Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203199.roa
File: AS203199.roa (raw, json)
Hash identifier: WafXONynUX3LMoefuZvH7t2BE4I+rmpy2Y0C+98CS6g=
Subject key identifier: 4F:BE:3B:29:C2:2F:C9:25:96:B0:C3:9E:60:15:C9:86:85:53:C9:3C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 543E600ECD23E4A396A37A16A5F48F937A5D04BE
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203199.roa
Signing time: Wed 31 Jan 2024 11:44:24 +0000
ROA not before: Wed 31 Jan 2024 11:39:24 +0000
ROA not after: Wed 29 Jan 2025 11:44:24 +0000
asID: 203199
IP address blocks: 2a06:a005:19d0::/44 maxlen: 48
2a06:a005:2d90::/44 maxlen: 48
2a06:a005:2da0::/44 maxlen: 48
2a06:a005:2db0::/44 maxlen: 48
2a06:a005:2dc0::/44 maxlen: 48
2a06:a005:2dd0::/44 maxlen: 48
2a06:a005:2de0::/44 maxlen: 48
2a06:a005:2df0::/44 maxlen: 48
2a06:a005:2e00::/44 maxlen: 48
2a06:a005:2e10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:3e:60:0e:cd:23:e4:a3:96:a3:7a:16:a5:f4:8f:93:7a:5d:04:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 31 11:39:24 2024 GMT
Not After : Jan 29 11:44:24 2025 GMT
Subject: CN=4FBE3B29C22FC92596B0C39E6015C9868553C93C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:63:80:80:9e:4b:0d:d4:d4:b0:d2:e4:dd:
37:a2:1d:9f:e8:7c:f9:02:16:1d:1f:3f:86:71:3f:
80:1c:47:c7:61:d1:12:5e:1d:92:33:71:22:46:6c:
69:58:9b:5b:bc:43:31:e4:d9:4b:e6:a7:41:3b:10:
fa:a5:bb:9d:bb:af:b2:52:82:0f:ad:9b:87:a0:49:
44:0e:fe:50:c4:c5:4f:c6:63:a8:16:ad:c8:1a:38:
e4:b2:2a:af:a4:10:fc:19:58:fb:a5:30:7b:da:3e:
5d:9c:c7:98:09:d5:f9:73:51:09:d1:9f:28:f9:47:
00:4f:e1:a1:cc:e6:73:86:39:a3:bf:81:8e:66:ee:
3d:3c:b7:77:3b:07:13:4c:d1:00:fb:39:a3:45:9d:
e6:72:6e:cc:fb:55:8f:52:99:c1:8c:ff:bf:07:21:
a9:ab:e0:15:52:d5:c9:27:fc:5f:5d:fe:89:6a:09:
40:2e:f6:fe:7f:29:56:c0:bf:92:69:48:00:da:78:
57:e5:ec:27:76:b9:e9:5f:8d:e7:94:f0:70:ba:00:
d1:b1:1a:8c:02:5c:bd:1d:81:98:ee:51:7d:74:aa:
47:28:ce:42:f7:ab:44:bf:b7:c3:90:a6:47:82:ca:
7b:ed:dd:8d:9d:16:05:0a:51:ed:37:be:ce:fd:84:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:3B:29:C2:2F:C9:25:96:B0:C3:9E:60:15:C9:86:85:53:C9:3C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19d0::/44
2a06:a005:2d90::-2a06:a005:2e1f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
59:92:0a:40:27:80:38:9d:8b:f5:c5:97:52:3c:07:53:4f:3b:
44:ab:3b:59:73:80:63:c5:aa:9d:a2:e8:c9:fe:05:01:de:9b:
88:41:06:2c:47:93:02:3f:b0:5a:a4:c7:26:27:26:c0:4e:41:
eb:ca:5f:8b:62:64:3b:3d:7e:fd:64:59:b6:54:36:5a:0b:03:
90:2b:bd:50:8d:fc:93:67:54:d9:18:6d:c2:58:1a:66:17:0b:
c5:dd:82:24:ef:f5:a3:de:72:59:a9:85:de:d5:ec:96:52:93:
e4:ab:10:4a:3b:1f:8b:78:99:c2:1f:3a:ef:0d:69:5f:ca:59:
4d:0b:e5:14:c3:f0:2c:23:e9:ba:09:d1:ed:aa:5b:8d:9a:33:
2d:e6:c1:7e:f9:93:68:09:21:5f:5a:31:d9:2f:16:f5:83:f5:
7b:41:69:d2:53:84:fc:7d:62:1a:aa:3d:bd:06:21:7b:7c:03:
a7:7e:ee:54:42:d9:0d:0f:47:5b:5a:fa:49:b7:13:72:46:2a:
c1:ce:87:1d:22:16:c9:07:82:3e:68:24:c8:fc:50:1d:36:ea:
04:14:7e:c0:65:9a:1e:a7:e0:0b:31:b1:87:42:5f:e0:2e:94:
31:df:c4:cf:c5:33:c3:4f:82:76:3a:e5:06:1f:94:f8:0c:22:
2c:9f:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org