Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203069.roa
File: AS203069.roa (raw, json)
Hash identifier: HUQVOUIPdxPimBqVnQE//Y7Y6FvEZ4dUd6o3xZqCQn4=
Subject key identifier: C0:A3:33:B6:4A:80:45:77:C5:57:53:E6:FC:02:5C:33:B5:C0:5E:A7
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 087961A6FAA4B27F06B9C1E670B37413C568985E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203069.roa
Signing time: Sat 16 Nov 2024 06:40:12 +0000
ROA not before: Sat 16 Nov 2024 06:35:12 +0000
ROA not after: Sat 15 Nov 2025 06:40:12 +0000
asID: 203069
IP address blocks: 2a06:a005:488::/46 maxlen: 48
2a06:a005:1af0::/44 maxlen: 48
2a06:a005:1b00::/44 maxlen: 48
2a06:a005:1b10::/44 maxlen: 48
2a06:a005:1b20::/44 maxlen: 48
2a06:a005:1b70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:79:61:a6:fa:a4:b2:7f:06:b9:c1:e6:70:b3:74:13:c5:68:98:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 16 06:35:12 2024 GMT
Not After : Nov 15 06:40:12 2025 GMT
Subject: CN=C0A333B64A804577C55753E6FC025C33B5C05EA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:c4:bb:fe:40:6d:54:55:cc:ba:8a:3a:af:
55:ef:9a:86:2b:94:04:67:f7:a4:3c:ea:f3:a8:37:
97:54:b8:04:0f:fa:89:d9:f9:3e:32:6d:cb:64:ef:
09:b4:64:bd:27:ab:c9:42:d9:8a:e0:5b:b7:a8:cd:
73:89:ea:91:6b:c5:9a:d4:1b:81:f3:90:eb:6e:fd:
7e:89:7b:35:90:84:cb:07:fa:27:cb:15:d4:51:a0:
27:52:76:0c:2a:12:ef:35:28:5a:48:8c:e4:51:8b:
e4:a7:27:9d:6c:31:1c:bd:cd:41:f6:31:35:c4:4c:
28:aa:99:8c:d0:4f:d1:5a:2d:a9:b6:11:c7:b9:b3:
b2:79:e3:48:e9:3c:ad:e9:06:af:31:26:74:07:04:
57:23:60:9f:f6:fb:73:09:c0:0e:e2:f4:17:7d:c9:
45:66:cf:ee:a7:be:a2:42:5d:1e:dc:32:2a:9c:80:
47:b9:78:64:8c:a2:5b:da:68:db:d5:bd:63:a7:89:
28:cd:d9:53:20:eb:83:92:68:0a:5b:81:61:be:b4:
9e:18:7c:7a:ee:64:cc:6f:e1:f4:63:80:7c:2b:d7:
f3:49:09:a6:97:d7:53:23:dd:32:01:17:72:e1:81:
35:fd:9f:8d:0d:90:00:e9:40:c5:a8:14:df:9c:0c:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A3:33:B6:4A:80:45:77:C5:57:53:E6:FC:02:5C:33:B5:C0:5E:A7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:488::/46
2a06:a005:1af0::-2a06:a005:1b2f:ffff:ffff:ffff:ffff:ffff
2a06:a005:1b70::/44
Signature Algorithm: sha256WithRSAEncryption
ac:cd:d7:71:c0:4c:74:c2:f4:67:f4:ea:8e:c8:7c:47:08:6a:
7c:b4:2a:17:9b:5b:66:99:3d:9d:e9:84:61:fe:85:6a:18:df:
7b:b0:9d:b4:a3:d0:8f:74:77:59:25:77:b0:94:47:cb:0a:3d:
ad:ba:54:a9:f5:9e:04:ed:68:fa:a4:33:ec:90:1b:40:75:b8:
97:2d:e2:1a:62:4a:bf:13:a9:71:c1:7e:c4:7b:40:3b:2f:90:
34:86:54:84:24:dd:26:48:4c:36:c6:c2:9d:24:56:35:af:08:
e2:01:12:92:72:e7:6a:f9:30:f3:39:dd:7b:06:4a:16:6a:b2:
ba:9b:ce:fc:b5:77:05:68:28:be:c4:fd:fc:a5:0d:13:b2:26:
6e:99:fe:58:b6:f8:d3:1e:56:7b:94:97:e6:97:7b:77:de:fd:
1c:8d:91:2a:18:5c:92:f6:d4:d7:37:9b:27:8c:04:60:92:12:
bd:55:44:e4:53:46:97:38:02:65:19:41:93:39:7e:34:39:92:
6d:a1:91:2d:29:b6:99:86:f7:52:b6:69:e0:b1:3f:97:90:b3:
de:31:e7:b3:9e:4b:e0:21:c7:05:ee:6b:8e:97:50:fa:96:4d:
2e:cd:0e:31:7f:62:9e:6b:fc:a0:8f:ec:7a:ae:0b:45:ea:32:
8f:e3:c7:f6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUCHlhpvqksn8GucHmcLN0E8VomF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMTYwNjM1MTJaFw0yNTExMTUwNjQwMTJaMDMxMTAvBgNV
BAMTKEMwQTMzM0I2NEE4MDQ1NzdDNTU3NTNFNkZDMDI1QzMzQjVDMDVFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqYsS7/kBtVFXMuoo6r1XvmoYr
lARn96Q86vOoN5dUuAQP+onZ+T4ybctk7wm0ZL0nq8lC2YrgW7eozXOJ6pFrxZrU
G4HzkOtu/X6JezWQhMsH+ifLFdRRoCdSdgwqEu81KFpIjORRi+SnJ51sMRy9zUH2
MTXETCiqmYzQT9FaLam2Ece5s7J540jpPK3pBq8xJnQHBFcjYJ/2+3MJwA7i9Bd9
yUVmz+6nvqJCXR7cMiqcgEe5eGSMolvaaNvVvWOniSjN2VMg64OSaApbgWG+tJ4Y
fHruZMxv4fRjgHwr1/NJCaaX11Mj3TIBF3LhgTX9n40NkADpQMWoFN+cDA2/AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUwKMztkqARXfFV1Pm/AJcM7XAXqcwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAzMDY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEH
AQH/BDAwLjAsBAIAAjAmAwcCKgagBQSIMBIDBwQqBqAFGvADBwQqBqAFGyADBwQq
BqAFG3AwDQYJKoZIhvcNAQELBQADggEBAKzN13HATHTC9Gf06o7IfEcIany0Kheb
W2aZPZ3phGH+hWoY33uwnbSj0I90d1kld7CUR8sKPa26VKn1ngTtaPqkM+yQG0B1
uJct4hpiSr8TqXHBfsR7QDsvkDSGVIQk3SZITDbGwp0kVjWvCOIBEpJy52r5MPM5
3XsGShZqsrqbzvy1dwVoKL7E/fylDROyJm6Z/li2+NMeVnuUl+aXe3fe/RyNkSoY
XJL21Nc3myeMBGCSEr1VRORTRpc4AmUZQZM5fjQ5km2hkS0ptpmG91K2aeCxP5eQ
s94x57OeS+AhxwXua46XUPqWTS7NDjF/Yp5r/KCP7HquC0XqMo/jx/Y=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:54 2024 by rpki-client on console-ams.rpki-client.org