Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200912.roa
File: AS200912.roa (raw, json)
Hash identifier: wUVFo0hhBRDwLvCFmO7gYWaqMKvXYxCHkkJfyppF8Kk=
Subject key identifier: BF:1A:86:7B:C2:3B:44:F7:C4:E6:D2:49:5D:86:3F:82:7F:6B:42:5E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 36B79BB5E88222BEC46F9C6B4255955B2ED720A2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200912.roa
Signing time: Tue 05 Nov 2024 03:40:08 +0000
ROA not before: Tue 05 Nov 2024 03:35:08 +0000
ROA not after: Tue 04 Nov 2025 03:40:08 +0000
asID: 200912
IP address blocks: 2a06:a005:2500::/44 maxlen: 48
2a06:a005:2510::/44 maxlen: 48
2a06:a005:2520::/44 maxlen: 48
2a06:a005:25b0::/44 maxlen: 48
2a06:a005:25c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b7:9b:b5:e8:82:22:be:c4:6f:9c:6b:42:55:95:5b:2e:d7:20:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:08 2024 GMT
Not After : Nov 4 03:40:08 2025 GMT
Subject: CN=BF1A867BC23B44F7C4E6D2495D863F827F6B425E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:1a:26:68:e7:c3:25:d5:4b:a9:7e:91:7a:
9a:e7:ca:d1:19:d3:1d:69:1b:8c:c2:d6:c9:96:32:
a9:f2:cd:79:d3:15:ef:a4:fb:fb:0a:fb:74:0f:2d:
34:ca:29:26:0e:68:48:49:15:63:59:b9:a1:98:52:
de:c7:84:4d:79:65:47:83:4c:3e:fc:5e:a5:00:9d:
75:8a:aa:b6:35:74:8f:06:c6:2a:77:01:e0:55:15:
b3:c6:1f:69:0f:d6:47:8d:98:80:80:ed:09:bc:2b:
a9:87:9d:d6:37:2d:f1:25:06:e9:e9:53:aa:98:d5:
21:71:82:cb:22:a3:56:15:37:21:3f:79:1e:9f:47:
6f:8e:a4:70:89:3e:79:d3:97:dc:cd:f5:e6:76:f3:
d2:33:28:a6:a2:59:b5:5d:e2:83:5c:b9:cc:a5:03:
0d:ae:4c:42:71:fb:9a:f8:ac:40:76:00:9f:16:98:
1c:ac:69:35:53:2e:71:4a:2c:4b:97:a3:a5:ec:d5:
1e:15:b4:a8:7e:90:1c:83:f4:2e:bf:93:ce:b4:ee:
63:63:f1:93:44:6a:66:2a:c3:58:30:77:04:89:f9:
84:86:f6:ad:23:93:c3:ca:59:56:da:f0:c5:dc:d4:
03:8e:7e:59:28:2b:2b:8a:32:d5:b3:b3:99:b2:49:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1A:86:7B:C2:3B:44:F7:C4:E6:D2:49:5D:86:3F:82:7F:6B:42:5E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200912.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2500::-2a06:a005:252f:ffff:ffff:ffff:ffff:ffff
2a06:a005:25b0::-2a06:a005:25cf:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
99:1b:79:5c:5c:f9:3d:84:5f:61:b3:1e:95:96:06:e3:96:a8:
05:a4:d4:09:eb:23:4c:b8:82:17:60:49:ab:6a:14:fe:d3:64:
50:25:4f:98:2f:c8:6b:7e:04:21:c4:6c:e9:2c:b9:57:16:75:
bd:5d:70:29:7b:8c:3b:87:3c:d7:d6:c1:59:3b:b2:3a:f9:b1:
9d:ea:5b:70:68:ab:99:cf:9d:bf:6b:c7:37:52:f3:e4:d0:66:
07:e0:1d:fd:c4:d4:cd:c9:1e:ff:c6:81:da:e0:ea:e0:fb:95:
32:e0:ad:fc:7c:fb:92:7f:8a:c8:37:69:a8:2d:20:cf:31:c7:
e3:3b:d5:8b:a8:2b:9e:fb:96:c8:40:e9:cd:42:d8:eb:fa:4f:
90:fa:4b:2e:79:4f:82:de:ae:14:17:f3:d5:30:11:dc:dc:af:
fe:dc:63:f8:32:7e:82:bf:1a:d0:f2:ec:24:1f:a1:9b:16:c8:
3b:32:dd:e3:83:8e:c6:ef:f3:2f:34:bd:62:54:61:b0:7f:8a:
b1:38:02:40:f3:cb:e5:fe:26:a5:f1:8f:2e:59:95:aa:6d:e2:
69:63:60:c7:e9:b1:9f:16:75:c7:9e:f7:06:e9:ed:eb:c2:5a:
26:c8:c1:49:c9:a6:70:2b:e8:f1:97:a4:9a:ef:69:2c:5b:21:
eb:b5:a1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:35 2024 by rpki-client on console-fra.rpki-client.org