Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202776.roa
File: AS202776.roa (raw, json)
Hash identifier: 4G457lcca8NRMLC/8RD2MVzLor/jH3520I/TnyzbTDQ=
Subject key identifier: 50:37:03:17:60:6E:67:A4:65:A1:BA:4D:F0:EE:61:6A:0F:50:D3:AD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 4E77CC18C9348847B530AD4AAC6FF2688E0890E2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202776.roa
Signing time: Wed 14 Feb 2024 13:44:24 +0000
ROA not before: Wed 14 Feb 2024 13:39:24 +0000
ROA not after: Wed 12 Feb 2025 13:44:24 +0000
asID: 202776
IP address blocks: 2a06:a005:2b00::/44 maxlen: 48
2a06:a005:2b90::/44 maxlen: 48
2a06:a005:2bf0::/44 maxlen: 48
2a06:a005:2d00::/44 maxlen: 48
2a06:a005:2d10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:77:cc:18:c9:34:88:47:b5:30:ad:4a:ac:6f:f2:68:8e:08:90:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 14 13:39:24 2024 GMT
Not After : Feb 12 13:44:24 2025 GMT
Subject: CN=50370317606E67A465A1BA4DF0EE616A0F50D3AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:40:ba:a0:8d:13:75:5e:0e:79:0e:bf:0f:
51:71:a5:9f:d8:77:32:16:2b:ca:fa:7a:53:fe:13:
b5:48:b8:4f:1a:f9:3a:e2:27:f0:0f:b7:e6:ae:c5:
a3:d2:0c:f8:d9:dd:75:b8:70:92:c7:82:a4:04:08:
92:20:d3:6a:3b:85:eb:c8:8b:90:2b:40:d4:2d:83:
bf:24:4e:2a:f2:11:ec:e2:88:aa:4d:b3:65:21:73:
01:e4:67:c6:2a:78:ee:a8:c3:8a:7c:9c:68:b8:a0:
17:bb:5c:7f:8e:f5:13:ff:e8:ad:a0:f8:72:c7:eb:
61:3e:8a:2b:81:0a:cc:3d:0e:10:db:26:a8:aa:e7:
dd:51:f6:48:13:7f:3c:ae:a7:c0:b8:17:9d:36:af:
f3:f3:60:91:02:c5:4e:2a:c2:8c:7d:ec:22:71:51:
8e:bc:61:3e:5a:d2:76:fc:66:96:06:00:56:6f:0b:
19:3f:68:a3:95:53:26:4d:7f:6c:19:37:ea:9b:74:
3d:9c:3b:5e:a3:a7:8f:0c:cf:99:97:aa:b9:51:38:
52:69:e8:56:44:a9:49:ca:3d:0a:34:ca:2e:13:ed:
c4:48:61:fe:c5:2b:b4:a7:12:02:26:2c:e7:89:5d:
3f:a9:29:cd:c4:a1:4f:b7:23:bf:b6:02:ac:c8:3b:
00:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:37:03:17:60:6E:67:A4:65:A1:BA:4D:F0:EE:61:6A:0F:50:D3:AD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2b00::/44
2a06:a005:2b90::/44
2a06:a005:2bf0::/44
2a06:a005:2d00::/43
Signature Algorithm: sha256WithRSAEncryption
12:c7:7a:58:0d:9b:cb:34:87:69:71:39:e2:0c:3b:a3:c1:cc:
a5:f2:ff:74:47:e0:bd:fc:9e:f7:31:75:7d:4e:01:01:20:75:
7e:cc:be:90:17:db:75:09:47:3e:53:22:af:28:17:5f:90:f6:
35:60:3d:d1:0e:60:a0:99:36:19:e1:fa:22:53:4b:b1:46:27:
3c:cb:5d:62:5c:61:9c:ff:07:cc:a6:9a:c6:f9:0c:3d:f4:59:
c8:f5:6d:6b:41:c8:17:20:f4:c1:73:5a:e3:9e:c6:a2:da:2b:
59:e2:21:37:62:77:cb:69:8b:4d:01:7a:8a:61:8a:25:66:5c:
2a:cf:67:30:06:af:34:79:46:40:38:a0:c9:1a:9a:14:70:a2:
12:71:ab:4e:2c:09:46:75:bc:7c:34:23:77:92:5b:a9:66:4b:
dc:7b:0e:e6:7b:0f:ca:12:ec:e2:00:22:14:41:b3:a4:5f:40:
ad:50:e8:b0:c0:e6:d5:fa:02:01:ed:6c:a4:b1:2b:0e:67:b3:
1f:a1:c9:4d:66:e4:bf:a0:cd:50:09:38:00:cb:67:b2:78:a7:
55:a3:6c:f4:8e:e8:08:0f:3a:8b:bc:a6:37:a2:e0:98:1d:22:
cf:87:41:d9:ad:e2:c8:f0:71:a4:e7:dc:6c:71:c0:a0:5f:cc:
30:43:47:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org