Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200969.roa
File: AS200969.roa (raw, json)
Hash identifier: /RgYLun0w6zgLkQHPTckRwN4ArykyF2Txn9MxRR2Lqg=
Subject key identifier: 93:F3:91:EE:FB:2B:73:C6:27:DA:9A:DC:E9:ED:16:FE:18:9E:B1:98
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 43EFA842F1619960A96A8366BD73D969F39FEC7D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200969.roa
Signing time: Tue 05 Nov 2024 03:40:06 +0000
ROA not before: Tue 05 Nov 2024 03:35:06 +0000
ROA not after: Tue 04 Nov 2025 03:40:06 +0000
asID: 200969
IP address blocks: 2a06:a005:2740::/44 maxlen: 48
2a06:a005:2750::/44 maxlen: 48
2a06:a005:2760::/44 maxlen: 48
2a06:a005:2770::/44 maxlen: 48
2a06:a005:2780::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ef:a8:42:f1:61:99:60:a9:6a:83:66:bd:73:d9:69:f3:9f:ec:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:06 2024 GMT
Not After : Nov 4 03:40:06 2025 GMT
Subject: CN=93F391EEFB2B73C627DA9ADCE9ED16FE189EB198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:31:ab:1a:94:60:74:48:6a:5a:00:67:b0:
87:a0:d4:d3:12:10:96:38:f3:d9:c7:01:62:09:8f:
bc:4e:c7:51:20:1e:51:b5:49:07:f8:7d:a5:e5:5f:
db:f7:08:0a:5b:54:ac:76:f7:0a:f3:f4:45:db:2d:
52:87:16:58:68:e3:0f:ac:00:f5:56:ad:ba:f8:1e:
e8:82:40:8c:fb:ec:06:f8:1e:b0:99:9e:60:8e:bc:
b8:37:94:36:88:48:07:d8:85:82:66:c5:65:5f:3e:
e5:46:69:62:54:11:4b:6d:1a:3a:7e:2e:87:38:10:
a4:b3:ba:85:4c:dd:b6:41:9d:56:ad:a2:06:5d:9f:
ad:42:42:c7:15:90:5e:4b:8c:27:9d:03:01:5a:87:
bc:82:35:98:21:a2:78:a2:77:8d:b4:c2:70:8d:5d:
2c:d2:b1:4f:08:83:bc:9e:b6:6e:04:6d:2c:23:05:
d5:51:00:61:08:30:47:46:24:c1:11:d6:64:4b:87:
51:2c:30:c6:09:64:4e:95:b3:90:8b:f8:81:d9:3b:
4b:7d:f9:bb:1d:fa:db:18:14:96:9f:97:3b:a5:98:
5c:c8:63:42:e6:1a:a0:2f:df:80:5b:96:86:83:fc:
78:24:5f:c4:1b:14:57:69:6e:ff:d5:e4:96:f6:30:
9a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F3:91:EE:FB:2B:73:C6:27:DA:9A:DC:E9:ED:16:FE:18:9E:B1:98
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200969.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2740::-2a06:a005:278f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:24:08:06:7a:e2:5c:b0:d9:5f:2c:fd:fe:ff:a9:4f:02:a5:
87:23:fe:fe:da:78:e2:06:9b:4e:09:7a:4a:8a:df:fb:70:ad:
88:df:3b:cb:b4:cf:01:58:80:22:49:a0:eb:b5:29:21:8c:95:
76:9b:b5:61:67:41:5b:e2:6a:bf:2a:a0:b8:c4:24:a9:d3:9b:
fa:b2:ca:d5:d7:29:9b:4c:2b:91:e3:a4:47:69:6b:9a:e0:30:
d0:f1:c5:51:bc:c1:8d:0a:09:b5:18:01:47:1c:75:4c:eb:da:
51:a0:24:fa:36:16:f9:a7:d7:2e:1e:88:88:6f:0c:cb:df:d9:
c5:47:db:80:84:f0:ec:46:54:04:04:35:b0:e8:ce:82:73:ad:
6a:69:89:6b:98:99:f9:63:d3:7c:ca:6b:fa:94:e2:cd:67:38:
5c:05:fc:03:65:9d:52:70:e6:3f:0e:74:1e:46:ac:85:4a:c8:
aa:c4:0c:d2:91:78:fe:d0:79:2b:c2:0b:46:a0:94:d2:1c:a8:
11:2e:17:69:dc:20:69:4c:34:62:cc:b2:3c:bd:ab:d7:0d:92:
39:7d:a9:c4:34:d0:d8:4c:1f:81:b3:84:7c:e5:86:9b:d2:f8:
7c:a0:ef:0e:46:12:de:ac:a3:bc:81:4e:d8:99:19:03:81:80:
66:95:f5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:35 2024 by rpki-client on console-fra.rpki-client.org