Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200570.roa
File: AS200570.roa (raw, json)
Hash identifier: 4UmSo0E8GGi8BuVzjvx3OD2YUmDUrQDAxg16emREBMk=
Subject key identifier: 82:E8:27:F6:E6:7A:79:C9:05:67:39:45:F3:CC:0A:C8:A9:95:19:DA
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5F3AF862613D054E546AB359159F0148E1B83B66
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200570.roa
Signing time: Fri 08 Dec 2023 11:44:21 +0000
ROA not before: Fri 08 Dec 2023 11:39:21 +0000
ROA not after: Fri 06 Dec 2024 11:44:21 +0000
asID: 200570
IP address blocks: 2a06:a005:2a50::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:3a:f8:62:61:3d:05:4e:54:6a:b3:59:15:9f:01:48:e1:b8:3b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 8 11:39:21 2023 GMT
Not After : Dec 6 11:44:21 2024 GMT
Subject: CN=82E827F6E67A79C905673945F3CC0AC8A99519DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:7a:e7:74:ad:b2:ee:78:c1:d8:e2:39:d7:
85:12:80:72:d9:38:9e:b0:c3:13:f5:b1:45:c7:c6:
12:3b:76:d9:81:ab:e6:a1:9e:8b:03:55:27:74:17:
73:fc:d0:4c:3a:ae:74:c8:df:05:b9:cd:5a:09:e1:
4c:50:79:7b:f0:61:b4:c7:ee:32:57:a2:cc:e4:dd:
ab:f9:f0:a9:51:be:9a:16:7e:61:93:59:bd:7f:ee:
b9:27:8c:53:5f:fd:87:3c:07:65:29:97:a5:61:ae:
93:2a:06:5f:b9:2f:93:d1:09:6e:9a:35:3a:40:25:
aa:35:a0:a8:5e:02:1c:de:43:4d:78:af:1a:9f:cc:
2a:b2:eb:bf:6c:ca:48:a7:cd:af:4e:d9:fc:99:f7:
50:87:e7:2c:da:36:a7:1c:44:f3:77:be:4d:bf:5a:
6c:dc:f3:5f:79:fa:de:05:97:bb:52:5a:d3:c2:dd:
62:e4:f2:15:a3:c8:29:06:6d:63:db:02:34:f3:97:
02:ea:eb:66:37:e3:e8:e0:be:16:c1:d1:de:c2:a1:
30:28:85:fd:4f:0e:7b:1e:99:5f:00:60:22:96:cc:
75:56:f6:52:d2:29:c3:15:94:ce:e9:b1:27:f1:dd:
2d:8d:47:8e:f7:3b:03:c7:b0:27:2b:53:bb:ea:7a:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E8:27:F6:E6:7A:79:C9:05:67:39:45:F3:CC:0A:C8:A9:95:19:DA
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200570.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2a50::/44
Signature Algorithm: sha256WithRSAEncryption
15:5e:bd:fe:83:ef:32:85:9a:5b:b1:cd:65:4f:ff:29:0f:a8:
95:4d:c2:c7:b4:c3:f7:f4:57:9c:d0:3a:3f:61:94:4f:1a:00:
30:94:b9:0b:bf:3a:f6:d6:66:79:e3:7b:f5:d5:7b:cb:9c:8d:
c5:42:ab:19:03:6d:52:12:ef:40:06:d5:ba:b5:8f:f0:2e:f8:
d5:7d:2d:84:8a:2c:7e:1c:7e:c6:9b:4d:50:df:c3:f6:60:47:
15:5e:c7:2e:e7:84:61:bc:f2:f1:2f:e9:a6:1a:72:7f:ac:be:
16:ca:e8:c7:ad:88:75:5f:85:22:e2:a9:9f:f0:3c:06:40:28:
72:b6:bb:0e:97:9a:e8:19:c0:25:a8:9f:6b:2c:27:bc:a4:0c:
b3:ad:00:9c:8f:62:cb:ec:01:58:76:d4:e8:10:56:70:c9:23:
28:b4:b4:5d:8e:7e:30:7d:9e:54:28:06:08:82:3e:2d:8c:9f:
22:2c:ce:f4:a7:56:d7:a2:33:6d:47:25:f6:e1:80:7f:af:7c:
23:ae:9d:10:df:3f:9e:5f:fd:13:65:ea:a6:38:bb:26:a5:fb:
df:5e:f5:dd:f4:ed:9e:4f:9e:72:4f:af:e8:64:e3:8d:8a:df:
ba:4c:90:5d:a8:f1:72:cd:f9:56:06:f7:97:98:60:c4:24:60:
b0:f9:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org