Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200506.roa
File: AS200506.roa (raw, json)
Hash identifier: WqeVU3dONltEbTYixnQtq09M5gDKOmUwcbQhXyuoE1o=
Subject key identifier: 79:AE:0D:15:61:33:E6:A2:CD:97:89:6A:76:F8:F7:00:61:2B:FF:94
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6555D334FEE5AF38AF9C7F91733EA0DD0FF05AD2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200506.roa
Signing time: Tue 05 Dec 2023 02:44:11 +0000
ROA not before: Tue 05 Dec 2023 02:39:11 +0000
ROA not after: Tue 03 Dec 2024 02:44:11 +0000
asID: 200506
IP address blocks: 2a06:a005:2810::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:55:d3:34:fe:e5:af:38:af:9c:7f:91:73:3e:a0:dd:0f:f0:5a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:11 2023 GMT
Not After : Dec 3 02:44:11 2024 GMT
Subject: CN=79AE0D156133E6A2CD97896A76F8F700612BFF94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:74:ce:bb:d9:cf:55:1a:13:89:75:0e:3e:
a2:13:26:e0:fb:c2:ba:2f:5b:f7:38:99:68:cd:61:
f8:a1:37:5a:11:3c:36:ae:81:6e:4a:aa:b0:8c:2b:
b9:aa:4d:f6:24:07:43:dd:ed:80:be:1a:ca:1c:a2:
d9:dc:b9:7f:3e:11:8f:3f:66:db:f4:e2:b8:7e:66:
41:e4:76:ef:ca:4b:16:8d:d3:4e:aa:bc:d8:63:3c:
ab:1d:36:7a:61:66:63:91:26:1c:a6:2d:f8:b2:a8:
c5:9d:bb:d0:66:c5:61:26:b9:34:b9:9e:a9:d6:68:
95:5d:d2:19:1e:b4:8f:29:86:6b:02:c9:7e:a8:ca:
87:63:f6:de:3b:ab:af:ea:69:ac:79:61:88:be:78:
3e:43:c4:9a:b4:00:43:c3:5d:eb:02:fc:db:ed:e8:
94:f9:38:19:1c:de:2e:16:b6:29:b4:41:2b:36:c6:
6a:de:fd:56:bd:db:81:f1:61:0c:19:2a:f5:ce:ba:
2a:1a:76:d4:12:f9:db:0a:bb:b1:49:62:b8:fc:b5:
29:0c:77:f0:a1:1e:53:d9:2e:2c:d3:b3:61:e9:d6:
a0:9d:3f:b2:1e:93:ab:02:fe:e4:90:70:f0:b7:3d:
95:b8:6a:10:1a:79:da:ac:4b:6e:84:bf:aa:83:af:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AE:0D:15:61:33:E6:A2:CD:97:89:6A:76:F8:F7:00:61:2B:FF:94
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200506.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2810::/44
Signature Algorithm: sha256WithRSAEncryption
ae:96:0c:0e:db:a1:31:25:7f:e8:0e:dd:ab:2a:79:e8:27:c4:
88:fb:fc:24:38:8e:ef:f5:65:cb:48:2c:c7:bb:db:69:fa:d7:
ec:27:ca:70:cb:1a:85:bf:b8:28:21:10:a0:57:be:0e:67:b6:
19:f3:4c:f2:41:27:39:8f:ff:23:25:3f:4f:67:db:f2:63:2d:
45:c6:75:b1:6d:8d:0b:7e:1d:3f:21:c4:b3:1d:7a:79:66:be:
60:cf:7b:68:b0:4d:cd:5e:d5:f5:43:c1:98:b1:c1:5e:b8:69:
ae:50:11:dd:8d:6a:bb:ea:48:40:db:06:cc:20:c8:33:0a:bc:
82:a4:60:0a:68:31:09:a0:4e:8e:66:be:dc:f4:6c:5d:ab:47:
49:30:97:71:08:6a:a5:c1:b8:54:7a:0e:ea:da:52:bc:10:98:
2e:76:7f:82:be:02:13:f5:8d:00:2f:49:96:92:aa:dc:55:48:
f1:90:23:db:00:d7:36:47:5d:d8:0e:14:ed:8a:a8:6b:b3:5f:
78:7d:de:c6:cf:4c:d2:76:e9:fb:fa:72:86:21:48:16:fc:dd:
b1:52:06:76:63:03:ef:d8:eb:10:a5:a4:f7:75:38:b0:02:4e:
dd:23:1d:88:84:e1:24:09:a3:ac:0e:76:82:35:87:92:fb:f4:
5c:3e:2b:d8
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUZVXTNP7lrzivnH+Rcz6g3Q/wWtIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTFaFw0yNDEyMDMwMjQ0MTFaMDMxMTAvBgNV
BAMTKDc5QUUwRDE1NjEzM0U2QTJDRDk3ODk2QTc2RjhGNzAwNjEyQkZGOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mXTOu9nPVRoTiXUOPqITJuD7
wrovW/c4mWjNYfihN1oRPDaugW5KqrCMK7mqTfYkB0Pd7YC+GsocotncuX8+EY8/
Ztv04rh+ZkHkdu/KSxaN006qvNhjPKsdNnphZmORJhymLfiyqMWdu9BmxWEmuTS5
nqnWaJVd0hketI8phmsCyX6oyodj9t47q6/qaax5YYi+eD5DxJq0AEPDXesC/Nvt
6JT5OBkc3i4Wtim0QSs2xmre/Va924HxYQwZKvXOuioadtQS+dsKu7FJYrj8tSkM
d/ChHlPZLizTs2Hp1qCdP7Iek6sC/uSQcPC3PZW4ahAaedqsS26Ev6qDr29nAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUea4NFWEz5qLNl4lqdvj3AGEr/5QwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAwNTA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBSgQMA0GCSqGSIb3DQEBCwUAA4IBAQCulgwO
26ExJX/oDt2rKnnoJ8SI+/wkOI7v9WXLSCzHu9tp+tfsJ8pwyxqFv7goIRCgV74O
Z7YZ80zyQSc5j/8jJT9PZ9vyYy1FxnWxbY0Lfh0/IcSzHXp5Zr5gz3tosE3NXtX1
Q8GYscFeuGmuUBHdjWq76khA2wbMIMgzCryCpGAKaDEJoE6OZr7c9Gxdq0dJMJdx
CGqlwbhUeg7q2lK8EJgudn+CvgIT9Y0AL0mWkqrcVUjxkCPbANc2R13YDhTtiqhr
s194fd7Gz0zSdun7+nKGIUgW/N2xUgZ2YwPv2OsQpaT3dTiwAk7dIx2IhOEkCaOs
DnaCNYeS+/RcPivY
-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org