Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200306.roa
File: AS200306.roa (raw, json)
Hash identifier: WdE9Hk/yxMG0i9iBtG+QDzUyhTPX0OOwcz8h2QUL7/8=
Subject key identifier: E7:A3:F9:F6:1C:89:34:5A:75:D9:5F:BA:8D:B5:E5:04:06:69:EB:BB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 03F06C94FD3BD5AB70409F9D399866FB7E7B8740
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200306.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 200306
IP address blocks: 2a06:a005:af0::/44 maxlen: 48
2a06:a005:b00::/44 maxlen: 48
2a06:a005:c00::/44 maxlen: 48
2a06:a005:c10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f0:6c:94:fd:3b:d5:ab:70:40:9f:9d:39:98:66:fb:7e:7b:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=E7A3F9F61C89345A75D95FBA8DB5E5040669EBBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:7f:5a:11:82:a9:aa:aa:83:f2:76:ab:a9:
a5:d9:49:95:2a:6b:3a:b8:82:be:19:95:69:e3:c5:
9d:ac:9a:d0:5b:0e:bd:0d:c2:f0:1b:10:04:21:a9:
de:c6:02:93:19:c3:39:f8:a1:67:89:c9:8e:e3:4a:
5b:c1:1c:61:81:8a:da:dc:90:f9:78:61:60:5e:39:
05:a9:50:ce:d8:07:e5:a9:bc:05:48:a8:62:db:b7:
a6:21:86:3e:b4:db:02:f9:09:ea:de:5c:91:0c:75:
9f:8d:f0:2c:1e:71:30:f6:dd:c3:b9:86:2a:87:9e:
4e:5d:12:3c:33:48:7c:54:7b:a5:ea:f7:bf:68:dd:
22:69:ae:64:15:c7:09:e0:d1:11:9a:03:ac:a1:fc:
67:6d:97:91:f5:8d:64:7c:02:7e:2a:75:a1:ff:f2:
95:94:2e:9a:6e:46:0a:ab:11:ef:20:08:2c:62:98:
0b:58:68:2b:5e:bb:1d:73:28:d9:2c:5b:2b:e1:c1:
eb:3c:ef:35:99:1f:35:64:08:0c:a3:5b:ab:8e:35:
2d:ee:62:c5:0e:cc:62:3e:5a:ca:ba:3b:00:a9:66:
a0:3f:60:ca:48:17:86:0c:f2:ad:94:78:db:01:f8:
d8:16:d5:5b:16:9f:ac:cd:7b:55:57:43:fb:ce:35:
e4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A3:F9:F6:1C:89:34:5A:75:D9:5F:BA:8D:B5:E5:04:06:69:EB:BB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:af0::-2a06:a005:b0f:ffff:ffff:ffff:ffff:ffff
2a06:a005:c00::/43
Signature Algorithm: sha256WithRSAEncryption
1c:3f:48:c3:5e:b5:bb:67:0c:d7:21:af:bd:9a:ea:cd:be:d5:
29:d4:04:af:0c:07:b3:68:4c:d1:d8:0d:95:9a:ba:8e:21:86:
38:e0:b0:c4:03:16:04:7d:35:b7:fa:76:79:84:95:36:ba:d9:
2d:7e:90:a7:13:75:11:df:07:ae:76:ad:bb:23:f6:1e:27:d8:
bb:ed:c1:6d:05:1d:b6:14:aa:3b:7e:93:73:81:f9:bc:02:15:
96:28:c5:76:15:2e:2e:90:10:df:57:19:ea:59:69:db:29:f7:
e5:8a:68:1f:6f:21:db:c4:03:51:e0:8c:f1:b6:18:bc:55:de:
bb:99:6d:18:47:87:b5:af:ad:4e:58:f7:e4:ef:5f:c7:41:ee:
4f:90:3c:e3:e2:14:d9:06:c0:2e:a8:05:4c:41:eb:f7:d3:78:
a8:34:06:bf:c1:11:3a:f1:a7:80:e3:8e:2f:7d:d6:3d:5c:81:
34:1d:b6:70:fc:bd:fd:76:87:0c:56:b1:78:d3:28:f0:1e:4c:
99:a4:2e:d7:95:43:bf:63:f1:e5:da:fc:fc:e5:5f:eb:ad:fe:
17:05:28:45:c3:59:35:50:60:64:c2:21:e3:b4:89:bd:5e:ce:
9b:82:ba:dc:55:53:4c:e8:1b:ac:f1:9c:9a:b9:c8:8c:91:87:
9f:6e:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:03 2025 by rpki-client