Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200730.roa
File: AS200730.roa (raw, json)
Hash identifier: YKXsnY1n8gm8CRoLokQxWvoeWDN5MikR91HT0CYxUTM=
Subject key identifier: 31:21:D0:DB:70:7A:92:7E:BC:6B:3F:47:4D:70:43:E3:C3:F6:B3:37
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7782AFF346B2C47357774416519256A09B8ADD78
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200730.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 200730
IP address blocks: 2a06:a005:116f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:82:af:f3:46:b2:c4:73:57:77:44:16:51:92:56:a0:9b:8a:dd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=3121D0DB707A927EBC6B3F474D7043E3C3F6B337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:ae:b9:41:0c:dc:63:06:1c:0b:a9:fa:81:
be:f8:79:69:5e:14:7a:cb:76:01:94:f8:00:15:84:
64:4f:0c:82:26:ee:e8:b2:1c:8f:a4:5f:77:0b:92:
21:43:bb:12:64:26:74:38:f6:71:26:55:6a:23:43:
65:ae:4a:40:91:0e:09:4f:c8:4b:85:24:e6:c3:f2:
b5:76:75:b6:1d:43:30:a5:4d:6d:45:02:2c:91:66:
17:86:e1:3e:d2:42:b0:9f:1d:98:32:01:02:9e:cd:
02:e2:15:27:c1:ee:ef:c7:0c:7c:97:d2:28:2f:9c:
31:d2:2b:1e:9b:12:23:70:3a:6b:02:3a:74:1a:6c:
45:36:94:23:23:b5:ab:9d:88:ed:a8:ac:17:be:69:
29:0e:e6:40:61:41:58:c5:b8:06:a1:8e:a1:a9:e5:
ee:37:06:ea:53:a2:37:57:c1:0d:71:55:cc:0b:5f:
9a:fc:d9:c9:15:97:2f:bf:cf:0e:46:a2:2c:4e:a1:
58:e6:3b:ea:ec:d9:7e:65:d1:f0:38:7d:c7:7e:3b:
70:4e:d2:ba:76:c9:a8:fb:ab:98:d7:47:43:30:e4:
2e:c4:13:b6:18:78:67:28:4d:26:67:84:9b:e3:80:
12:05:5c:4c:da:92:68:a5:bb:cc:b2:ad:85:f6:e7:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:21:D0:DB:70:7A:92:7E:BC:6B:3F:47:4D:70:43:E3:C3:F6:B3:37
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:116f::/48
Signature Algorithm: sha256WithRSAEncryption
97:a8:6d:0e:65:d3:28:67:1d:1f:95:bc:5e:5c:a9:14:0b:e0:
71:13:ea:e7:13:da:a8:63:00:f3:df:8e:a5:e0:f0:2a:b2:e6:
bd:0b:a1:25:9a:7e:a1:ad:c7:64:d3:29:48:b7:51:77:24:67:
67:50:43:70:e2:37:fa:c2:b3:9e:c0:1a:7c:07:38:7c:21:85:
25:b8:0d:19:d4:83:74:ee:f2:67:06:cd:ee:8a:50:ec:13:bf:
20:3a:6e:4b:1c:3c:b4:68:05:3c:73:d2:2d:83:01:c8:b4:be:
50:d0:29:57:a6:d3:53:2b:25:01:f8:c4:98:31:10:81:cb:53:
ad:f4:78:e7:9a:92:5a:0c:0d:48:ce:c6:c2:85:38:89:12:19:
3f:27:c8:3d:e2:cc:a0:9d:b8:05:92:1b:07:cb:ae:d4:dc:bf:
cf:d9:5b:50:f6:22:00:61:a7:2e:7f:5b:f9:0a:0a:52:1f:69:
44:8e:29:1c:d2:13:b9:9d:b9:99:2c:6b:b4:d1:44:5a:85:4c:
48:ea:b8:9c:7d:d7:75:4f:ad:04:ae:d5:15:cc:a5:32:10:81:
75:36:46:db:07:0e:0f:fd:e6:ad:af:4d:1c:47:1d:82:13:13:
6f:72:1a:65:92:7a:2f:15:50:27:dc:35:69:56:df:a4:67:5c:
64:d9:ec:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:22 2024 by rpki-client on console-fra.rpki-client.org