Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200676.roa
File: AS200676.roa (raw, json)
Hash identifier: 1Z5IuGuAHd9JJuP4jEYYwshsYJ6C3yfMS1Qylwy1E1I=
Subject key identifier: A8:B0:45:F0:49:2E:97:02:66:4F:A2:C8:D5:B8:7A:DC:ED:13:DE:21
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2D09ECF903EDDC12A00D83D39700BDFD56C31774
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200676.roa
Signing time: Thu 25 Jan 2024 03:44:24 +0000
ROA not before: Thu 25 Jan 2024 03:39:24 +0000
ROA not after: Thu 23 Jan 2025 03:44:24 +0000
asID: 200676
IP address blocks: 2a06:a005:d42::/48 maxlen: 48
2a06:a005:2680::/44 maxlen: 48
2a06:a005:2730::/44 maxlen: 48
2a06:a005:27e0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:09:ec:f9:03:ed:dc:12:a0:0d:83:d3:97:00:bd:fd:56:c3:17:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 25 03:39:24 2024 GMT
Not After : Jan 23 03:44:24 2025 GMT
Subject: CN=A8B045F0492E9702664FA2C8D5B87ADCED13DE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:3c:11:f1:a8:eb:e8:7d:72:8d:59:3a:2c:
06:ce:21:89:86:69:17:67:ba:bb:0d:52:4e:f2:ab:
46:1e:b9:0a:f2:79:9c:b9:02:30:5c:27:8e:ba:8c:
be:a3:8b:0f:48:48:1f:13:98:f3:8e:44:b5:f4:73:
2e:28:5b:1f:50:bd:a3:01:cf:4b:ec:2b:81:bd:dd:
05:1e:01:5d:b9:09:ab:7f:ab:ed:79:ca:20:63:3d:
0a:8b:98:6d:33:4c:e3:fc:71:06:34:c1:9b:4a:7d:
da:d6:d7:2e:b3:c5:d9:6d:20:3f:00:aa:c6:4f:9f:
cb:43:d5:88:41:75:3c:36:ce:5e:df:81:0a:e2:db:
65:56:15:f8:1a:0a:47:90:bc:bb:4d:5d:b1:ea:d0:
ff:87:5d:41:f9:cd:7b:47:1a:71:2d:02:c0:16:55:
e5:e1:da:3a:4e:80:17:cc:ae:18:2f:eb:44:f2:e5:
27:03:25:a1:a6:eb:4a:1d:5f:d1:eb:d6:36:bf:09:
4e:33:ce:0b:55:85:84:b0:f9:94:7c:2f:db:e8:37:
59:31:ba:78:a6:93:9f:16:0b:ed:82:ac:d4:6f:ab:
19:bb:f8:20:f5:42:5e:26:33:d4:ef:fd:fc:b1:37:
14:96:3b:3b:82:54:8d:5b:1e:30:31:b1:a8:16:59:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:45:F0:49:2E:97:02:66:4F:A2:C8:D5:B8:7A:DC:ED:13:DE:21
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d42::/48
2a06:a005:2680::/44
2a06:a005:2730::/44
2a06:a005:27e0::/44
Signature Algorithm: sha256WithRSAEncryption
25:a9:3f:a4:12:09:22:67:39:4b:c2:01:86:15:05:2e:3f:64:
04:b5:c8:7d:4d:82:61:10:2e:54:35:7d:a2:05:2b:29:5d:04:
ad:2c:d0:45:06:7f:6c:12:07:3f:e4:c5:91:5c:f8:22:34:ca:
6b:50:0e:f8:57:af:ca:a0:e6:e7:bc:e8:bc:8e:5f:fd:2c:55:
8e:9a:c2:ea:db:22:3c:79:bf:65:8c:79:3c:91:ee:47:54:bf:
f9:3d:22:a8:28:6c:e6:b3:4f:aa:f2:cd:3d:75:5e:b7:73:83:
57:9e:8a:bb:2b:9e:70:0e:84:68:c6:a3:41:59:f5:ac:9b:a8:
97:b3:f8:2a:36:1e:ed:40:61:8f:e2:0b:ef:c8:bc:51:2c:53:
32:28:3b:66:d4:40:44:d8:21:87:2c:76:8a:ef:33:41:74:74:
2f:89:d2:d5:9e:22:e2:18:08:2d:eb:c7:12:cd:fb:7d:3f:e2:
25:75:b6:59:65:52:45:a4:7e:f3:78:25:ab:84:b3:ae:b3:75:
73:9e:7a:57:e6:a2:30:c6:eb:92:7c:33:22:4a:3f:be:89:b2:
e2:74:fb:34:c0:63:e1:2c:8c:5e:34:6c:c5:5d:66:61:da:a4:
0d:b8:12:3b:f2:a6:71:cb:c0:93:01:57:74:43:a4:1d:dd:58:
06:e7:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org