Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200262.roa
File: AS200262.roa (raw, json)
Hash identifier: bzCrR6SgK2V888/QDjAeeD2hmUoJrnyWlz3RrjHmsE4=
Subject key identifier: 1E:DD:54:53:F9:F9:C3:06:81:F0:6A:D1:FD:15:7A:70:76:FE:99:9A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3FFD3B19C84FC0D9ED31F5733145E3D953401AD6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200262.roa
Signing time: Tue 05 Dec 2023 02:44:09 +0000
ROA not before: Tue 05 Dec 2023 02:39:09 +0000
ROA not after: Tue 03 Dec 2024 02:44:09 +0000
asID: 200262
IP address blocks: 2a06:a005:29a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:fd:3b:19:c8:4f:c0:d9:ed:31:f5:73:31:45:e3:d9:53:40:1a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:09 2023 GMT
Not After : Dec 3 02:44:09 2024 GMT
Subject: CN=1EDD5453F9F9C30681F06AD1FD157A7076FE999A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:c0:1b:68:24:25:53:91:56:61:75:49:8a:
1b:33:e3:ca:9d:1f:e6:b1:54:2a:c8:aa:30:41:57:
2f:78:5b:cc:3f:d1:30:1b:d1:9e:dc:89:f0:cb:b1:
b9:79:cd:b0:ae:b4:76:62:a2:0d:6d:30:08:a4:2b:
ac:60:c5:82:ab:78:ba:91:0c:c5:96:78:f9:66:56:
09:06:ae:bf:08:89:c2:15:a2:cc:fd:26:ba:79:0c:
73:d5:2d:37:87:fd:e3:ae:cb:61:9a:85:4a:d8:10:
4f:e7:d5:b5:d5:d4:a9:81:01:46:33:cf:e3:ed:be:
b1:0b:d2:26:96:61:d0:83:dd:b7:d3:c5:bc:73:21:
f5:5a:ae:4c:09:fe:cc:60:70:06:da:5d:b5:31:bd:
e6:ca:48:3c:80:54:bc:10:1d:72:6f:f4:aa:f8:ef:
91:14:d2:81:b0:66:d0:ee:d1:15:06:dd:31:3d:7a:
29:ac:f4:38:5a:9e:ab:8e:48:c5:ea:c9:ad:50:8b:
2e:07:b1:e8:bd:37:24:be:b8:d5:33:e1:2e:79:23:
34:96:05:06:76:7d:de:61:b8:cf:73:29:7f:55:62:
2d:f1:92:b6:00:88:30:b5:38:70:44:a0:12:fb:05:
df:b7:10:03:ef:a0:43:1b:84:5a:bb:9f:5f:18:94:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DD:54:53:F9:F9:C3:06:81:F0:6A:D1:FD:15:7A:70:76:FE:99:9A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200262.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:29a0::/44
Signature Algorithm: sha256WithRSAEncryption
6a:37:55:a4:35:7f:f8:9b:c1:23:d9:69:8f:ab:c5:67:8c:de:
42:c2:89:33:1f:f0:41:e0:08:cd:4c:7a:2c:07:ff:55:5e:eb:
50:21:bc:17:b4:75:69:63:45:c2:d3:ef:ae:85:32:19:8a:c8:
6d:3c:de:69:4a:28:1f:04:77:81:71:68:c7:6d:27:36:40:8e:
e3:10:4c:3e:94:9e:f3:d6:79:1b:33:7f:f7:78:69:e4:a9:2d:
e9:b3:4d:c6:ee:f9:87:0c:62:52:8e:23:55:f2:50:5c:7a:08:
38:9f:e7:4e:b7:4f:72:0e:fe:a0:6a:58:f1:0d:2c:93:31:d7:
3d:0b:6c:2c:62:36:ce:a7:cd:c9:2b:bc:92:75:ea:76:ae:46:
0f:60:3c:bb:f9:f0:c9:17:62:2e:a7:23:7e:f6:49:8a:f3:48:
4b:64:ab:bd:2a:5c:21:84:86:fa:17:2c:63:b0:7f:94:e3:20:
42:b4:d8:5b:4c:de:7b:77:a3:6f:37:a2:99:0e:85:6c:74:6d:
a9:3c:23:51:8c:25:91:41:3f:59:44:90:ed:94:df:a1:a8:e5:
1e:84:90:ab:f1:3b:86:8d:85:c9:11:61:e6:e4:89:43:4c:91:
30:83:62:67:2a:08:1a:7f:66:10:e0:dd:69:17:06:21:3f:92:
83:54:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org