Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200226.roa
File: AS200226.roa (raw, json)
Hash identifier: 21iokdOHKiG5K4n9ZSsSB8hyG0NgVMpBZrmj7QmrtVk=
Subject key identifier: 6A:57:40:10:C2:E8:CF:53:58:D1:8F:8F:ED:14:57:05:53:EB:5B:51
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6F09E7B5974FE7B0036979DD828628E60D55CB19
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200226.roa
Signing time: Wed 14 Feb 2024 08:44:24 +0000
ROA not before: Wed 14 Feb 2024 08:39:24 +0000
ROA not after: Wed 12 Feb 2025 08:44:24 +0000
asID: 200226
IP address blocks: 2a06:a005:b67::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:09:e7:b5:97:4f:e7:b0:03:69:79:dd:82:86:28:e6:0d:55:cb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 14 08:39:24 2024 GMT
Not After : Feb 12 08:44:24 2025 GMT
Subject: CN=6A574010C2E8CF5358D18F8FED14570553EB5B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:84:d8:84:a8:28:08:ba:0d:00:69:53:25:
2d:ed:02:e5:88:1d:e1:58:52:77:ce:20:0f:58:18:
0d:bd:a2:b3:9a:28:bc:dd:50:6f:3d:f2:51:a5:ef:
dc:28:c3:71:e6:ca:86:73:f3:c5:ed:b3:4a:30:ce:
8f:ba:f2:9f:bb:03:55:ab:13:bd:e8:96:24:9d:c1:
61:a6:be:25:db:d3:47:19:10:c5:15:33:08:83:66:
93:fa:64:59:1e:40:0d:6d:a3:a9:cd:12:59:fd:68:
ca:34:4b:60:d1:32:d9:4b:07:c1:66:3e:31:1d:a7:
c4:55:39:86:67:29:ef:b7:9b:b5:a3:be:c7:7b:ff:
b6:49:c3:89:3c:4c:75:3d:02:b0:a8:10:f8:d4:42:
11:84:96:23:b9:53:6e:d3:e6:e0:34:09:49:37:75:
5e:30:c8:cb:d5:3f:21:51:74:f2:98:72:8a:69:70:
16:af:bb:d9:5f:ce:81:1f:70:cf:56:19:3c:3f:eb:
c3:ac:87:46:eb:0a:10:11:54:32:99:ee:89:a6:51:
a2:86:5e:ef:38:a1:64:69:ca:5c:99:71:2b:28:d4:
47:8a:88:4f:33:cf:50:41:28:d1:88:f1:c3:6f:cb:
ca:3e:57:50:84:41:89:ac:92:8b:93:ce:7b:66:87:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:40:10:C2:E8:CF:53:58:D1:8F:8F:ED:14:57:05:53:EB:5B:51
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200226.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b67::/48
Signature Algorithm: sha256WithRSAEncryption
2d:8c:59:5c:c8:4a:88:1f:42:07:35:8d:7b:6d:d4:74:76:b9:
8b:69:e6:db:55:b6:1e:74:7a:4d:46:fc:43:32:49:a5:e2:d4:
52:bb:c1:42:e7:4d:7a:05:18:53:5e:70:68:49:0b:3b:7f:e7:
37:27:37:67:bc:8f:32:69:e9:e6:41:29:8c:9c:5a:7b:cf:73:
08:4b:94:f3:67:37:ec:3b:7d:9d:bf:9b:b3:bb:3c:1f:27:54:
f5:ef:d4:14:03:26:88:1f:f7:9e:44:0b:de:74:70:76:ee:64:
3e:f7:b8:c3:7a:2f:73:49:3b:03:ca:e1:f2:f5:7f:e3:a1:02:
42:b9:74:b8:4d:0d:19:76:07:46:2b:21:de:a2:91:55:f2:70:
85:5b:a0:60:76:d9:f2:28:7d:89:27:79:3f:f1:78:f8:8e:bc:
13:d5:07:b9:53:ab:95:32:7f:c9:06:b0:ec:ef:fc:2d:e6:d9:
12:28:f2:7d:be:b4:3f:31:7a:93:cc:58:64:d2:bf:b1:c2:33:
2b:b9:99:a2:59:a9:b4:88:05:11:a7:1d:ae:76:22:87:83:f4:
05:ba:30:d5:6a:de:62:2f:fc:8b:d2:28:ae:b8:40:0a:86:18:
e9:27:dd:1b:cf:8e:a3:2f:20:6d:f9:82:80:f1:06:4d:3c:e0:
5d:44:d5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:54 2024 by rpki-client on console-ams.rpki-client.org