b7:63:d5:16:22:1e:35:a3:fb:79:2f:
68:cb:29:09:3e:e5:61:cf:86:46:87:84:73:21:04:
5c:3b:7e:b5:ae:fb:68:c1:ca:bb:ae:0e:36:8d:48:
ef:a1:5c:b5:38:63:07:87:3e:c6:4a:aa:d2:e8:93:
79:ba:32:66:95:18:2c:b0:8a:b0:33:ff:b9:f3:50:
c1:62:e5:b7:00:a7:17:bc:c0:c5:1b:88:09:77:85:
52:f1:73:5e:f5:dc:74:a6:ef:79:4c:82:09:1c:8c:
1c:4c:1a:49:3e:54:e4:48:dd:3b:10:af:20:f0:82:
44:50:ee:d4:cc:b7:d7:43:e9:89:58:3a:4d:4a:e8:
a7:b5:85:bb:7a:b7:5f:22:c9:cc:1c:0e:59:7b:16:
f7:a1:a0:bb:32:b9:14:1a:5a:bf:e5:ed:e5:2b:2c:
25:cf:f4:0c:8f:2f:ea:5f:f9:56:cb:d0:2f:36:5b:
70:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:43:73:73:E1:AC:2B:03:9F:DE:38:4D:9D:AC:96:79:A9:55:23:4A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1275::/48
Signature Algorithm: sha256WithRSAEncryption
38:0b:08:ed:58:c2:36:eb:38:2e:1d:45:33:92:39:0d:fc:ad:
d4:d2:80:cb:2e:dc:a9:09:85:5d:cc:30:45:83:5c:d2:d7:b8:
99:ea:39:dc:84:06:55:0a:e3:b2:57:a0:04:e5:07:81:14:7a:
04:ed:a6:e5:fc:ce:8f:c4:5f:a6:dd:6e:fa:5d:12:91:9f:57:
a7:01:45:4d:e5:03:88:6a:a1:a5:64:29:66:e4:9d:93:77:01:
62:d7:78:cb:ae:6b:ee:2b:32:13:fc:7f:1a:58:b6:fa:8f:68:
dd:6d:b3:71:d1:a2:d9:5c:bd:62:de:36:37:6c:d2:d8:41:ff:
f6:e8:33:61:a3:c5:c1:86:4d:80:26:29:35:59:ab:93:c4:7c:
a1:9f:99:5d:dc:bd:c5:c7:7c:06:3e:a0:5c:73:9d:2d:9c:da:
95:03:f7:9f:d3:a7:36:6d:97:11:2d:c2:2b:64:aa:f9:ec:ea:
08:2e:c2:34:17:5b:8a:7b:34:52:b0:6a:94:9d:47:47:37:fe:
28:0b:56:e8:3e:c1:3d:e4:5b:93:be:e4:3e:c3:be:c4:c6:8d:
e0:05:85:73:f5:f8:6e:1e:16:af:b0:81:bd:a0:9f:12:20:2f:
ed:67:ed:82:9e:46:8a:11:66:22:80:a4:a0:c5:0e:e6:f4:ae:
88:23:b9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:55 2024 by rpki-client on console-fra.rpki-client.org