Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200581.roa
File: AS200581.roa (raw, json)
Hash identifier: BIe65WztKpkEbzaNMYGZKIhL+aMXvYeI2b2jD+f2CLM=
Subject key identifier: DD:A4:BC:13:42:4F:3D:6B:28:EA:12:14:AD:D7:1E:40:5F:B4:FD:87
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4E1D175DD2508A4759CA2F4782C116B90DD36816
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200581.roa
Signing time: Tue 05 Dec 2023 02:44:10 +0000
ROA not before: Tue 05 Dec 2023 02:39:10 +0000
ROA not after: Tue 03 Dec 2024 02:44:10 +0000
asID: 200581
IP address blocks: 2a06:a005:2290::/44 maxlen: 48
2a06:a005:2790::/44 maxlen: 48
2a06:a005:27a0::/44 maxlen: 48
2a06:a005:27b0::/44 maxlen: 48
2a06:a005:27c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1d:17:5d:d2:50:8a:47:59:ca:2f:47:82:c1:16:b9:0d:d3:68:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:10 2023 GMT
Not After : Dec 3 02:44:10 2024 GMT
Subject: CN=DDA4BC13424F3D6B28EA1214ADD71E405FB4FD87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:aa:ad:77:7b:53:f8:ed:0c:92:d3:ab:09:
b8:8c:3b:c3:e5:97:81:bb:7f:7a:38:07:41:f4:ee:
67:72:0e:b5:08:7b:9a:99:dd:5f:a7:4a:69:ff:15:
f6:f5:ab:20:c6:e6:bc:8e:da:5b:e0:94:cd:21:3d:
89:3b:98:d2:a1:9e:fc:ee:51:de:ea:43:62:5f:bc:
0d:9c:c3:b9:0f:11:5e:5f:0c:45:47:df:ce:dc:eb:
f0:da:c4:4b:72:f6:a5:9e:1f:80:4c:b6:59:72:34:
3c:46:9f:0e:ea:24:e2:66:f7:d3:7b:d2:2a:12:5c:
d1:20:68:81:de:75:d2:d5:9f:0d:d1:3f:b4:16:8a:
eb:b1:fd:e8:27:5c:9e:a9:64:dd:8f:eb:12:87:87:
66:6d:c0:ca:d5:9d:23:23:a0:7b:01:c8:b2:5f:d2:
73:5f:a6:87:00:7f:f2:fd:2c:d3:44:04:a7:70:ee:
e9:2f:51:e8:98:4b:0a:cd:db:eb:ac:f2:c4:03:06:
c9:7c:9f:ad:51:5f:0e:49:95:8f:bc:5c:02:8f:3b:
6e:3f:94:61:0a:fc:36:9b:86:5e:4c:6a:e8:b2:c9:
4e:08:76:12:9e:82:59:56:a5:a5:6d:e6:2e:c1:1c:
af:bc:42:7f:0f:c9:79:c9:47:96:f9:f8:42:62:eb:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A4:BC:13:42:4F:3D:6B:28:EA:12:14:AD:D7:1E:40:5F:B4:FD:87
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200581.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2290::/44
2a06:a005:2790::-2a06:a005:27cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
94:68:19:fd:a8:f8:1e:35:42:ea:6b:86:af:23:c4:80:f1:08:
70:70:86:8e:af:31:9c:6e:7e:cb:3a:5e:20:38:59:0a:43:a1:
34:07:64:f2:c3:ce:bd:41:94:48:66:98:78:dd:be:77:e9:47:
78:0f:60:07:97:c3:19:ce:03:c7:8f:25:6e:7b:dd:3f:7b:f9:
fb:25:eb:9d:1d:74:be:3c:87:83:6a:b6:69:f7:19:19:42:da:
28:fb:f9:43:a9:9e:07:10:5c:c6:c8:37:7a:0f:ad:c7:c8:35:
66:c5:2a:d7:fa:5c:ee:9b:7e:a5:4e:8e:56:44:97:32:1d:e5:
39:f2:dd:6d:03:fe:59:f6:74:ad:56:6a:22:37:c3:08:0c:60:
bb:5b:dc:d6:18:6b:05:51:00:31:bd:be:83:00:ab:6f:00:62:
24:cd:0b:f7:e7:9d:ef:42:64:1e:53:dc:61:97:f5:39:2b:4e:
39:76:c9:5a:84:f9:43:35:d5:6a:9d:0d:e6:97:f7:e9:39:fd:
6c:ee:4d:59:0d:50:9e:8a:c2:14:3b:a0:49:ef:2e:0d:ac:69:
60:13:d5:1c:4a:f7:89:74:93:a9:61:0d:66:1f:6b:52:37:0b:
d7:03:69:8b:27:75:67:f4:56:a6:74:aa:8e:e4:ff:69:42:4a:
6c:6c:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org