Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200455.roa
File: AS200455.roa (raw, json)
Hash identifier: aMrOw0PfT5EIdc4S3hVGqN8YAdMX4Od+pW9RvGST+/0=
Subject key identifier: 5F:E7:F6:D2:32:7B:6B:D5:6F:AA:E8:0C:B5:96:4B:9D:C8:2B:C4:CE
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5D6C6C52CB56BBBD3AA43E01C70302E4579031C0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200455.roa
Signing time: Sat 20 Jan 2024 12:44:24 +0000
ROA not before: Sat 20 Jan 2024 12:39:24 +0000
ROA not after: Sat 18 Jan 2025 12:44:24 +0000
asID: 200455
IP address blocks: 2a06:a005:1030::/44 maxlen: 48
2a06:a005:2b70::/44 maxlen: 48
2a06:a005:2b80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:6c:6c:52:cb:56:bb:bd:3a:a4:3e:01:c7:03:02:e4:57:90:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 20 12:39:24 2024 GMT
Not After : Jan 18 12:44:24 2025 GMT
Subject: CN=5FE7F6D2327B6BD56FAAE80CB5964B9DC82BC4CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:95:de:cb:25:87:1f:db:09:d8:97:40:8d:
fe:21:53:f4:fa:d2:7b:2b:a0:c8:c6:22:d5:ae:45:
cc:2f:a1:5b:aa:80:f6:47:32:36:c2:4d:ab:d3:76:
44:70:5f:4d:52:35:33:d5:93:10:30:76:fe:a0:c9:
3f:73:a1:4c:40:6c:6f:9a:f6:ed:82:6d:d5:9e:65:
bd:a9:06:7a:e0:a8:ef:16:03:03:75:a6:0d:14:38:
be:5d:6e:f1:2d:0e:19:f5:9a:cc:de:9d:d4:b7:6d:
30:a2:01:8e:ed:98:30:dc:cc:f4:8d:64:cd:92:ef:
5b:93:25:6f:21:c0:3b:bc:4b:a8:3f:5f:ea:6f:ab:
f8:f4:91:0d:91:21:94:af:1e:4f:9a:e4:b8:2b:34:
2b:98:9d:a1:90:30:f9:f6:88:d3:ee:bc:59:cf:32:
8f:d8:7f:b1:54:67:ee:30:5a:e0:31:90:35:9a:77:
12:a7:1b:7a:29:85:91:5d:c1:44:b8:01:ea:7c:e1:
08:18:51:76:34:4e:47:d5:db:2d:09:27:6f:8f:b0:
99:b1:dc:4d:8f:55:e9:30:10:94:6a:b2:d7:b6:8e:
66:0c:44:ab:74:89:0e:04:fd:ee:73:32:87:5f:7d:
39:cd:b6:e6:35:6a:a0:08:78:fb:c4:46:38:a5:10:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E7:F6:D2:32:7B:6B:D5:6F:AA:E8:0C:B5:96:4B:9D:C8:2B:C4:CE
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200455.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1030::/44
2a06:a005:2b70::-2a06:a005:2b8f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
90:90:a4:66:49:33:47:4d:8a:b4:50:0f:d1:90:44:56:9b:c8:
36:79:92:40:9b:e2:79:a2:3d:a2:bd:6c:71:8a:5f:81:61:d0:
ca:fa:4a:0a:d6:05:c8:1a:c2:6a:e2:80:9d:0a:d0:ac:0a:39:
56:fe:e6:19:8d:92:07:ff:fc:70:2d:4c:24:de:fc:39:93:28:
43:a7:b9:fc:1f:29:8c:8c:df:64:f2:4f:48:1e:c4:52:cf:c1:
92:40:d1:2f:cc:fb:cf:ea:62:ab:98:e7:67:91:ff:58:4c:fa:
75:f6:82:bd:f5:7c:7d:43:01:63:5a:75:8d:bc:f5:3e:f4:b0:
bb:c0:40:c0:d4:91:30:99:17:fd:36:4a:81:14:85:2f:6f:43:
20:76:3b:5c:08:87:f6:f0:69:8d:79:d1:ee:bf:a4:82:58:a2:
8a:2f:ec:fa:70:e0:e8:bc:f2:00:75:e6:6c:5d:f8:29:8f:7c:
a0:20:a9:21:87:b7:3b:53:58:e1:0c:fe:49:a6:7b:91:62:99:
97:77:09:cd:f4:3f:46:87:3c:63:48:cb:7a:ae:0e:61:07:22:
1c:98:3e:b4:ee:a4:31:29:d8:6a:fc:9b:0a:e8:62:24:26:b3:
d0:db:cf:de:7c:f5:91:ec:f2:bb:85:57:78:a4:8b:75:fe:64:
52:91:32:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org