Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201245.roa
File: AS201245.roa (raw, json)
Hash identifier: +0GmWekCkQQnf75auBnxMUvoPiREwl5MmleVASNMkqc=
Subject key identifier: AC:C0:C0:78:B5:33:09:3F:02:67:B3:4C:52:DB:DF:49:77:8D:8B:7B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 3D518B2E30E7D5BA1F5051EF9E6B28F0709C0FBC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201245.roa
Signing time: Thu 08 Feb 2024 22:44:24 +0000
ROA not before: Thu 08 Feb 2024 22:39:24 +0000
ROA not after: Thu 06 Feb 2025 22:44:24 +0000
asID: 201245
IP address blocks: 2a06:a005:2eb0::/44 maxlen: 48
2a06:a005:2ed0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:51:8b:2e:30:e7:d5:ba:1f:50:51:ef:9e:6b:28:f0:70:9c:0f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 8 22:39:24 2024 GMT
Not After : Feb 6 22:44:24 2025 GMT
Subject: CN=ACC0C078B533093F0267B34C52DBDF49778D8B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:d4:5e:ec:a0:b6:ce:3d:d9:ee:ef:59:02:
2a:4a:cc:2e:8c:c9:00:17:80:8b:e2:d2:cf:13:84:
1a:19:df:d8:56:d5:83:db:1b:92:f3:0d:c2:3a:62:
15:63:50:d8:58:65:5a:cc:88:19:24:2d:35:fc:ff:
a9:68:1c:ba:9d:1e:08:b9:b0:3b:41:4b:ab:47:18:
5e:dc:d6:22:97:1a:1f:5e:01:eb:3c:ce:df:28:93:
fb:75:4d:26:78:74:6e:8a:5c:26:c0:f7:60:da:12:
bf:ec:82:f9:09:4c:54:6a:fb:f0:10:6a:c4:6d:87:
3f:e5:3e:0f:a9:6f:97:d3:48:5c:7e:ca:cc:28:0d:
92:0a:5c:ae:a2:9d:e0:e3:8d:5d:22:b1:1d:bc:b1:
68:0e:5c:a7:06:3f:35:3c:b7:3b:d0:c3:1d:49:4d:
fe:a3:63:63:45:e7:45:1f:0d:6c:62:e4:92:97:4f:
12:8e:3c:a2:0f:cb:ed:42:0c:6e:a4:21:1c:c8:33:
8d:61:1c:d1:da:83:be:ec:9b:27:f5:be:47:1e:a7:
d7:0f:10:78:f5:ac:02:ea:b7:5e:6b:11:8e:5c:f4:
18:01:d0:be:19:75:b8:b8:6a:09:00:04:bf:91:75:
d7:53:54:31:73:7b:ea:0f:16:db:25:80:db:d9:74:
7d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C0:C0:78:B5:33:09:3F:02:67:B3:4C:52:DB:DF:49:77:8D:8B:7B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2eb0::/44
2a06:a005:2ed0::/44
Signature Algorithm: sha256WithRSAEncryption
18:f2:94:ff:83:b2:36:79:80:b5:0f:81:e6:8d:73:8f:3f:91:
03:c7:85:75:43:5b:b4:24:51:b1:83:bf:a1:f6:fe:ab:52:0e:
0b:e0:23:56:fc:2d:35:ac:fc:d0:12:ce:09:4b:c1:fc:2e:23:
99:ed:b0:24:cf:ca:b3:3c:8d:82:76:df:4a:9b:ac:5d:05:5f:
ee:4a:75:e6:13:33:dd:ee:f2:a6:0c:65:af:d5:29:e7:34:ed:
e3:d1:cf:eb:1e:ba:64:73:05:d0:e4:86:73:72:19:5c:f8:2d:
78:2a:f0:16:7e:a8:de:91:2e:81:67:f6:44:5c:1e:3c:5f:4f:
65:a1:b9:83:4f:c8:7b:76:97:b5:c7:fe:f2:a3:c4:c9:82:e8:
b0:e4:7f:f1:ff:3f:a6:63:49:db:a7:86:ef:d4:c2:4e:44:c2:
af:8a:c4:e3:a0:78:0f:38:a6:de:05:79:71:18:0c:f1:40:e7:
78:aa:e5:11:03:6d:bf:14:d9:d4:a7:34:78:c8:dd:a3:6f:56:
17:c6:0b:13:36:1d:a2:31:64:84:da:58:a6:1d:a1:c6:9e:35:
0f:fe:86:1f:da:26:af:47:42:a1:c2:56:4f:6f:b4:f9:a8:aa:
cf:1f:0e:a2:79:2c:b4:5e:3b:e1:af:c3:fc:50:94:c5:2b:fe:
41:62:79:3b
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUPVGLLjDn1bofUFHvnmso8HCcD7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMDgyMjM5MjRaFw0yNTAyMDYyMjQ0MjRaMDMxMTAvBgNV
BAMTKEFDQzBDMDc4QjUzMzA5M0YwMjY3QjM0QzUyREJERjQ5Nzc4RDhCN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhdRe7KC2zj3Z7u9ZAipKzC6M
yQAXgIvi0s8ThBoZ39hW1YPbG5LzDcI6YhVjUNhYZVrMiBkkLTX8/6loHLqdHgi5
sDtBS6tHGF7c1iKXGh9eAes8zt8ok/t1TSZ4dG6KXCbA92DaEr/sgvkJTFRq+/AQ
asRthz/lPg+pb5fTSFx+yswoDZIKXK6ineDjjV0isR28sWgOXKcGPzU8tzvQwx1J
Tf6jY2NF50UfDWxi5JKXTxKOPKIPy+1CDG6kIRzIM41hHNHag77smyf1vkcep9cP
EHj1rALqt15rEY5c9BgB0L4Zdbi4agkABL+RdddTVDFze+oPFtslgNvZdH1fAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUrMDAeLUzCT8CZ7NMUtvfSXeNi3swHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAxMjQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcEKgagBS6wAwcEKgagBS7QMA0GCSqGSIb3DQEBCwUA
A4IBAQAY8pT/g7I2eYC1D4HmjXOPP5EDx4V1Q1u0JFGxg7+h9v6rUg4L4CNW/C01
rPzQEs4JS8H8LiOZ7bAkz8qzPI2Cdt9Km6xdBV/uSnXmEzPd7vKmDGWv1SnnNO3j
0c/rHrpkcwXQ5IZzchlc+C14KvAWfqjekS6BZ/ZEXB48X09lobmDT8h7dpe1x/7y
o8TJguiw5H/x/z+mY0nbp4bv1MJORMKvisTjoHgPOKbeBXlxGAzxQOd4quURA22/
FNnUpzR4yN2jb1YXxgsTNh2iMWSE2limHaHGnjUP/oYf2iavR0KhwlZPb7T5qKrP
Hw6ieSy0Xjvhr8P8UJTFK/5BYnk7
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:30 2024 by rpki-client on console-ams.rpki-client.org