Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202776.roa
File: AS202776.roa (raw, json)
Hash identifier: hEtzBgzmqSUj298DWH9yChmnSmj9WqQPX01V6asuULA=
Subject key identifier: 42:92:E9:0D:4C:CE:77:B4:86:3A:E9:72:D1:7A:AB:67:C9:09:11:15
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 07B0616F5BA64CFAB26A2AD34411A9009909EDE7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202776.roa
Signing time: Fri 13 Dec 2024 02:56:29 +0000
ROA not before: Fri 13 Dec 2024 02:51:29 +0000
ROA not after: Fri 12 Dec 2025 02:56:29 +0000
asID: 202776
IP address blocks: 2a06:a005:2b90::/44 maxlen: 48
2a06:a005:2d10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b0:61:6f:5b:a6:4c:fa:b2:6a:2a:d3:44:11:a9:00:99:09:ed:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 13 02:51:29 2024 GMT
Not After : Dec 12 02:56:29 2025 GMT
Subject: CN=4292E90D4CCE77B4863AE972D17AAB67C9091115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:93:12:a6:91:2f:24:72:fb:43:24:27:e4:d1:
95:fe:0d:e4:8e:f3:67:09:31:3d:9f:10:f9:d1:8e:
59:06:f1:b2:96:34:92:a6:cd:65:22:f9:9d:43:c0:
0a:49:91:c9:e4:81:4b:bc:33:44:c4:95:94:a6:5b:
6b:92:94:63:d7:2d:31:8b:a3:4e:0a:77:09:60:ca:
f2:e7:db:50:8f:03:11:2e:20:f4:3a:f3:c9:6a:4f:
21:a1:85:dd:a6:dd:9d:7d:04:e9:c6:9c:9d:05:06:
2b:bf:bd:44:6d:ad:f6:76:61:a3:2e:8a:92:f5:59:
d7:21:3e:cc:7b:a4:b7:c6:38:e7:5c:04:8f:b8:c8:
29:b8:6e:bd:e6:ff:2f:42:04:2c:6d:f2:af:d1:ec:
e2:f9:a0:61:bd:a7:f8:d4:24:ab:99:a4:e1:aa:61:
ce:ad:ae:23:e3:4b:a1:28:78:6f:88:27:fb:5e:20:
a3:91:a7:de:42:d0:5a:77:b6:7b:64:d6:36:93:d4:
ba:95:c1:11:8c:79:d9:3a:fb:85:3a:80:dd:e1:f7:
1d:12:4c:f1:47:14:52:8a:1d:92:e8:61:da:fe:66:
9c:46:3d:fd:c7:4d:39:f9:42:80:40:77:89:4f:6a:
0a:15:5b:5d:14:99:42:50:ef:54:48:b0:a7:49:4d:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:E9:0D:4C:CE:77:B4:86:3A:E9:72:D1:7A:AB:67:C9:09:11:15
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202776.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2b90::/44
2a06:a005:2d10::/44
Signature Algorithm: sha256WithRSAEncryption
bd:28:19:4d:9b:6d:1c:1f:54:a5:a6:6a:62:6a:6f:89:a2:d4:
2f:31:62:5d:f3:da:4e:ca:de:ef:e6:87:48:62:40:32:74:19:
43:c0:c8:b3:df:d3:15:16:9d:e9:0e:ca:d8:7b:62:68:e9:a9:
52:88:54:6f:8c:f2:8f:fe:00:62:7f:02:3f:5a:6f:ba:16:30:
63:93:cf:4b:00:bb:7a:51:ce:41:00:83:6e:8c:e3:e1:78:75:
6d:fc:b6:1b:06:25:89:8c:a4:75:c2:23:d4:01:4f:3a:90:ad:
d3:b7:d9:98:cc:e7:f2:c6:e8:a2:9c:7d:d4:ef:6a:14:65:08:
cd:78:ad:92:58:c1:23:df:25:58:9f:65:f1:b9:c4:49:28:09:
d9:d5:ee:ad:a8:1f:ec:4a:a4:c3:93:37:01:39:68:5c:bf:7b:
7b:6a:ce:9f:c4:7b:27:be:95:03:b3:1e:0d:bc:16:9e:ca:3f:
22:d0:95:cd:aa:ab:32:80:32:69:26:c5:df:2a:0d:da:f9:a1:
0d:02:91:40:21:c1:f7:a8:8c:5a:df:40:1d:91:e0:ca:80:e6:
b9:46:e5:07:61:a9:a6:0b:39:89:a4:39:33:2d:fd:ca:da:15:
20:31:cf:12:9d:93:26:69:b4:59:c5:91:12:c0:eb:5f:c4:c5:
11:52:fe:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:22 2025 by rpki-client