Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200360.roa
File: AS200360.roa (raw, json)
Hash identifier: JUQVpYOBWb20aw3SrB96vp1vrIDQX0FwjxorSVTu5Yc=
Subject key identifier: 0C:00:FF:5C:2A:C4:86:D6:49:00:87:7C:69:0D:96:12:9B:60:01:C8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 581B71CCB7B67E512CDBED3D4187F4D0B18BA370
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200360.roa
Signing time: Wed 07 Feb 2024 02:44:24 +0000
ROA not before: Wed 07 Feb 2024 02:39:24 +0000
ROA not after: Wed 05 Feb 2025 02:44:24 +0000
asID: 200360
IP address blocks: 2a06:a005:1804::/46 maxlen: 48
2a06:a005:187f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:1b:71:cc:b7:b6:7e:51:2c:db:ed:3d:41:87:f4:d0:b1:8b:a3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 7 02:39:24 2024 GMT
Not After : Feb 5 02:44:24 2025 GMT
Subject: CN=0C00FF5C2AC486D64900877C690D96129B6001C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:ae:5d:4a:64:76:e6:bf:ae:03:e5:f1:98:
ce:48:61:d9:99:63:3e:18:b8:cd:86:94:2b:08:79:
4d:57:9d:83:d8:39:32:f8:57:6d:73:31:6f:5a:30:
ad:02:bc:02:15:b0:7d:d1:03:0b:ab:75:b1:21:43:
cf:ec:46:c1:d5:51:99:90:ef:f0:90:86:c3:b0:37:
c7:a3:db:b9:f0:6f:58:ef:03:7f:97:7c:f3:67:a9:
1d:44:42:3b:6e:21:14:57:20:e1:a5:c7:71:05:8f:
07:d9:e6:42:66:51:9b:54:0e:d4:b8:af:6b:ad:cb:
29:28:a0:0e:e5:50:2b:e0:8d:35:1d:cc:d5:23:6f:
cb:71:8d:80:30:df:11:05:5c:02:a3:b1:38:c4:4e:
73:aa:84:d3:f5:9b:77:19:c9:34:5d:db:3c:59:03:
80:9a:35:09:dc:95:02:f1:72:09:e5:48:53:24:13:
44:f8:93:2e:9c:fb:5c:70:dd:6a:eb:61:e4:33:a8:
bb:cd:27:a7:81:67:e1:85:59:9b:43:6f:7f:7b:8f:
71:bd:05:7a:18:cc:7e:30:84:68:58:05:e4:4f:40:
97:a4:db:ba:49:18:28:97:65:09:7e:a5:e7:3a:7d:
e6:a4:d7:db:d7:78:a2:b0:00:68:ae:a2:42:27:83:
7e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:00:FF:5C:2A:C4:86:D6:49:00:87:7C:69:0D:96:12:9B:60:01:C8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1804::/46
2a06:a005:187f::/48
Signature Algorithm: sha256WithRSAEncryption
86:d6:43:8b:25:11:40:dd:a2:94:6e:06:ee:4d:7e:a0:02:7d:
21:35:16:32:6f:fd:14:21:f8:ad:a4:0c:d9:04:f7:2b:6b:5e:
2f:99:ac:e0:ad:c6:1c:d5:06:8a:f7:bb:1f:37:3f:20:66:48:
02:f3:7b:fb:07:a0:78:7a:49:00:3e:85:38:10:5f:aa:af:17:
61:b3:bb:83:31:5a:b8:bc:78:5b:c4:19:c0:83:17:b3:7a:5c:
f8:68:c7:01:a7:85:59:8f:b5:dc:0b:d8:dc:be:f0:2f:ba:c3:
35:ba:2f:8f:b5:96:ba:d6:d8:36:ec:48:9a:dc:25:96:03:a7:
09:36:3d:15:75:f9:ea:94:75:45:e0:e3:db:fe:34:c3:68:8c:
5a:91:4c:02:ec:48:86:6a:ab:21:ba:ad:23:fb:de:a8:df:0a:
d8:81:81:47:eb:d4:be:a1:26:0e:0a:dc:33:1e:ed:94:ed:3d:
d0:f2:1a:5a:ad:9d:df:dc:1f:c8:91:31:be:7f:6a:93:84:0d:
ad:ad:76:b4:c0:aa:99:fd:8b:5d:35:b8:bd:fd:72:0d:77:93:
5f:ea:b0:b1:82:18:1d:ae:c8:51:98:a4:41:61:43:5b:2e:9d:
cc:11:a2:b1:71:9b:15:8b:aa:7f:9d:60:e5:f4:8e:32:61:fa:
6e:cf:31:77
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUWBtxzLe2flEs2+09QYf00LGLo3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMDcwMjM5MjRaFw0yNTAyMDUwMjQ0MjRaMDMxMTAvBgNV
BAMTKDBDMDBGRjVDMkFDNDg2RDY0OTAwODc3QzY5MEQ5NjEyOUI2MDAxQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wq5dSmR25r+uA+XxmM5IYdmZ
Yz4YuM2GlCsIeU1XnYPYOTL4V21zMW9aMK0CvAIVsH3RAwurdbEhQ8/sRsHVUZmQ
7/CQhsOwN8ej27nwb1jvA3+XfPNnqR1EQjtuIRRXIOGlx3EFjwfZ5kJmUZtUDtS4
r2utyykooA7lUCvgjTUdzNUjb8txjYAw3xEFXAKjsTjETnOqhNP1m3cZyTRd2zxZ
A4CaNQnclQLxcgnlSFMkE0T4ky6c+1xw3WrrYeQzqLvNJ6eBZ+GFWZtDb397j3G9
BXoYzH4whGhYBeRPQJek27pJGCiXZQl+pec6feak19vXeKKwAGiuokIng37XAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUDAD/XCrEhtZJAId8aQ2WEptgAcgwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAwMzYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcCKgagBRgEAwcAKgagBRh/MA0GCSqGSIb3DQEBCwUA
A4IBAQCG1kOLJRFA3aKUbgbuTX6gAn0hNRYyb/0UIfitpAzZBPcra14vmazgrcYc
1QaK97sfNz8gZkgC83v7B6B4ekkAPoU4EF+qrxdhs7uDMVq4vHhbxBnAgxezelz4
aMcBp4VZj7XcC9jcvvAvusM1ui+PtZa61tg27Eia3CWWA6cJNj0VdfnqlHVF4OPb
/jTDaIxakUwC7EiGaqshuq0j+96o3wrYgYFH69S+oSYOCtwzHu2U7T3Q8hparZ3f
3B/IkTG+f2qThA2trXa0wKqZ/YtdNbi9/XINd5Nf6rCxghgdrshRmKRBYUNbLp3M
EaKxcZsVi6p/nWDl9I4yYfpuzzF3
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org