Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200179.roa
File: AS200179.roa (raw, json)
Hash identifier: QRs8ZOKul6VXAm3EQ+8dy/Ro2JVwBtCeJI+LWgQPCIk=
Subject key identifier: 08:87:44:D3:13:03:4A:A2:B0:F0:1A:D4:49:A7:86:5A:9D:64:4F:05
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 603CF29FAB225573EE50FE6652E7B2D73E0DF2C5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200179.roa
Signing time: Fri 12 Jul 2024 04:06:50 +0000
ROA not before: Fri 12 Jul 2024 04:01:50 +0000
ROA not after: Fri 11 Jul 2025 04:06:50 +0000
asID: 200179
IP address blocks: 81.31.209.0/24 maxlen: 24
2a06:a005:1275::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:3c:f2:9f:ab:22:55:73:ee:50:fe:66:52:e7:b2:d7:3e:0d:f2:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jul 12 04:01:50 2024 GMT
Not After : Jul 11 04:06:50 2025 GMT
Subject: CN=088744D313034AA2B0F01AD449A7865A9D644F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:41:19:23:c9:dc:f4:7f:ed:a2:8f:50:03:0f:
65:f9:c8:f8:72:4e:46:99:26:31:eb:80:8f:30:dd:
8d:ed:01:fe:ac:c5:11:91:3b:bb:ba:c5:d4:67:b5:
70:dd:78:7d:b7:e5:39:dd:03:49:45:98:ec:2a:a5:
ce:24:34:73:31:bf:12:aa:de:9b:8f:9a:c6:be:38:
6b:b1:fd:4c:bb:ac:2c:c0:4a:ca:12:87:5b:a9:ca:
ee:4b:78:16:d5:ec:ba:1c:bc:24:e7:04:bc:13:70:
7a:c0:9b:8f:ee:78:da:eb:ff:ee:cc:64:bd:d3:a8:
d5:fe:74:42:10:5c:36:79:e2:bb:0e:09:3a:fb:f1:
69:02:a0:34:e1:83:b5:eb:ef:b3:ce:4e:56:8e:d3:
14:f4:8f:f6:21:e0:9e:7d:b9:cf:ad:d1:fc:5b:83:
d4:ad:0f:76:6f:7f:63:74:e9:83:fd:3f:fe:5f:90:
bb:99:25:c7:43:67:69:b5:1b:6f:c4:2b:fa:6d:4a:
19:9a:14:89:8e:78:bb:eb:ba:c8:e5:b1:22:9a:27:
fb:40:36:85:17:3d:92:6d:f5:a4:dd:e7:43:81:16:
a1:a2:5a:00:4b:64:a9:0b:a3:eb:6b:6f:f7:99:d6:
30:db:b1:0d:6a:5e:00:77:c6:0b:e2:45:92:8c:1a:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:87:44:D3:13:03:4A:A2:B0:F0:1A:D4:49:A7:86:5A:9D:64:4F:05
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200179.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.209.0/24
IPv6:
2a06:a005:1275::/48
Signature Algorithm: sha256WithRSAEncryption
46:ef:75:59:b3:8f:5d:ec:de:ad:ff:ef:2a:27:fa:cc:29:5c:
37:02:d0:db:9f:e6:cb:d9:5a:6c:5e:f6:a3:d1:c0:a0:ea:23:
91:51:f6:d7:69:db:0a:0e:e9:cd:28:71:d4:9f:77:f8:13:ad:
15:8a:09:8f:1b:0e:f0:d6:eb:d9:ec:85:51:72:7c:3f:2e:4e:
89:fb:11:f1:e0:b0:ce:90:b9:a7:82:8d:ea:91:35:7c:21:de:
8a:c0:50:4a:39:dd:31:a5:fb:fd:3b:fe:4b:60:c7:0b:ca:c7:
4d:82:84:9b:12:df:0a:88:12:f2:99:20:c8:1c:e1:bb:73:2a:
eb:15:b7:87:7d:80:03:6a:0c:e5:d1:15:dd:fd:3d:8a:df:f1:
94:ec:41:86:03:1f:6c:c3:46:64:cf:01:15:48:32:1f:bb:04:
69:d3:ab:4d:21:77:f4:28:8f:36:6e:bf:2f:8f:b4:b2:70:66:
6d:4f:8c:85:2b:15:e7:69:07:85:70:07:31:30:7e:a0:4f:55:
f4:60:d8:56:e4:27:ea:ef:95:c4:b0:3c:c8:2f:e6:93:45:5c:
4b:3d:16:15:1f:63:72:4b:bf:65:4e:db:7e:37:70:e3:fa:64:
76:b7:82:7e:c7:54:b5:ff:28:e4:c6:e0:f8:66:c7:0d:d8:0d:
24:25:f1:6f
-----BEGIN CERTIFICATE-----
MIIE9jCCA96gAwIBAgIUYDzyn6siVXPuUP5mUuey1z4N8sUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDA3MTIwNDAxNTBaFw0yNTA3MTEwNDA2NTBaMDMxMTAvBgNV
BAMTKDA4ODc0NEQzMTMwMzRBQTJCMEYwMUFENDQ5QTc4NjVBOUQ2NDRGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWQRkjydz0f+2ij1ADD2X5yPhy
TkaZJjHrgI8w3Y3tAf6sxRGRO7u6xdRntXDdeH235TndA0lFmOwqpc4kNHMxvxKq
3puPmsa+OGux/Uy7rCzASsoSh1upyu5LeBbV7LocvCTnBLwTcHrAm4/ueNrr/+7M
ZL3TqNX+dEIQXDZ54rsOCTr78WkCoDThg7Xr77POTlaO0xT0j/Yh4J59uc+t0fxb
g9StD3Zvf2N06YP9P/5fkLuZJcdDZ2m1G2/EK/ptShmaFImOeLvrusjlsSKaJ/tA
NoUXPZJt9aTd50OBFqGiWgBLZKkLo+trb/eZ1jDbsQ1qXgB3xgviRZKMGo3dAgMB
AAGjggIAMIIB/DAdBgNVHQ4EFgQUCIdE0xMDSqKw8BrUSaeGWp1kTwUwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAwMTc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEH
AQH/BCEwHzAMBAIAATAGAwQAUR/RMA8EAgACMAkDBwAqBqAFEnUwDQYJKoZIhvcN
AQELBQADggEBAEbvdVmzj13s3q3/7yon+swpXDcC0Nuf5svZWmxe9qPRwKDqI5FR
9tdp2woO6c0ocdSfd/gTrRWKCY8bDvDW69nshVFyfD8uTon7EfHgsM6QuaeCjeqR
NXwh3orAUEo53TGl+/07/ktgxwvKx02ChJsS3wqIEvKZIMgc4btzKusVt4d9gANq
DOXRFd39PYrf8ZTsQYYDH2zDRmTPARVIMh+7BGnTq00hd/QojzZuvy+PtLJwZm1P
jIUrFedpB4VwBzEwfqBPVfRg2FbkJ+rvlcSwPMgv5pNFXEs9FhUfY3JLv2VO2343
cOP6ZHa3gn7HVLX/KOTG4Phmxw3YDSQl8W8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:54 2024 by rpki-client on console-ams.rpki-client.org