Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200306.roa
File: AS200306.roa (raw, json)
Hash identifier: CDCTLnm+kdSKVG8u5bH2ef67lORryb4/KMQH/LpHLNg=
Subject key identifier: 64:CE:66:A9:97:2D:08:54:69:DD:1F:CA:01:88:3C:3B:F6:5D:2B:4A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 378B3C856DDF4ABA57E883149772CEF704FE0BD9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200306.roa
Signing time: Tue 05 Dec 2023 02:44:19 +0000
ROA not before: Tue 05 Dec 2023 02:39:19 +0000
ROA not after: Tue 03 Dec 2024 02:44:19 +0000
asID: 200306
IP address blocks: 2a06:a005:af0::/44 maxlen: 48
2a06:a005:b00::/44 maxlen: 48
2a06:a005:c00::/44 maxlen: 48
2a06:a005:c10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8b:3c:85:6d:df:4a:ba:57:e8:83:14:97:72:ce:f7:04:fe:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:19 2023 GMT
Not After : Dec 3 02:44:19 2024 GMT
Subject: CN=64CE66A9972D085469DD1FCA01883C3BF65D2B4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:50:f7:9f:3e:37:ef:c0:7a:d4:90:03:14:19:
65:d9:0e:6e:0c:b1:cc:56:95:77:1d:36:b5:03:91:
e0:ea:3d:89:52:82:e2:69:77:cb:c0:57:98:9a:22:
74:b3:ff:7f:b9:97:da:59:69:97:5a:87:f5:a7:dc:
bb:7c:5a:b4:2a:6f:ae:02:77:58:81:ba:1f:ba:8d:
5f:fc:52:8a:e4:3b:45:27:50:38:6f:b7:42:f7:a3:
cc:c8:b6:90:f2:97:94:cf:e9:a3:a3:3a:48:63:48:
03:95:c9:dc:e4:20:56:ee:22:56:75:5c:d1:e0:ca:
d4:5a:bb:db:d2:92:52:83:86:26:b6:f5:d8:4f:84:
c7:ab:7a:29:4a:15:fe:b3:bc:0d:90:72:69:f7:d6:
5d:c2:ce:b2:f1:be:d5:66:2f:54:18:2e:cc:7a:d5:
cb:46:02:7f:d6:cc:b9:60:6e:6f:39:38:fe:92:6f:
2c:ad:4f:0d:a1:76:0b:7b:57:d8:68:74:75:e3:01:
ab:ca:c2:9e:70:0c:dc:55:2a:94:78:a5:42:53:13:
77:eb:c8:08:01:10:8a:7d:16:19:e3:a8:98:fc:9d:
17:07:7a:11:f1:54:a2:cf:a0:58:e0:f4:c5:38:8d:
48:77:ce:93:92:2e:a8:f9:c4:0c:9d:8a:45:7d:64:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:66:A9:97:2D:08:54:69:DD:1F:CA:01:88:3C:3B:F6:5D:2B:4A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:af0::-2a06:a005:b0f:ffff:ffff:ffff:ffff:ffff
2a06:a005:c00::/43
Signature Algorithm: sha256WithRSAEncryption
07:6f:a9:10:e7:72:2b:6a:43:87:99:50:54:41:f3:8e:00:68:
f2:19:9d:b6:dc:25:e2:d5:40:3a:3c:5b:5d:c9:4b:4f:e3:bf:
ee:04:59:1c:e9:05:04:c3:ff:0c:61:f1:31:52:c1:fe:64:6e:
a9:08:33:d1:f0:51:1d:be:32:26:b7:c8:1b:b2:a2:d5:00:96:
b2:12:25:de:d7:8c:4f:99:1a:b3:e3:5e:3e:31:d3:a0:52:85:
db:19:ee:26:38:20:2e:76:73:86:f7:ec:df:58:5b:1c:e6:e2:
b5:df:73:14:9b:b6:d6:70:6f:82:83:50:78:78:fd:be:54:2f:
04:f0:c8:a5:cf:ae:99:c5:73:53:da:f8:c6:0a:f6:46:3a:eb:
47:a5:2f:68:6d:a2:a8:8b:65:ec:9a:27:cd:98:87:e6:29:8f:
57:f8:97:11:b6:66:6d:aa:b3:a5:45:91:30:77:d9:ef:72:97:
a4:9a:e9:aa:26:c1:31:a5:ed:1a:05:17:ce:87:4f:a9:63:0b:
e4:6f:ed:38:99:ac:31:2b:1d:ed:eb:19:95:c4:36:18:34:c3:
f8:e6:84:35:ff:7b:3f:66:2c:f1:c8:5e:9c:6b:ea:fc:f1:31:
97:bc:73:ed:f7:ad:ba:34:3d:54:e5:7d:f7:6e:83:08:2a:77:
73:de:a1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org