Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202199.roa
File: AS202199.roa (raw, json)
Hash identifier: ysJW9mOHweKqaXq9Atz8BtT6VpmYFkDNq2jLCostSsU=
Subject key identifier: 63:03:21:27:AF:65:DE:42:8D:CF:B4:C5:91:4A:D4:D6:51:DE:72:C0
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7E0F08F2CA44851BE266873B083266CC9A2313AA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202199.roa
Signing time: Tue 05 Dec 2023 02:44:15 +0000
ROA not before: Tue 05 Dec 2023 02:39:15 +0000
ROA not after: Tue 03 Dec 2024 02:44:15 +0000
asID: 202199
IP address blocks: 2a06:a005:1161::/48 maxlen: 48
2a06:a005:1505::/48 maxlen: 48
2a06:a005:1640::/44 maxlen: 48
2a06:a005:1c7f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:0f:08:f2:ca:44:85:1b:e2:66:87:3b:08:32:66:cc:9a:23:13:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:15 2023 GMT
Not After : Dec 3 02:44:15 2024 GMT
Subject: CN=63032127AF65DE428DCFB4C5914AD4D651DE72C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b4:e3:0b:b6:ac:ff:55:ab:69:61:b5:e2:45:
f7:a3:50:85:95:ec:2d:db:90:b9:1c:07:70:48:3a:
7c:27:26:54:23:d2:72:85:9b:48:8d:24:32:68:2f:
92:90:ca:da:c8:f6:ff:71:92:c8:e6:95:30:45:ab:
13:06:ce:77:37:e4:a7:e6:c2:57:db:e9:8b:98:33:
ea:78:23:cf:be:87:89:22:50:71:41:72:e8:ec:06:
18:9f:b7:e7:1e:38:cd:41:4c:20:22:e0:e4:ae:6b:
ab:ed:e5:d4:ad:08:97:4c:f2:f3:62:65:e8:1c:49:
0f:51:69:70:fa:d8:2b:ba:40:55:c5:00:57:16:d1:
bb:6c:ad:62:57:e8:4b:d1:bb:33:7d:dd:2b:9b:ea:
0f:6d:c6:f4:2d:26:dc:5c:6b:19:64:c4:16:5b:6a:
5e:83:43:8a:39:ec:85:66:eb:78:42:3c:4b:77:dd:
8c:4f:69:2d:75:8d:cf:75:ae:67:f5:e8:b0:0e:0e:
a2:f6:06:1d:9f:7a:7b:2b:dc:d2:8c:b2:4f:0d:dc:
13:58:78:8a:cc:14:72:9f:45:75:2e:67:09:ff:f4:
7a:53:2d:2e:14:82:79:28:dd:92:13:34:56:1a:03:
ac:c1:77:6f:5b:13:aa:bb:04:b4:f5:01:83:10:b6:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:03:21:27:AF:65:DE:42:8D:CF:B4:C5:91:4A:D4:D6:51:DE:72:C0
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1161::/48
2a06:a005:1505::/48
2a06:a005:1640::/44
2a06:a005:1c7f::/48
Signature Algorithm: sha256WithRSAEncryption
ae:3e:4b:89:85:b3:d8:3b:a9:01:f8:d5:a6:f9:ee:25:94:49:
1a:17:6a:68:d2:7c:ce:54:a1:3b:a7:5b:db:f4:f5:a1:f4:54:
29:58:97:56:59:0d:ac:6c:c4:3c:7f:c7:d3:8a:e5:c0:87:d5:
62:1c:ba:14:2e:e7:93:79:d3:f7:95:52:f5:00:fc:b0:55:26:
20:1e:6c:9d:fe:d4:b1:0c:8c:b2:64:29:73:92:1d:33:25:a7:
14:5a:a7:46:12:ef:13:7a:31:87:af:b3:37:ec:b2:c5:97:93:
00:95:83:dc:4c:fc:d2:62:6b:f9:ea:a2:ec:4d:fe:e8:dd:50:
23:49:62:a8:63:19:04:f7:40:3c:0d:2f:54:f5:35:0f:87:7e:
a9:20:35:05:f7:b8:a7:b8:5c:91:08:2f:b0:6b:44:d8:03:53:
68:61:e9:92:eb:d8:23:b8:9c:f4:ad:6e:cf:e5:0c:cb:56:20:
30:cd:1b:6b:63:83:4e:8b:ea:20:7f:50:ee:9f:05:aa:02:f9:
28:ca:ca:4c:91:eb:2d:83:35:62:30:10:fa:2b:02:39:83:c1:
c1:e5:a4:e1:00:68:d3:7f:ca:cf:21:2c:46:80:fe:d9:fb:43:
ff:f8:da:48:67:f2:6b:f3:1f:70:89:d3:99:e7:2d:54:7d:93:
47:d6:b2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org