Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201217.roa
File: AS201217.roa (raw, json)
Hash identifier: YTnAIiYwBXhK5puY3gP3b2/t3gyWYfE5ePAG+1TUYUQ=
Subject key identifier: 2B:6A:75:0C:A2:FD:0B:36:33:CE:03:F7:4B:DB:A2:4F:EF:68:87:84
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 25C3D17E5B4A9E3CD108BA7A6D8A6F4017438433
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201217.roa
Signing time: Thu 08 Feb 2024 07:44:24 +0000
ROA not before: Thu 08 Feb 2024 07:39:24 +0000
ROA not after: Thu 06 Feb 2025 07:44:24 +0000
asID: 201217
IP address blocks: 2a06:a005:8a0::/44 maxlen: 48
2a06:a005:1870::/48 maxlen: 48
2a06:a005:1c78::/48 maxlen: 48
2a06:a005:2470::/44 maxlen: 48
2a06:a005:2ea0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:c3:d1:7e:5b:4a:9e:3c:d1:08:ba:7a:6d:8a:6f:40:17:43:84:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 8 07:39:24 2024 GMT
Not After : Feb 6 07:44:24 2025 GMT
Subject: CN=2B6A750CA2FD0B3633CE03F74BDBA24FEF688784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:57:df:99:a7:9b:8e:70:e8:be:ff:fb:6c:
89:1b:51:5b:1f:fc:b1:db:76:91:48:6b:5d:d4:89:
ec:f3:37:fc:99:29:32:1f:c9:c9:0e:8d:be:75:56:
9f:9d:40:5b:0f:82:d9:3f:5b:3e:65:1d:dc:d3:72:
4f:83:13:d9:d4:b9:ee:6c:1f:37:0b:a9:90:d0:56:
44:3c:d6:02:c1:e6:44:bb:17:70:13:f0:8c:b6:05:
d2:88:6a:88:2c:0b:b2:01:fd:6f:c2:74:79:a7:47:
96:68:a4:77:51:e5:c9:90:98:c5:72:f3:7b:09:b6:
43:9f:e2:7b:da:7f:1a:bf:f7:2f:c5:1e:8c:e9:06:
62:07:c5:b5:78:f1:c2:cd:be:c3:88:33:65:bc:c0:
95:2e:54:d1:e0:e2:73:f5:a3:64:16:82:2c:24:eb:
4f:e1:48:08:08:ce:69:2c:a5:f8:c2:ab:a3:99:bb:
95:d5:ff:28:3a:ba:d2:bb:d6:60:4e:3b:db:07:78:
dc:1a:08:b4:db:5f:19:f1:af:d3:f2:a5:3d:02:b2:
81:3e:45:2b:2e:b4:48:e0:6b:72:ad:3d:e5:ac:ff:
97:8a:c5:d8:30:33:3e:2e:00:24:22:d1:fc:18:53:
8a:b6:a9:14:ad:70:90:2d:60:a1:f9:2e:3b:96:08:
84:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6A:75:0C:A2:FD:0B:36:33:CE:03:F7:4B:DB:A2:4F:EF:68:87:84
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201217.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:8a0::/44
2a06:a005:1870::/48
2a06:a005:1c78::/48
2a06:a005:2470::/44
2a06:a005:2ea0::/44
Signature Algorithm: sha256WithRSAEncryption
bf:97:50:ed:2c:0d:73:b7:d0:30:9f:1b:02:0a:7a:6b:72:05:
9d:95:66:58:bc:9d:17:76:e5:11:2f:50:d9:f5:18:10:e4:96:
36:48:c5:89:88:22:34:f3:73:9f:cc:1b:2d:9b:63:26:09:36:
91:fe:c2:b5:14:63:b3:c3:ef:c8:26:c9:4f:44:de:b1:25:6b:
4a:1a:ec:5f:48:e2:07:a1:c8:a8:b4:3a:1c:c0:cd:33:ac:68:
b8:09:f7:97:6d:95:53:d4:26:45:2b:f4:cc:dc:1e:09:16:10:
b2:76:66:e4:13:71:6a:4a:96:31:5f:5f:a2:e7:2f:23:3e:75:
86:09:56:1b:e4:89:0b:8d:1b:c0:17:4f:88:b2:31:24:95:e5:
c6:48:0b:ae:1d:a8:cc:a9:9c:28:8f:28:c9:48:c4:da:b8:b8:
a3:0a:df:9c:d4:47:99:3e:e8:c8:18:57:bc:94:f3:f8:f4:6e:
1e:2f:a8:95:de:d7:17:34:b9:01:18:1d:8f:de:5b:b6:5c:72:
53:91:9b:c6:f1:67:d9:48:44:fb:3a:09:4e:b3:0a:b4:d2:28:
ad:e3:4f:f7:86:06:9b:e3:1c:cb:78:e9:59:18:4b:b5:5d:8c:
8a:47:65:f5:65:97:9b:05:bb:a1:d6:82:2f:6d:58:08:12:71:
a2:c1:46:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org