Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201979.roa
File: AS201979.roa (raw, json)
Hash identifier: wyBpvUu7OoZBAlQNRHNjh0EB2Vi3mkIfYfN0eUWCSUc=
Subject key identifier: 8F:CC:D4:2F:1E:49:01:44:91:0C:2E:0A:B6:9D:A1:7B:82:D6:7E:69
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0BEC8BB9C27F54A1F8969D708520E0E940AC0CE3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201979.roa
Signing time: Sun 01 Dec 2024 01:40:12 +0000
ROA not before: Sun 01 Dec 2024 01:35:12 +0000
ROA not after: Sun 30 Nov 2025 01:40:12 +0000
asID: 201979
IP address blocks: 2a06:a005:d43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ec:8b:b9:c2:7f:54:a1:f8:96:9d:70:85:20:e0:e9:40:ac:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 1 01:35:12 2024 GMT
Not After : Nov 30 01:40:12 2025 GMT
Subject: CN=8FCCD42F1E490144910C2E0AB69DA17B82D67E69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:51:2c:bd:ad:2f:7b:e9:8a:69:29:ce:0b:
6a:78:6a:63:ed:0f:13:7e:60:b8:01:63:f5:f1:f2:
5d:20:df:fd:f9:40:d6:c5:c4:2c:6e:b3:a1:0a:60:
f7:7e:a1:78:24:21:35:f1:19:44:4a:28:66:45:6c:
6a:1b:5c:ac:7f:f9:9e:40:eb:01:5a:65:ab:f3:e7:
17:93:04:e4:ad:b3:d1:25:e2:09:4b:ea:ce:2a:2f:
60:69:c2:59:b7:86:af:b9:84:41:59:fb:b2:ea:d1:
f3:ca:ae:c2:9f:34:af:34:36:7b:e2:78:ad:13:64:
30:36:82:c0:c3:78:1c:de:e8:e4:83:1f:35:df:71:
20:21:e5:86:df:fb:c4:8b:40:c2:b6:2d:1b:4a:2a:
03:4e:b9:15:a8:70:d7:b8:6c:e4:68:13:2e:81:db:
f8:4f:d4:12:5f:07:47:b9:09:fd:27:b4:27:0f:16:
28:e4:f7:a6:ad:f2:81:35:68:8e:11:49:e5:e6:21:
e4:e4:77:dc:1f:24:1c:43:06:00:db:2a:ec:9d:52:
4f:08:2b:ee:b9:e2:33:ff:3b:3f:66:e4:7d:4a:74:
cc:6c:c1:31:12:8b:96:b2:72:3e:2b:22:2e:8d:f6:
9b:0d:0d:c7:f7:b4:eb:cd:07:92:c5:32:ee:a7:5c:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CC:D4:2F:1E:49:01:44:91:0C:2E:0A:B6:9D:A1:7B:82:D6:7E:69
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS201979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d43::/48
Signature Algorithm: sha256WithRSAEncryption
7a:88:9f:a2:7e:a0:23:f9:cf:22:90:31:7b:59:1d:02:94:ea:
35:49:83:48:5f:83:74:58:b1:dc:43:76:e6:55:7c:de:5e:0f:
0b:5c:af:a7:f0:0d:7a:d3:ff:50:1b:32:f0:cd:a6:8a:2b:e2:
f2:c5:15:15:bf:11:c0:c3:46:a3:c6:a3:17:3a:1f:d7:6b:d4:
79:1f:00:3a:cc:d3:fc:95:1c:eb:60:57:99:66:92:97:72:03:
8b:92:a7:04:59:f8:68:01:c2:0b:84:5d:3e:b4:98:49:ea:64:
7a:7e:54:eb:8e:94:58:f1:f6:f6:46:b5:c1:67:ee:ae:ee:2f:
c3:9d:7d:51:45:d0:d7:68:0d:4e:0b:db:dc:05:a5:4e:fd:63:
21:70:7a:16:24:c6:d7:f6:fd:85:8a:6c:5e:15:f6:7d:70:8b:
21:8b:bf:e3:1b:c5:25:83:63:3f:88:a9:b6:76:9e:08:d0:ae:
02:ec:aa:09:2e:71:d3:5d:c7:12:dd:42:5f:79:a3:70:2a:8a:
e9:96:58:e7:70:ee:d5:6b:5f:16:3a:2b:ea:15:33:35:db:24:
38:22:2a:af:58:51:9a:7a:8c:21:ee:e5:d8:81:43:7d:0e:7f:
f2:b8:50:6b:86:16:b7:04:38:17:59:58:ed:2b:6d:32:00:a0:
b7:01:39:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:19 2025 by rpki-client