Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201818.roa
File: AS201818.roa (raw, json)
Hash identifier: T3CxZevwgMvjE6OeA8K5+uz3IUQBwZsdiHLirFOlPzY=
Subject key identifier: E6:FB:96:F4:AF:89:74:9A:40:D8:7A:59:26:77:CE:77:5F:24:00:58
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 24EA49275A1DEFD1571DB2917958E3670CFD8D0F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201818.roa
Signing time: Fri 15 Dec 2023 15:44:21 +0000
ROA not before: Fri 15 Dec 2023 15:39:21 +0000
ROA not after: Fri 13 Dec 2024 15:44:21 +0000
asID: 201818
IP address blocks: 2a06:a005:2010::/44 maxlen: 48
2a06:a005:20f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ea:49:27:5a:1d:ef:d1:57:1d:b2:91:79:58:e3:67:0c:fd:8d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 15 15:39:21 2023 GMT
Not After : Dec 13 15:44:21 2024 GMT
Subject: CN=E6FB96F4AF89749A40D87A592677CE775F240058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0e:d5:3f:b4:11:9b:6c:b1:47:80:87:c7:77:
1f:db:0a:11:38:b5:60:c5:91:40:d3:35:78:17:21:
07:77:05:18:9d:ea:67:e7:c5:ab:6c:26:b5:02:9e:
03:fb:9f:c8:31:13:b0:41:57:f8:c2:d8:08:cb:0c:
2d:6a:e1:7c:d6:f3:2d:3f:66:a9:e8:4b:95:30:d1:
5a:9a:11:e7:de:4c:fc:6b:d2:e9:39:4d:4f:2c:2e:
38:c9:69:49:2a:ab:44:ec:0a:f8:00:fa:f9:0d:08:
77:94:c6:75:3d:ba:33:e0:1f:4d:d9:f2:3f:9d:d2:
d6:28:2a:c5:fc:fd:b4:64:8f:35:97:78:9c:7e:1d:
74:b5:07:85:fe:ef:27:74:db:e8:c9:0b:9d:77:a1:
85:af:57:50:05:78:78:97:35:ab:cb:0a:9a:9f:ab:
0e:5a:a1:8f:fc:0d:5c:8c:ad:a2:1d:c2:19:61:61:
f2:4f:13:42:91:95:ca:0e:7c:13:f4:b1:dd:bf:58:
97:bf:3e:9e:e2:e8:f6:57:b1:20:e6:e8:c9:ab:8f:
fb:5d:32:f0:7b:04:8e:57:52:16:44:f5:b8:7c:f6:
95:34:69:42:00:ea:6c:48:6e:23:4a:e5:d3:a1:61:
8b:8a:49:95:94:1a:31:a1:8e:4e:2c:2f:bc:d2:70:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FB:96:F4:AF:89:74:9A:40:D8:7A:59:26:77:CE:77:5F:24:00:58
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201818.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2010::/44
2a06:a005:20f0::/44
Signature Algorithm: sha256WithRSAEncryption
c9:7c:fe:24:a8:d0:07:e1:bc:6f:86:f9:fb:da:4b:02:d2:f1:
1e:65:96:9a:12:ed:28:42:88:29:22:e8:61:23:74:8c:7c:c8:
df:6e:f3:c5:52:fa:25:b8:85:1c:f0:c1:a9:05:4c:fd:5b:aa:
b4:da:99:55:a2:f3:5b:4b:b5:1d:b8:56:c4:2e:3e:a5:6a:8d:
3f:70:62:91:c3:3d:98:fe:ab:05:c2:3d:62:45:d4:8a:94:ff:
e2:36:b7:b9:ab:62:73:88:e0:2b:88:63:05:88:5c:9b:63:0f:
a2:80:bd:c6:9e:37:4c:d6:e3:97:dd:26:ad:5d:48:cb:c0:72:
c1:f1:2e:4b:4d:ba:b0:98:a3:71:d0:13:79:69:8f:3c:59:85:
49:2a:ef:60:fd:5b:16:5e:27:f9:5b:ae:d8:19:fd:9a:a0:11:
c5:9b:40:b6:6a:bf:53:39:5d:ec:87:d9:a3:03:5e:0d:d3:e6:
1c:ed:fd:43:a5:5a:39:ff:e3:9a:b4:02:19:c5:36:9f:83:ce:
20:25:57:ca:48:85:62:19:e7:7b:79:25:43:92:47:0d:b1:14:
77:78:71:03:b0:57:97:f1:8e:df:f0:3a:17:9f:e4:c5:ae:b6:
9f:01:9e:2c:b2:20:54:19:79:8a:84:c4:cd:dd:89:24:ce:ec:
36:7f:b5:01
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUJOpJJ1od79FXHbKReVjjZwz9jQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMTUxNTM5MjFaFw0yNDEyMTMxNTQ0MjFaMDMxMTAvBgNV
BAMTKEU2RkI5NkY0QUY4OTc0OUE0MEQ4N0E1OTI2NzdDRTc3NUYyNDAwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDtU/tBGbbLFHgIfHdx/bChE4
tWDFkUDTNXgXIQd3BRid6mfnxatsJrUCngP7n8gxE7BBV/jC2AjLDC1q4XzW8y0/
ZqnoS5Uw0VqaEefeTPxr0uk5TU8sLjjJaUkqq0TsCvgA+vkNCHeUxnU9ujPgH03Z
8j+d0tYoKsX8/bRkjzWXeJx+HXS1B4X+7yd02+jJC513oYWvV1AFeHiXNavLCpqf
qw5aoY/8DVyMraIdwhlhYfJPE0KRlcoOfBP0sd2/WJe/Pp7i6PZXsSDm6Mmrj/td
MvB7BI5XUhZE9bh89pU0aUIA6mxIbiNK5dOhYYuKSZWUGjGhjk4sL7zScD7/AgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQU5vuW9K+JdJpA2HpZJnfOd18kAFgwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAxODE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcEKgagBSAQAwcEKgagBSDwMA0GCSqGSIb3DQEBCwUA
A4IBAQDJfP4kqNAH4bxvhvn72ksC0vEeZZaaEu0oQogpIuhhI3SMfMjfbvPFUvol
uIUc8MGpBUz9W6q02plVovNbS7UduFbELj6lao0/cGKRwz2Y/qsFwj1iRdSKlP/i
Nre5q2JziOAriGMFiFybYw+igL3GnjdM1uOX3SatXUjLwHLB8S5LTbqwmKNx0BN5
aY88WYVJKu9g/VsWXif5W67YGf2aoBHFm0C2ar9TOV3sh9mjA14N0+Yc7f1DpVo5
/+OatAIZxTafg84gJVfKSIViGed7eSVDkkcNsRR3eHEDsFeX8Y7f8DoXn+TFrraf
AZ4ssiBUGXmKhMTN3Ykkzuw2f7UB
-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org