Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202939.roa
File: AS202939.roa (raw, json)
Hash identifier: jFz4mAGoMrop1sw/AE0KoQHGAJOkgODbcAvRC7QRDnI=
Subject key identifier: 2A:6F:02:BD:18:3F:80:77:F5:8D:C1:0E:05:C0:16:C2:6C:73:4E:42
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0E63679BF67A449E852419012E416D1BC9DC3F95
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202939.roa
Signing time: Tue 05 Nov 2024 03:40:09 +0000
ROA not before: Tue 05 Nov 2024 03:35:09 +0000
ROA not after: Tue 04 Nov 2025 03:40:09 +0000
asID: 202939
IP address blocks: 2a06:a005:1ba0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:63:67:9b:f6:7a:44:9e:85:24:19:01:2e:41:6d:1b:c9:dc:3f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:09 2024 GMT
Not After : Nov 4 03:40:09 2025 GMT
Subject: CN=2A6F02BD183F8077F58DC10E05C016C26C734E42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:96:09:ff:53:55:47:4d:b6:02:af:a1:81:
49:d2:25:60:58:4f:e0:f6:f9:e1:a1:3d:01:73:4b:
df:be:33:24:27:60:33:a8:94:36:9b:bd:ee:06:86:
8f:ea:0f:5e:a5:0b:c2:d5:de:75:ff:a9:f0:5b:e3:
b0:82:27:84:50:c0:0c:a6:56:0a:98:a5:7b:73:e8:
fa:e1:ee:10:d9:dc:04:c8:21:47:ba:b3:91:fa:97:
d0:6a:b4:76:97:12:ab:5b:a0:e3:9a:d0:2e:ab:44:
3c:1f:7b:d6:0e:18:9e:83:23:32:ab:6d:b5:7f:73:
e4:39:25:76:04:a5:4b:80:8c:3c:08:3d:11:e4:bb:
00:be:40:64:db:49:92:08:b8:0e:80:0e:31:52:6b:
4a:ed:86:f2:64:2b:6a:7c:8e:e3:52:5e:e3:5e:eb:
75:49:8a:d5:d2:ba:7d:64:4f:88:72:34:51:90:79:
4d:44:c6:b1:80:58:61:60:17:ce:c3:e4:ca:ef:8d:
81:1d:09:1f:c9:40:20:2a:2b:5f:3d:cd:77:c8:73:
77:7b:bb:ab:db:5e:f4:f5:bf:95:00:50:b8:d9:fc:
b8:c1:b0:af:86:d5:1d:b3:aa:84:17:b2:87:cf:d7:
8c:80:21:fd:52:a6:5b:07:64:66:cc:0e:db:75:58:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6F:02:BD:18:3F:80:77:F5:8D:C1:0E:05:C0:16:C2:6C:73:4E:42
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ba0::/44
Signature Algorithm: sha256WithRSAEncryption
4a:9a:0b:a7:f7:e8:da:ba:15:8e:54:4f:59:65:ec:a3:e1:2a:
c5:88:1b:27:29:d7:01:c4:a9:ae:2a:00:7c:87:13:eb:b8:ce:
14:84:92:df:b1:76:57:e3:28:62:d3:9e:c1:ba:1f:1a:c7:68:
c1:eb:b5:d5:ad:63:e1:f1:69:d7:1c:d0:2c:e7:7e:dd:47:29:
45:95:19:23:76:16:1b:bb:7a:0b:eb:96:6e:7c:22:c6:68:06:
d5:68:05:7c:4c:f6:d6:cf:54:c0:ac:11:61:fa:34:8d:8a:e6:
ae:06:74:21:37:e6:c2:44:89:a9:8c:b4:e0:aa:63:fb:f5:09:
77:b7:88:2f:90:4b:45:84:76:86:78:00:7f:d9:02:95:3d:d9:
3c:a2:c5:b1:f2:73:67:b1:57:b9:3e:6e:10:df:cb:81:fc:c9:
60:47:2e:42:31:71:7b:5c:1e:7d:bb:42:27:af:1e:3c:10:9a:
ee:74:14:e5:19:50:cc:e1:53:2e:df:52:88:0a:71:d0:3f:7e:
7b:5a:eb:07:73:41:d8:b3:fd:b5:6a:5a:64:1d:10:3f:d8:3b:
b2:78:a3:42:7d:04:46:c1:b3:a5:d0:db:4c:dd:4f:7e:90:0b:
78:f3:59:c9:65:d2:3a:fc:ae:63:2d:fb:7a:07:b2:04:e7:66:
6d:37:b4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:22 2024 by rpki-client on console-fra.rpki-client.org