Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203597.roa
File: AS203597.roa (raw, json)
Hash identifier: 39Ql6lvfrWMt76tWgziUJ6RQ8vVcvoALzsRdYAbnUZ0=
Subject key identifier: CD:8C:E1:1B:EE:02:36:F6:5F:23:C7:2C:94:B6:79:14:97:76:3D:64
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0DEC3E6D04452AC3C561ED115C71C9BD71C6BE37
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203597.roa
Signing time: Tue 05 Nov 2024 03:40:07 +0000
ROA not before: Tue 05 Nov 2024 03:35:07 +0000
ROA not after: Tue 04 Nov 2025 03:40:07 +0000
asID: 203597
IP address blocks: 2a06:a005:1560::/44 maxlen: 48
2a06:a005:1570::/44 maxlen: 48
2a06:a005:1580::/44 maxlen: 48
2a06:a005:1590::/44 maxlen: 48
2a06:a005:15a0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ec:3e:6d:04:45:2a:c3:c5:61:ed:11:5c:71:c9:bd:71:c6:be:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:07 2024 GMT
Not After : Nov 4 03:40:07 2025 GMT
Subject: CN=CD8CE11BEE0236F65F23C72C94B6791497763D64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:da:66:96:1c:02:d2:d3:78:6e:f4:c2:62:
84:fe:93:06:52:bd:c1:16:aa:b1:ab:69:b8:a1:b0:
ed:99:4f:9e:84:cb:c2:aa:19:69:8d:3e:df:bc:fc:
ae:d9:2e:6c:bb:e9:b6:ad:da:a4:41:a0:cc:fb:41:
03:7e:8a:12:e4:b0:c1:be:5f:1a:10:13:14:ce:88:
4f:36:02:8f:69:fb:22:f1:13:91:05:4c:4a:f7:5b:
a2:0c:e2:f4:d1:bb:d5:22:ae:19:e6:48:d7:a9:a8:
61:0d:55:a6:14:35:f6:47:1d:c2:5f:64:39:2c:d6:
2c:b9:5e:5e:83:1d:bc:31:f4:58:31:2e:9b:ca:8c:
70:6f:0c:91:96:da:42:4f:af:6c:f0:9c:e2:c3:e4:
52:47:7e:9b:50:cc:c5:b6:25:e5:e1:63:93:c9:09:
9d:65:0e:60:bb:30:fc:8e:9f:c7:f2:5a:95:1b:83:
16:8b:52:5d:bd:39:d6:86:e3:da:80:32:48:ff:d0:
31:d7:51:e2:5b:4a:bc:55:82:90:e6:79:49:84:e5:
e4:d6:68:28:b7:99:2b:7b:f1:f1:eb:98:d5:32:48:
62:6f:b6:0d:c7:52:6b:9f:bc:e3:f5:ae:c7:21:db:
52:01:aa:43:23:7c:b5:af:ce:5a:22:d1:48:9b:5e:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8C:E1:1B:EE:02:36:F6:5F:23:C7:2C:94:B6:79:14:97:76:3D:64
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203597.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1560::-2a06:a005:15af:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a6:4e:43:5a:f4:4e:8f:34:b5:a3:bc:75:31:c1:ab:da:90:8c:
eb:d1:62:03:c9:16:51:32:74:5d:3b:f6:cc:6f:38:71:c6:d2:
20:66:79:c9:9d:7f:c6:ef:23:fd:69:e8:3c:86:3e:65:3c:f6:
15:20:32:ae:92:53:b2:62:af:54:c1:d0:ff:ad:f7:16:a1:0c:
ab:08:3f:78:a8:a1:0b:be:c1:21:de:52:7d:41:2f:72:69:9f:
04:49:01:55:d6:ec:f9:c4:79:7e:a9:6c:5b:81:9a:53:5e:64:
fe:1e:ec:69:7e:f4:9f:44:17:97:7f:75:e6:ec:df:f0:a3:36:
b1:78:63:a9:ff:54:16:85:a6:a2:b4:76:76:15:61:b2:0a:66:
63:c3:4a:8a:33:1b:16:24:ed:9c:a9:17:de:33:40:e0:7e:84:
3e:92:ca:f4:ed:ad:63:be:c7:8c:f5:05:ff:1c:c0:65:ff:36:
92:22:1f:33:ea:fc:cb:7c:be:4a:ad:98:eb:d4:b4:d2:20:d3:
25:24:c8:37:28:ab:c6:b7:82:fd:28:6c:6c:74:d6:e1:fe:fa:
36:e3:d8:9d:57:89:75:2e:83:7a:c1:16:37:c6:4b:e7:b9:b9:
12:74:aa:7c:64:86:e5:69:50:26:2c:4d:0a:30:07:64:c3:21:
f4:78:8f:5d
-----BEGIN CERTIFICATE-----
MIIE8zCCA9ugAwIBAgIUDew+bQRFKsPFYe0RXHHJvXHGvjcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDdaFw0yNTExMDQwMzQwMDdaMDMxMTAvBgNV
BAMTKENEOENFMTFCRUUwMjM2RjY1RjIzQzcyQzk0QjY3OTE0OTc3NjNENjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEz9pmlhwC0tN4bvTCYoT+kwZS
vcEWqrGrabihsO2ZT56Ey8KqGWmNPt+8/K7ZLmy76bat2qRBoMz7QQN+ihLksMG+
XxoQExTOiE82Ao9p+yLxE5EFTEr3W6IM4vTRu9UirhnmSNepqGENVaYUNfZHHcJf
ZDks1iy5Xl6DHbwx9FgxLpvKjHBvDJGW2kJPr2zwnOLD5FJHfptQzMW2JeXhY5PJ
CZ1lDmC7MPyOn8fyWpUbgxaLUl29OdaG49qAMkj/0DHXUeJbSrxVgpDmeUmE5eTW
aCi3mSt78fHrmNUySGJvtg3HUmufvOP1rsch21IBqkMjfLWvzloi0UibXmsrAgMB
AAGjggH9MIIB+TAdBgNVHQ4EFgQUzYzhG+4CNvZfI8cslLZ5FJd2PWQwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjAzNTk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEH
AQH/BB4wHDAaBAIAAjAUMBIDBwUqBqAFFWADBwQqBqAFFaAwDQYJKoZIhvcNAQEL
BQADggEBAKZOQ1r0To80taO8dTHBq9qQjOvRYgPJFlEydF079sxvOHHG0iBmecmd
f8bvI/1p6DyGPmU89hUgMq6SU7Jir1TB0P+t9xahDKsIP3iooQu+wSHeUn1BL3Jp
nwRJAVXW7PnEeX6pbFuBmlNeZP4e7Gl+9J9EF5d/debs3/CjNrF4Y6n/VBaFpqK0
dnYVYbIKZmPDSoozGxYk7ZypF94zQOB+hD6SyvTtrWO+x4z1Bf8cwGX/NpIiHzPq
/Mt8vkqtmOvUtNIg0yUkyDcoq8a3gv0obGx01uH++jbj2J1XiXUug3rBFjfGS+e5
uRJ0qnxkhuVpUCYsTQowB2TDIfR4j10=
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:15 2025 by rpki-client