Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200732.roa
File: AS200732.roa (raw, json)
Hash identifier: 9oHexRTnmxr4893qR1iG6reAIziUEQvmdM39pjXrAlA=
Subject key identifier: 92:1B:B2:3F:1D:EA:5B:36:B1:E8:7D:CA:0D:F1:09:65:23:54:31:F8
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 054C132F0AC01B9A828DB896828F3D938BA2257E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200732.roa
Signing time: Tue 05 Dec 2023 02:44:16 +0000
ROA not before: Tue 05 Dec 2023 02:39:16 +0000
ROA not after: Tue 03 Dec 2024 02:44:16 +0000
asID: 200732
IP address blocks: 2a06:a005:5bb::/48 maxlen: 48
2a06:a005:d26::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:4c:13:2f:0a:c0:1b:9a:82:8d:b8:96:82:8f:3d:93:8b:a2:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:16 2023 GMT
Not After : Dec 3 02:44:16 2024 GMT
Subject: CN=921BB23F1DEA5B36B1E87DCA0DF10965235431F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:aa:7d:66:f4:ab:53:5d:d5:ab:ca:f0:3c:29:
d8:14:e2:99:16:1c:67:65:21:eb:b8:3b:32:46:c1:
04:a8:c1:7d:40:73:c3:fd:f0:5a:c1:a1:c9:29:54:
26:1a:6a:8b:43:6d:a3:c5:73:d3:5e:af:40:c4:88:
70:76:4d:b1:a5:88:db:92:d1:f5:4f:80:5c:72:6c:
34:b4:81:cb:52:1b:65:25:4b:23:2e:e5:d5:d2:77:
e9:7c:2d:0b:f5:57:fc:6b:c3:1d:98:ea:17:bb:a2:
62:41:bd:16:e7:8e:f6:41:8d:34:d2:33:37:40:09:
2f:02:2b:c2:33:4d:cc:eb:ec:04:96:c5:a1:67:ac:
f6:e7:8f:80:25:4d:e5:55:fd:84:ce:bf:09:9d:d6:
29:67:4c:ca:6c:bc:8d:e4:14:61:da:2a:22:86:9a:
95:2a:5a:d2:97:50:a7:8a:9f:77:97:1d:01:93:71:
69:e4:e0:80:ef:13:1c:22:82:d3:03:12:ae:af:0b:
df:ba:45:7d:6e:26:6a:b4:91:b1:3a:87:82:f4:27:
1b:8b:ef:61:4c:f3:ab:6b:54:b1:37:cf:63:4b:ec:
07:a0:fb:de:8d:a1:85:d9:ce:e1:6d:83:1f:d8:b8:
cc:d4:78:51:3c:1b:bf:2a:15:7d:ca:81:6c:65:30:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1B:B2:3F:1D:EA:5B:36:B1:E8:7D:CA:0D:F1:09:65:23:54:31:F8
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5bb::/48
2a06:a005:d26::/48
Signature Algorithm: sha256WithRSAEncryption
4b:bb:f0:19:ab:a2:fe:25:c3:a9:a0:9d:44:f3:e6:c6:21:4d:
6f:6a:37:7e:b8:9f:71:24:c9:7c:67:81:8f:1b:22:8a:61:71:
59:88:45:cc:d1:03:2b:f2:1c:ca:0d:56:33:8f:9d:a9:28:e7:
ee:e0:8d:90:9e:42:90:ce:53:58:a9:cf:32:95:e3:1c:08:44:
26:38:54:d0:62:3a:55:4e:cd:ae:e0:b6:13:30:eb:b2:2d:93:
ea:fc:70:53:e7:6e:d3:c9:ed:01:b7:d0:f9:63:f3:f1:ab:09:
9c:49:f1:56:89:6a:0a:37:e5:dc:20:63:9a:f1:a7:38:e1:3d:
32:dc:9e:01:66:10:ac:a0:da:94:b0:1d:a0:7e:98:2c:e8:59:
fa:d9:18:89:49:f7:c8:3c:cd:9a:9a:82:91:88:8a:1f:6d:13:
d9:3f:12:ee:9a:89:63:3d:77:de:61:d8:b7:7f:d6:ff:97:28:
bd:e9:49:be:a1:c7:1f:0a:92:3d:b4:74:e1:8c:b1:1b:1a:95:
14:cb:ba:e4:e7:55:e8:47:d8:0d:10:c3:71:e4:03:88:9c:22:
08:1b:da:d1:83:2b:e8:34:a0:d2:e7:47:82:03:7e:31:e6:f7:
73:4d:d3:35:09:f3:2c:b6:0d:e6:62:e9:cf:68:48:70:42:bc:
42:6f:d9:a0
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUBUwTLwrAG5qCjbiWgo89k4uiJX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTZaFw0yNDEyMDMwMjQ0MTZaMDMxMTAvBgNV
BAMTKDkyMUJCMjNGMURFQTVCMzZCMUU4N0RDQTBERjEwOTY1MjM1NDMxRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqn1m9KtTXdWryvA8KdgU4pkW
HGdlIeu4OzJGwQSowX1Ac8P98FrBockpVCYaaotDbaPFc9Ner0DEiHB2TbGliNuS
0fVPgFxybDS0gctSG2UlSyMu5dXSd+l8LQv1V/xrwx2Y6he7omJBvRbnjvZBjTTS
MzdACS8CK8IzTczr7ASWxaFnrPbnj4AlTeVV/YTOvwmd1ilnTMpsvI3kFGHaKiKG
mpUqWtKXUKeKn3eXHQGTcWnk4IDvExwigtMDEq6vC9+6RX1uJmq0kbE6h4L0JxuL
72FM86trVLE3z2NL7Aeg+96NoYXZzuFtgx/YuMzUeFE8G78qFX3KgWxlMJslAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUkhuyPx3qWzax6H3KDfEJZSNUMfgwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAwNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcAKgagBQW7AwcAKgagBQ0mMA0GCSqGSIb3DQEBCwUA
A4IBAQBLu/AZq6L+JcOpoJ1E8+bGIU1vajd+uJ9xJMl8Z4GPGyKKYXFZiEXM0QMr
8hzKDVYzj52pKOfu4I2QnkKQzlNYqc8yleMcCEQmOFTQYjpVTs2u4LYTMOuyLZPq
/HBT527Tye0Bt9D5Y/PxqwmcSfFWiWoKN+XcIGOa8ac44T0y3J4BZhCsoNqUsB2g
fpgs6Fn62RiJSffIPM2amoKRiIofbRPZPxLumoljPXfeYdi3f9b/lyi96Um+occf
CpI9tHThjLEbGpUUy7rk51XoR9gNEMNx5AOInCIIG9rRgyvoNKDS50eCA34x5vdz
TdM1CfMstg3mYunPaEhwQrxCb9mg
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org