Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200912.roa
File: AS200912.roa (raw, json)
Hash identifier: KteMHgCQFbvyAS92l+csI2N9Y/KGdZIAtwJV8V73QLc=
Subject key identifier: BB:F9:2A:D6:BC:1D:0C:8D:E4:E5:39:DF:C0:73:AD:35:E3:68:5A:52
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 5ECEA518E9D007277818548FEB479CBCF09869B5
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200912.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 200912
IP address blocks: 2a06:a005:2500::/44 maxlen: 48
2a06:a005:2510::/44 maxlen: 48
2a06:a005:2520::/44 maxlen: 48
2a06:a005:25b0::/44 maxlen: 48
2a06:a005:25c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ce:a5:18:e9:d0:07:27:78:18:54:8f:eb:47:9c:bc:f0:98:69:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=BBF92AD6BC1D0C8DE4E539DFC073AD35E3685A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:67:82:a0:8d:2e:01:37:1f:98:6c:82:6a:
6f:7a:e9:8c:83:ff:97:92:51:eb:f2:67:d2:c5:a4:
6b:9a:be:1a:d3:f8:78:07:e1:82:cf:bd:6f:3a:91:
51:fc:d1:2a:17:cb:ff:43:bd:28:e2:a4:d9:b7:66:
5f:73:3d:8e:4a:f8:6d:1b:f2:e5:4a:6f:10:65:93:
d6:b3:5c:53:62:6b:f6:38:49:06:43:64:4a:a9:33:
3f:7c:6d:b3:b2:c5:99:07:9f:05:e2:d2:db:11:59:
a0:47:48:92:92:d8:88:e4:c6:bc:63:c0:c4:1e:df:
f1:c9:aa:16:6d:85:94:04:76:9e:10:42:ae:6f:2b:
cf:df:0f:65:28:c9:35:1a:40:f3:d8:bb:6f:e0:40:
5b:1d:a7:b3:a0:45:aa:7f:5c:b7:d6:fa:2a:05:a3:
03:d3:76:94:df:65:ab:b3:49:65:22:0d:58:89:b8:
dd:b4:d4:a7:cc:e0:97:3a:04:6a:d2:c0:6b:7c:e2:
b4:51:ff:6c:22:cc:1f:ce:db:02:71:24:1a:31:d7:
cd:84:bc:b8:67:f5:c7:96:9f:38:61:da:5c:75:2d:
47:e3:d3:3d:d0:da:64:85:84:92:21:cc:91:82:ac:
38:b7:8d:4b:d7:8b:84:1a:15:e4:4c:68:f3:a5:2e:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F9:2A:D6:BC:1D:0C:8D:E4:E5:39:DF:C0:73:AD:35:E3:68:5A:52
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2500::-2a06:a005:252f:ffff:ffff:ffff:ffff:ffff
2a06:a005:25b0::-2a06:a005:25cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b8:33:ff:a6:2e:3c:cc:54:db:81:37:bf:7f:5e:5e:57:fc:03:
cd:ec:1f:b5:7c:29:cc:5b:89:ac:a4:01:e5:d1:22:84:67:df:
3d:52:0a:15:42:e5:6b:93:a6:7c:96:1f:75:1b:45:15:aa:a1:
6b:fd:18:fa:e4:d0:02:48:0f:d6:b3:4d:2e:e7:f3:40:4b:9d:
19:a6:1f:0a:3c:91:3f:df:3f:ac:4a:71:da:f7:86:a8:8a:76:
0a:3c:2f:e2:08:07:12:01:6d:5b:ab:2f:45:60:63:f5:44:1d:
06:6c:75:ea:be:d5:2b:0d:62:b6:f4:46:35:ac:de:22:4a:34:
19:11:82:23:f7:7e:28:a0:44:8d:f2:7d:03:dd:01:8c:85:35:
9f:60:0f:82:21:9e:9f:7a:1a:81:bc:2c:ef:a3:8d:6a:15:2d:
15:6f:a3:5a:d2:cc:e3:cd:04:6e:2e:70:e8:6c:98:2f:93:76:
c1:01:a1:25:13:da:ac:2d:14:6b:8f:ca:98:fb:d5:84:d2:1f:
db:e1:67:26:76:da:f8:0a:eb:7a:a5:52:e9:7e:5d:0b:69:f7:
5d:93:e8:72:f5:e6:12:77:d9:5b:8a:bd:2f:f3:cd:10:54:e6:
92:cc:66:2b:37:3c:0d:7a:12:04:12:4d:fe:ae:49:47:b9:3a:
6f:85:d1:9f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUXs6lGOnQByd4GFSP60ecvPCYabUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTRaFw0yNDEyMDMwMjQ0MTRaMDMxMTAvBgNV
BAMTKEJCRjkyQUQ2QkMxRDBDOERFNEU1MzlERkMwNzNBRDM1RTM2ODVBNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYomeCoI0uATcfmGyCam966YyD
/5eSUevyZ9LFpGuavhrT+HgH4YLPvW86kVH80SoXy/9DvSjipNm3Zl9zPY5K+G0b
8uVKbxBlk9azXFNia/Y4SQZDZEqpMz98bbOyxZkHnwXi0tsRWaBHSJKS2Ijkxrxj
wMQe3/HJqhZthZQEdp4QQq5vK8/fD2UoyTUaQPPYu2/gQFsdp7OgRap/XLfW+ioF
owPTdpTfZauzSWUiDViJuN201KfM4Jc6BGrSwGt84rRR/2wizB/O2wJxJBox182E
vLhn9ceWnzhh2lx1LUfj0z3Q2mSFhJIhzJGCrDi3jUvXi4QaFeRMaPOlLvGvAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUu/kq1rwdDI3k5TnfwHOtNeNoWlIwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAwOTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH
AQH/BDEwLzAtBAIAAjAnMBEDBgAqBqAFJQMHBCoGoAUlIDASAwcEKgagBSWwAwcE
KgagBSXAMA0GCSqGSIb3DQEBCwUAA4IBAQC4M/+mLjzMVNuBN79/Xl5X/APN7B+1
fCnMW4mspAHl0SKEZ989UgoVQuVrk6Z8lh91G0UVqqFr/Rj65NACSA/Ws00u5/NA
S50Zph8KPJE/3z+sSnHa94aoinYKPC/iCAcSAW1bqy9FYGP1RB0GbHXqvtUrDWK2
9EY1rN4iSjQZEYIj934ooESN8n0D3QGMhTWfYA+CIZ6fehqBvCzvo41qFS0Vb6Na
0szjzQRuLnDobJgvk3bBAaElE9qsLRRrj8qY+9WE0h/b4Wcmdtr4Cut6pVLpfl0L
afddk+hy9eYSd9lbir0v880QVOaSzGYrNzwNehIEEk3+rklHuTpvhdGf
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org