Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202400.roa
File: AS202400.roa (raw, json)
Hash identifier: PhL3Q+9mPET4nw0URAZycP8DTqjtYIYtGf7oqHz3gSw=
Subject key identifier: DD:19:0C:D0:FB:89:D4:EB:12:CB:94:C1:A0:6E:1B:D6:59:15:23:3A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7226AFE555F9E7973BA62E56F5BE7BB73BA1ED9D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202400.roa
Signing time: Thu 28 Dec 2023 04:44:21 +0000
ROA not before: Thu 28 Dec 2023 04:39:21 +0000
ROA not after: Thu 26 Dec 2024 04:44:21 +0000
asID: 202400
IP address blocks: 2a06:a005:5a4::/48 maxlen: 48
2a06:a005:15d4::/46 maxlen: 48
2a06:a005:2c40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Apr 2024 00:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:26:af:e5:55:f9:e7:97:3b:a6:2e:56:f5:be:7b:b7:3b:a1:ed:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 28 04:39:21 2023 GMT
Not After : Dec 26 04:44:21 2024 GMT
Subject: CN=DD190CD0FB89D4EB12CB94C1A06E1BD65915233A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:3a:c4:6b:43:0d:2c:0e:c7:9a:f6:19:31:
c6:62:e9:58:07:fd:14:fa:a0:05:3d:6e:be:14:c9:
39:17:36:fb:8e:6c:d9:8c:5a:95:25:3b:2e:6b:fc:
eb:5e:78:96:3a:41:49:17:dc:4c:a7:74:99:27:ac:
fe:09:81:2b:da:36:32:b4:b3:51:69:54:f9:cb:7d:
e9:41:d4:74:a3:c5:2f:09:0a:01:c9:0e:ff:ec:5c:
f1:89:c2:88:d8:61:bb:c9:1e:db:85:1b:62:22:9a:
78:d3:e4:fe:ea:9b:1a:0c:75:c2:99:c4:6e:7c:ce:
52:67:ea:e7:c9:9c:0a:f7:ef:83:99:42:12:5b:17:
d1:ab:b5:0d:72:0e:dd:8d:b0:7d:1d:4f:fa:8a:30:
bc:d0:71:e2:9a:15:dd:a6:01:90:e2:48:a6:76:7b:
ab:84:1f:b8:b2:88:23:29:9b:98:89:40:ad:fb:34:
ba:a2:5c:04:bd:15:fe:a3:cc:b3:f5:d9:70:b1:a8:
84:46:bd:5a:f1:9a:3d:21:06:d7:7c:ff:37:ed:be:
87:1d:72:ff:a0:4a:e2:0f:4f:7e:7d:3a:3d:5a:67:
f6:2e:a9:32:60:ea:42:23:9a:fb:5a:2a:50:9d:f2:
c0:8e:02:05:b7:43:6b:d6:25:6a:6f:29:fa:71:0d:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:19:0C:D0:FB:89:D4:EB:12:CB:94:C1:A0:6E:1B:D6:59:15:23:3A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:5a4::/48
2a06:a005:15d4::/46
2a06:a005:2c40::/44
Signature Algorithm: sha256WithRSAEncryption
bb:fa:95:4a:47:be:e1:04:77:4f:4c:65:67:97:b8:b1:fd:b6:
34:56:b3:2a:cf:d3:d6:1c:ce:4e:4b:dc:ea:61:56:27:66:c5:
6e:b3:91:80:bb:df:39:1d:ec:3b:4a:54:83:20:8f:23:31:07:
d9:4b:5e:18:bf:e3:6a:65:17:77:a3:ca:b8:97:46:ea:7c:c4:
0d:bc:ff:84:31:8c:7e:a9:e2:4a:f7:0d:fa:3e:c3:54:3d:c5:
fa:bc:c0:3e:72:b1:1c:99:5d:e0:8a:a2:9b:f5:b4:83:f4:e5:
aa:88:72:7c:b4:4a:57:f3:fc:34:04:c7:45:b4:f8:9d:da:4e:
78:2c:46:37:bf:ff:a8:70:4f:f7:41:2b:2d:70:21:a3:41:fb:
6a:30:f0:94:2d:41:c8:7d:12:b8:d2:51:25:df:77:b7:57:14:
17:d4:6e:0e:0d:ab:68:b9:c5:78:1c:82:f2:b0:25:72:34:00:
78:58:90:4e:65:0a:d6:0d:b5:8b:d9:e0:7d:46:2a:1c:c0:c6:
4b:51:8b:79:00:4b:68:86:81:78:ae:f8:6b:d9:2f:c5:43:41:
a4:b8:f0:ab:f9:da:e3:9b:2e:3f:13:2f:e0:60:e0:4c:6f:48:
34:90:9e:dc:79:3a:d4:69:c3:08:90:a4:45:86:ad:f1:f5:37:
da:21:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 06:31:04 2024 by rpki-client on console-ams.rpki-client.org