Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201979.roa
File: AS201979.roa (raw, json)
Hash identifier: t4P8RKPw0mvnrWCiGbrlY+pVyGxswk+m+SwcWc2Vtl8=
Subject key identifier: 8F:01:D5:0F:4C:7F:4F:91:C5:C7:82:B4:E3:C1:39:BB:A4:88:53:5F
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4EC2A6C3F3CB3CB018A4DEA537994077BE8B4CA9
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201979.roa
Signing time: Sun 31 Dec 2023 00:44:21 +0000
ROA not before: Sun 31 Dec 2023 00:39:21 +0000
ROA not after: Sun 29 Dec 2024 00:44:21 +0000
asID: 201979
IP address blocks: 2a06:a005:d43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c2:a6:c3:f3:cb:3c:b0:18:a4:de:a5:37:99:40:77:be:8b:4c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 31 00:39:21 2023 GMT
Not After : Dec 29 00:44:21 2024 GMT
Subject: CN=8F01D50F4C7F4F91C5C782B4E3C139BBA488535F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:7f:4e:90:61:a5:2b:3b:a0:57:9b:16:1a:
26:b6:a7:ce:7b:7d:b5:d6:73:a9:84:72:fe:a0:fd:
21:2e:99:c3:94:69:3f:2f:cb:db:97:68:17:f8:99:
25:ae:b9:05:81:4e:dd:1c:0c:c8:6c:ab:c6:f7:ff:
f1:97:c9:0d:6c:f1:74:5c:07:d2:10:96:bb:93:18:
6a:3f:de:ce:dd:a2:35:06:8a:3c:9d:26:3d:a4:27:
fb:95:11:32:f7:fe:2e:8d:1b:4d:f5:62:ab:3f:25:
f0:0a:55:03:1d:2a:3c:7c:ec:32:fa:c3:37:8d:21:
ff:d6:8d:37:8d:f1:c6:e6:0e:b8:91:05:75:7d:b0:
25:3b:73:5b:dd:cf:52:f4:6d:79:b0:bd:3d:2d:1c:
f9:a3:bb:4b:c4:0d:a9:8a:81:cb:3d:88:89:24:e7:
91:68:a5:12:d3:f3:53:15:d0:b3:e8:d2:e9:ca:ca:
85:85:81:b3:cc:e7:a1:e4:58:51:3b:81:5d:4d:7f:
e1:d0:d4:07:27:27:fa:ad:7f:21:62:3d:62:a0:80:
a7:78:6c:64:f3:84:16:e1:09:a8:05:b6:04:e8:41:
7a:af:88:4c:ab:77:ab:42:fd:6c:ac:33:e0:6e:01:
20:34:fe:43:36:7a:1d:a5:90:ba:08:eb:08:b1:f1:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:01:D5:0F:4C:7F:4F:91:C5:C7:82:B4:E3:C1:39:BB:A4:88:53:5F
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d43::/48
Signature Algorithm: sha256WithRSAEncryption
4c:cc:ae:f5:32:b9:33:55:d8:5c:f7:81:9b:28:eb:a2:6e:d1:
1a:b8:24:6b:61:a0:09:1e:dd:79:3e:69:60:d9:f3:0c:c7:7c:
03:b2:e8:cf:e9:90:06:b9:d3:c2:e6:0a:b0:72:fe:bd:4f:0f:
5d:15:53:fb:c9:5a:18:1b:82:a1:74:0d:59:4e:b1:d7:f6:11:
25:f7:20:cf:e5:af:0c:2a:21:4b:7a:3e:eb:aa:f8:bd:d1:79:
5a:ca:ce:ef:36:f9:65:0b:54:cc:10:86:c2:af:7b:7a:23:79:
16:aa:d2:74:9b:c4:71:fc:75:f4:43:40:b6:3d:fa:1c:bb:ed:
6b:89:49:71:de:6e:7b:35:ac:ed:05:94:14:fd:ed:eb:f7:a9:
7e:44:5e:ba:07:b0:0f:d8:6c:89:4f:3a:af:ad:d7:31:a6:7d:
ff:96:54:72:e2:fc:22:2b:51:9a:ed:e4:61:70:24:45:c5:10:
0b:cf:27:38:9c:ae:50:5a:fb:a7:55:b6:71:ed:1d:04:0c:0a:
e4:87:4f:f8:3e:49:3f:2f:f4:3f:e7:59:6f:4f:a0:de:8e:0c:
9c:50:2d:33:b7:0c:47:e0:46:b7:75:bc:c5:ef:29:ef:a5:44:
1b:8d:3a:c2:44:b3:a8:f6:48:b1:f6:54:b9:3f:85:5b:78:50:
be:d8:09:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org