Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200730.roa
File: AS200730.roa (raw, json)
Hash identifier: 0PIAVvgYm4hYEov2oYFLf5a9IZRDu3fT6Nz8Q5VaNpY=
Subject key identifier: EA:C0:22:3A:5B:55:AD:99:84:C9:D7:F5:77:07:9A:38:5D:47:60:5C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7CF238BC0622456BCB44F332976B244EE7719BFB
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200730.roa
Signing time: Tue 05 Dec 2023 02:44:09 +0000
ROA not before: Tue 05 Dec 2023 02:39:09 +0000
ROA not after: Tue 03 Dec 2024 02:44:09 +0000
asID: 200730
IP address blocks: 2a06:a005:116f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f2:38:bc:06:22:45:6b:cb:44:f3:32:97:6b:24:4e:e7:71:9b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:09 2023 GMT
Not After : Dec 3 02:44:09 2024 GMT
Subject: CN=EAC0223A5B55AD9984C9D7F577079A385D47605C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:c8:50:d8:c6:45:45:3d:18:2f:f5:59:f3:
c1:56:00:f4:98:20:9e:54:6d:6e:a1:92:2b:21:06:
27:13:a4:c5:87:99:45:b1:65:0a:36:c3:f4:39:1e:
3d:95:23:56:7a:ec:ac:ee:ca:44:45:39:4f:1a:b3:
b5:d9:86:de:6e:9d:54:83:31:73:43:cf:30:57:8c:
6d:70:d3:96:1a:e0:4f:55:e2:fd:9c:6f:e0:be:a8:
d8:aa:e3:19:76:a7:cc:67:bb:6d:56:38:f2:ef:fd:
7f:03:69:a9:7c:20:58:b4:9f:4f:46:8c:34:d2:59:
86:87:8f:3e:81:fd:81:c5:68:44:ee:85:cc:01:42:
42:98:55:b4:6b:25:45:07:cc:b9:7e:ce:4f:56:09:
82:9c:63:ce:10:5a:81:bb:3d:08:e1:bd:7d:60:5f:
98:d0:80:62:e2:96:35:7e:68:d1:5d:6c:dd:f0:f6:
1c:91:4e:eb:07:33:e8:a9:87:76:f5:8e:5d:8a:d5:
1d:10:66:98:3b:9b:94:55:78:d7:a4:ca:2a:cd:c3:
35:2d:31:c9:61:fc:8f:e6:92:37:85:33:48:97:17:
b6:14:36:80:2d:07:25:6e:60:ef:c9:4a:14:80:67:
73:f4:e7:34:05:ac:e4:52:0c:a9:3e:81:e8:bd:34:
0d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C0:22:3A:5B:55:AD:99:84:C9:D7:F5:77:07:9A:38:5D:47:60:5C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:116f::/48
Signature Algorithm: sha256WithRSAEncryption
6c:34:69:39:fa:55:70:7b:8b:a3:d5:09:a2:b5:89:98:f9:48:
94:76:7c:31:8f:3b:b6:6c:1f:06:1f:a0:76:2a:64:5a:84:93:
08:49:42:99:cb:53:9e:b9:1b:f2:77:86:9a:7e:02:ac:9f:da:
88:db:16:57:c8:e1:1f:58:7d:2c:38:7d:50:db:10:7e:da:d6:
c4:d8:0d:1c:45:96:0f:c4:40:64:45:22:0c:af:05:9f:9e:b6:
db:71:0f:c0:6e:07:9f:d3:01:b3:c5:c8:76:ce:08:10:4b:1f:
04:b2:80:ca:78:3f:90:9c:06:c6:df:fc:b4:0d:a8:b1:ed:fe:
8c:8b:f0:ed:1e:9c:e2:22:1f:05:7e:85:45:8a:5f:93:14:05:
67:c8:35:8c:a7:47:83:50:73:5c:c7:3a:eb:83:c8:58:74:16:
3b:0d:ed:ed:0a:b5:1e:c0:ca:64:5c:ba:c0:9a:fe:87:d3:2b:
48:97:d4:d1:35:7a:e1:3b:53:dd:8d:c1:48:0b:cf:5e:40:4d:
b7:08:14:35:f9:e9:d2:83:f8:7b:ad:a3:d1:fe:30:c2:95:35:
90:48:24:59:9a:bd:84:87:0f:d3:54:9b:72:08:8c:c6:96:cd:
a6:46:ba:45:c3:8f:fb:a3:55:c7:33:bf:e7:8c:aa:8e:75:04:
a4:09:87:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org