Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200556.roa
File: AS200556.roa (raw, json)
Hash identifier: pWNh2nwgYE/jnG7hA87SULwHaDdfFMFzjOQpY9Nu0g4=
Subject key identifier: 46:C9:9B:37:4C:27:03:6F:C2:4B:8B:C2:BA:29:36:8E:E4:26:CE:82
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 497DD230FB3DC4A537FF4F16F7C0D09423E98836
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200556.roa
Signing time: Tue 05 Nov 2024 15:40:12 +0000
ROA not before: Tue 05 Nov 2024 15:35:12 +0000
ROA not after: Tue 04 Nov 2025 15:40:12 +0000
asID: 200556
IP address blocks: 2a06:a005:d4a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7d:d2:30:fb:3d:c4:a5:37:ff:4f:16:f7:c0:d0:94:23:e9:88:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 15:35:12 2024 GMT
Not After : Nov 4 15:40:12 2025 GMT
Subject: CN=46C99B374C27036FC24B8BC2BA29368EE426CE82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:c4:f5:28:e9:75:05:87:e4:69:f1:54:87:
3c:5a:04:c6:e2:cb:44:9a:96:e5:35:da:13:ed:0f:
4f:5d:34:80:a8:35:dd:2b:bf:40:28:74:65:ba:6c:
2d:3b:be:3d:f3:db:7b:f3:fd:a4:0a:45:4d:d0:17:
c1:04:a8:e5:8c:0f:93:bc:36:1d:0a:df:fd:2a:36:
f1:5d:ec:a6:67:a4:69:cc:66:84:83:c5:ca:9c:be:
57:45:64:c7:04:eb:f5:bc:66:21:fd:3e:b1:a2:9c:
a9:5d:98:c1:71:10:0e:d5:d9:93:aa:91:ae:f0:34:
a8:f6:73:e8:ea:c0:db:05:4b:ff:ec:aa:35:73:25:
db:33:2a:d7:8c:15:b1:99:97:36:6a:ee:c2:b7:18:
61:cf:5b:1b:c7:7a:bd:9e:06:1b:b2:95:53:14:81:
61:3a:09:ea:42:b0:20:6b:3a:3f:67:61:ff:9b:2f:
9d:7c:ee:cc:04:dc:fb:79:c1:0a:46:d9:42:d3:78:
d7:a0:d2:5c:18:6d:6f:93:f7:32:58:fd:af:df:29:
11:b4:db:bb:ef:0a:90:7d:53:fd:18:f1:e0:47:5a:
1c:27:26:fc:c4:57:1d:94:fa:57:70:b5:da:89:9d:
61:42:9c:e8:40:65:1b:60:fd:0b:1e:5d:2d:df:ad:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C9:9B:37:4C:27:03:6F:C2:4B:8B:C2:BA:29:36:8E:E4:26:CE:82
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200556.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d4a::/48
Signature Algorithm: sha256WithRSAEncryption
95:a9:4f:32:19:9c:1b:9b:7c:88:25:95:18:fc:1b:42:ad:2b:
60:31:c0:2c:6d:6f:ff:20:93:2d:ff:97:78:3a:ea:64:f5:cb:
d9:0d:62:e4:77:b3:58:23:14:ab:8c:b3:7e:af:08:68:b4:3d:
72:49:a2:a3:96:c4:5d:c7:48:55:97:d2:33:b7:02:19:89:80:
45:35:1a:ce:d1:d2:53:26:f9:b9:49:af:b1:56:18:68:67:f8:
bf:7a:9a:23:2e:62:90:98:82:b2:83:cc:eb:91:84:32:20:e8:
a3:4f:02:cc:38:5b:ea:2d:e5:bd:55:17:1e:7c:67:e5:e5:ae:
d6:0a:a9:ed:43:b7:2d:8a:af:5c:29:3f:64:34:9a:9f:41:b6:
1e:b9:9e:93:4b:91:08:5c:3f:98:b2:9d:0a:38:9c:ae:01:61:
37:91:37:38:41:07:24:98:a9:7d:f3:34:da:aa:84:bf:c4:d3:
a1:42:ec:bc:ac:0a:15:56:e1:f6:f7:c5:07:aa:74:2d:5d:41:
e3:fd:2a:96:8e:bd:09:89:2c:9f:c4:9a:43:de:61:ec:86:99:
da:cd:cd:14:a1:42:41:a0:01:de:00:5f:34:3d:8a:20:ee:48:
8a:fa:07:12:b9:5f:4c:8f:e6:de:66:56:05:bc:5d:6b:fb:cb:
8c:76:95:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:57 2024 by rpki-client on console-fra.rpki-client.org