Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204186.roa
File: AS204186.roa (raw, json)
Hash identifier: gpqxAzbF1VvKFsOUpqt44Jc3sxydvwXgBQQLdAWHw80=
Subject key identifier: D3:77:B8:E9:42:1A:62:01:B7:60:6B:37:C7:78:94:95:AB:07:80:2A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 21EE3C262F09CC746BDF299C2AB989CF2EE00543
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204186.roa
Signing time: Tue 05 Dec 2023 02:44:12 +0000
ROA not before: Tue 05 Dec 2023 02:39:12 +0000
ROA not after: Tue 03 Dec 2024 02:44:12 +0000
asID: 204186
IP address blocks: 2a06:a005:150c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:ee:3c:26:2f:09:cc:74:6b:df:29:9c:2a:b9:89:cf:2e:e0:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:12 2023 GMT
Not After : Dec 3 02:44:12 2024 GMT
Subject: CN=D377B8E9421A6201B7606B37C7789495AB07802A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:a2:6d:1c:e8:04:49:05:e8:e5:d5:b3:de:
45:75:23:bd:fd:96:d1:dc:e5:85:7e:f4:12:2c:f3:
1d:29:58:57:7c:3f:1f:70:da:2d:87:c7:f8:d8:78:
e6:b0:ec:46:4a:4a:c6:d1:66:a2:71:32:14:54:c5:
6e:1d:89:fc:ac:2a:d9:99:dc:7f:be:6c:2b:6b:2e:
14:51:e7:ef:e7:7b:3f:3f:e8:dc:8b:1d:2d:b6:1b:
25:c5:7e:f3:1f:9b:4b:e8:91:8b:00:63:73:be:b5:
c1:ef:77:ff:ce:9c:f7:4a:34:79:93:54:15:8f:86:
a5:34:14:14:d6:ad:53:ad:4b:f2:97:00:fe:9c:74:
89:bb:7d:58:39:ea:1a:a0:b7:44:00:ce:fd:85:e8:
56:de:7a:b8:92:6d:3e:7a:08:27:4c:2b:86:31:82:
c1:1b:53:49:6b:2b:81:01:1e:1b:cc:77:d3:79:f0:
85:78:9b:a8:39:09:fb:13:29:00:01:2d:ca:aa:6f:
a5:f8:8c:4d:da:81:68:e3:70:5b:42:c6:db:d1:c6:
87:06:1f:60:f2:fd:55:d3:79:44:10:d9:5d:3c:e4:
f5:de:63:4c:ab:b2:0f:6a:dc:85:bb:42:96:68:95:
8e:df:d1:0b:f0:ab:1b:ca:29:4d:eb:0d:8a:2e:a2:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:77:B8:E9:42:1A:62:01:B7:60:6B:37:C7:78:94:95:AB:07:80:2A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204186.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:150c::/48
Signature Algorithm: sha256WithRSAEncryption
31:e8:e2:22:20:a8:e6:37:be:55:df:75:cf:97:2b:10:a4:c3:
b9:1d:70:e4:17:31:4f:d0:20:87:57:be:c6:ac:65:97:cb:3c:
85:89:7d:27:89:12:83:1a:3b:0d:b3:38:ba:b6:c5:b9:f9:95:
7b:84:1a:cf:f1:13:6c:65:36:4a:9e:67:92:95:5e:a7:74:92:
c0:70:ba:7f:cb:38:03:35:be:e3:e3:db:d2:b6:03:12:97:c4:
00:17:f1:ad:22:23:ae:13:e6:ab:fa:c4:f8:3c:40:45:3e:6c:
bf:af:bc:06:64:33:9f:fc:4d:b5:23:68:11:67:fa:42:31:a4:
33:8b:71:57:2e:b7:76:da:26:99:f4:e6:d9:14:00:67:bc:2a:
7a:dd:12:38:5b:ad:59:7d:3c:2d:0c:f8:cc:a3:1f:20:e8:a2:
06:43:f9:70:e4:25:9b:ad:91:b6:89:32:87:12:bf:c9:7b:40:
a9:b7:01:e2:8f:be:b9:49:33:38:20:26:39:4c:c2:c1:ca:7b:
ae:19:ca:8a:03:99:24:f3:e8:20:ec:f9:30:ec:99:ec:f0:f3:
0a:46:6f:64:07:f5:db:6a:4a:41:a6:e7:db:22:86:03:82:11:
22:b5:4d:51:b2:9d:80:83:19:4c:94:a3:e6:dc:d2:83:6a:ab:
67:23:5b:53
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUIe48Ji8JzHRr3ymcKrmJzy7gBUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTJaFw0yNDEyMDMwMjQ0MTJaMDMxMTAvBgNV
BAMTKEQzNzdCOEU5NDIxQTYyMDFCNzYwNkIzN0M3Nzg5NDk1QUIwNzgwMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG4qJtHOgESQXo5dWz3kV1I739
ltHc5YV+9BIs8x0pWFd8Px9w2i2Hx/jYeOaw7EZKSsbRZqJxMhRUxW4difysKtmZ
3H++bCtrLhRR5+/nez8/6NyLHS22GyXFfvMfm0vokYsAY3O+tcHvd//OnPdKNHmT
VBWPhqU0FBTWrVOtS/KXAP6cdIm7fVg56hqgt0QAzv2F6FbeeriSbT56CCdMK4Yx
gsEbU0lrK4EBHhvMd9N58IV4m6g5CfsTKQABLcqqb6X4jE3agWjjcFtCxtvRxocG
H2Dy/VXTeUQQ2V085PXeY0yrsg9q3IW7QpZolY7f0QvwqxvKKU3rDYouomLPAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU03e46UIaYgG3YGs3x3iUlasHgCowHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA0MTg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBRUMMA0GCSqGSIb3DQEBCwUAA4IBAQAx6OIi
IKjmN75V33XPlysQpMO5HXDkFzFP0CCHV77GrGWXyzyFiX0niRKDGjsNszi6tsW5
+ZV7hBrP8RNsZTZKnmeSlV6ndJLAcLp/yzgDNb7j49vStgMSl8QAF/GtIiOuE+ar
+sT4PEBFPmy/r7wGZDOf/E21I2gRZ/pCMaQzi3FXLrd22iaZ9ObZFABnvCp63RI4
W61ZfTwtDPjMox8g6KIGQ/lw5CWbrZG2iTKHEr/Je0CptwHij765STM4ICY5TMLB
ynuuGcqKA5kk8+gg7Pkw7Jns8PMKRm9kB/XbakpBpufbIoYDghEitU1Rsp2AgxlM
lKPm3NKDaqtnI1tT
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org