Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201217.roa
File: AS201217.roa (raw, json)
Hash identifier: NbKbiu6A25RX7YCztab7btdB8E/exLIji3cpYcXHd30=
Subject key identifier: AE:DC:EF:5F:16:68:DD:FF:56:08:D6:24:78:4B:0A:A4:2B:8B:6E:70
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 56154F72FDAB761DBC6DA68A20F9DE7D310E4D10
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201217.roa
Signing time: Fri 13 Dec 2024 02:56:30 +0000
ROA not before: Fri 13 Dec 2024 02:51:30 +0000
ROA not after: Fri 12 Dec 2025 02:56:30 +0000
asID: 201217
IP address blocks: 2a06:a005:1c78::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:15:4f:72:fd:ab:76:1d:bc:6d:a6:8a:20:f9:de:7d:31:0e:4d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:30 2024 GMT
Not After : Dec 12 02:56:30 2025 GMT
Subject: CN=AEDCEF5F1668DDFF5608D624784B0AA42B8B6E70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:cd:b8:5e:73:f0:2e:b0:c3:c8:46:88:36:
19:38:eb:00:d9:b0:38:54:0a:e8:56:08:91:2e:05:
5d:0b:0c:ff:8f:df:31:40:75:d2:67:05:cf:a1:65:
3d:4b:10:f3:5a:33:47:03:26:ed:52:30:3f:ea:8f:
d4:f0:4c:25:40:4c:ee:0b:1a:ad:2c:0e:55:cf:b6:
f3:88:44:66:f8:51:5b:62:23:0b:44:b8:68:99:b7:
fb:ad:e5:16:62:33:45:26:23:ca:85:c4:18:32:1b:
8c:51:5e:01:eb:dd:2b:01:5a:f3:0e:eb:f6:92:25:
55:bd:91:8a:12:d4:f2:b1:ee:cc:5d:76:00:77:dd:
7a:bf:6f:ec:31:22:7c:9a:dc:b7:65:55:1e:45:a2:
c4:51:77:65:39:d6:d6:5c:12:49:03:3e:dd:f6:68:
ba:15:70:e5:fe:5c:b8:dc:1b:27:2d:c3:de:0b:3c:
ef:b1:cf:6d:c2:18:fd:d2:17:6c:4a:59:b7:5b:86:
63:d9:e8:47:75:c3:2d:08:99:d5:da:74:5c:b2:f4:
d0:5d:2e:fb:6a:2d:73:c4:6e:77:47:95:a3:99:e2:
cb:32:b4:9a:af:85:6e:83:cc:8b:d9:83:2a:9d:8b:
ea:f1:d9:ff:41:a3:b2:19:ce:8b:6c:63:30:11:a9:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DC:EF:5F:16:68:DD:FF:56:08:D6:24:78:4B:0A:A4:2B:8B:6E:70
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201217.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1c78::/48
Signature Algorithm: sha256WithRSAEncryption
a0:9c:fe:db:47:16:3e:cd:4a:22:d7:4b:6d:83:f6:69:e5:e4:
51:f4:25:b5:9c:6a:90:42:47:71:41:94:b3:2c:cf:48:cc:29:
d6:cd:de:66:68:53:42:44:b6:bf:5e:76:6c:42:69:e3:85:7d:
0f:ba:4a:53:b8:f4:bf:22:28:63:a3:72:7c:9b:85:ff:c1:d7:
12:e9:7c:d8:f9:31:59:43:59:da:43:a2:53:ce:6c:98:bd:f7:
62:29:33:bb:c9:c6:79:8f:2a:c5:10:59:7a:c1:da:e8:61:50:
71:f1:bc:94:33:be:87:e1:ae:4d:8d:1c:84:72:8c:c8:9d:ef:
6b:8e:3a:6d:45:29:2f:e9:06:fb:84:bc:e6:7e:c1:f2:9a:a0:
c6:61:b3:6f:79:41:e3:db:b5:8b:11:2b:e5:99:e3:c8:e8:da:
15:d1:10:d7:ea:f7:96:bf:5c:5d:b4:6b:1d:21:fe:5e:c5:fb:
52:d4:4f:d8:a4:83:80:87:40:62:23:2c:cb:cd:6c:2e:5d:cd:
79:55:8c:73:1b:2f:f3:52:98:79:01:71:c8:d0:5c:6c:c3:74:
62:c9:03:a0:b5:9f:0b:40:f5:a7:a5:01:f6:89:76:69:fd:0f:
44:16:9e:99:33:ec:bd:ef:3c:d2:77:02:29:ab:fd:ef:94:fa:
c2:9a:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:23 2025 by rpki-client