Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203199.roa
File: AS203199.roa (raw, json)
Hash identifier: iPyDV8l5jTZSI06bH7pyq9V+TH8tJ0ePfGvq+/KxB5Q=
Subject key identifier: BC:BC:8F:B1:36:85:30:58:DE:12:57:87:70:7B:AF:1C:EC:60:6A:05
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 43225DA8888C1557F25E6AE89659873833C76289
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203199.roa
Signing time: Wed 01 Jan 2025 12:40:12 +0000
ROA not before: Wed 01 Jan 2025 12:35:12 +0000
ROA not after: Wed 31 Dec 2025 12:40:12 +0000
asID: 203199
IP address blocks: 2a06:a005:19d0::/44 maxlen: 48
2a06:a005:2d90::/44 maxlen: 48
2a06:a005:2da0::/44 maxlen: 48
2a06:a005:2db0::/44 maxlen: 48
2a06:a005:2dc0::/44 maxlen: 48
2a06:a005:2dd0::/44 maxlen: 48
2a06:a005:2de0::/44 maxlen: 48
2a06:a005:2df0::/44 maxlen: 48
2a06:a005:2e00::/44 maxlen: 48
2a06:a005:2e10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:22:5d:a8:88:8c:15:57:f2:5e:6a:e8:96:59:87:38:33:c7:62:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 1 12:35:12 2025 GMT
Not After : Dec 31 12:40:12 2025 GMT
Subject: CN=BCBC8FB136853058DE125787707BAF1CEC606A05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:d5:8c:76:91:dd:69:5d:3b:bb:ef:98:37:
12:11:ea:77:fb:84:a2:e1:ae:44:b9:ef:79:2f:8a:
04:1c:a5:24:d6:36:66:81:12:9e:9a:f1:fa:3b:39:
0a:0c:e4:6f:c9:b6:b3:ed:10:bc:4e:95:f8:fc:df:
96:e2:c4:2d:74:fe:47:a2:28:0f:b2:a8:d2:08:bc:
ba:09:f2:7a:16:cf:f9:1f:76:31:cb:eb:78:57:d1:
3e:ca:11:cf:c8:a3:e0:5e:f6:59:b3:09:35:8b:3f:
d0:f4:2d:fb:d5:28:08:a9:85:3e:8d:7e:15:cc:16:
69:54:b0:1e:36:77:33:d6:7a:ce:30:b6:2b:20:bb:
1b:c4:36:f9:fe:4d:dd:02:e2:9c:d5:bf:c5:33:14:
8b:2d:db:f1:c3:37:65:7c:12:3c:df:d4:28:bb:48:
a9:60:03:bb:ea:67:f4:30:23:49:6e:6f:d5:bc:5a:
00:1d:59:2c:66:1d:ea:78:d2:b1:99:dc:55:31:94:
ab:32:1d:c7:70:4e:f8:65:2d:e0:53:79:5e:04:9d:
af:3d:03:19:32:68:d0:5b:06:83:b3:d9:2a:f9:c8:
80:c0:fe:b0:a8:cd:94:f7:9d:0d:60:bc:87:3d:ee:
67:28:59:8d:a0:6f:79:3d:ed:e9:75:65:5b:bb:82:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BC:8F:B1:36:85:30:58:DE:12:57:87:70:7B:AF:1C:EC:60:6A:05
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19d0::/44
2a06:a005:2d90::-2a06:a005:2e1f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
70:17:00:98:1a:4a:2d:4e:4d:5c:56:ae:0a:de:b3:b3:3c:7f:
9d:1e:58:5a:0f:35:f8:a4:07:14:a0:20:c8:d4:e4:b0:91:89:
59:ca:c8:2e:7c:36:55:5b:14:54:c0:ce:2f:c3:86:14:6b:a3:
ad:1a:3d:c7:30:d7:0b:49:f1:0d:21:66:4a:ec:bb:3b:1f:e0:
c0:00:4c:0a:1a:d6:9b:56:33:fd:4b:05:10:b5:37:a1:2e:dd:
d2:1e:d3:82:4e:62:24:c4:de:30:0a:d5:48:d4:d7:63:3a:85:
b3:ec:4e:67:9a:76:a6:42:11:e2:07:f8:e9:6a:ba:bb:26:75:
a9:9f:4f:b8:7e:78:af:36:7d:82:c8:f4:f4:0b:91:47:9f:ca:
40:07:7c:09:6d:77:cb:ac:44:a9:90:85:36:8e:39:d6:f5:be:
43:e6:a1:6c:9c:7c:13:47:12:17:1b:2a:40:27:59:cc:92:95:
60:f0:46:b4:66:2e:27:20:ae:ba:e2:c6:13:86:39:a9:a9:7a:
02:43:2c:79:f1:6d:63:83:87:4c:b3:19:0d:5f:06:21:98:38:
ff:73:44:60:4f:b4:ae:16:30:8c:93:8a:c1:04:11:12:8a:62:
ee:7d:8b:e3:d2:76:d7:29:de:17:3d:7e:7b:40:3b:07:e2:95:
34:81:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:22 2025 by rpki-client