Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204268.roa
File: AS204268.roa (raw, json)
Hash identifier: twMtkv7vNxDNp+Vrp3EKjKhJpJw886mSg7jbzdcqXNA=
Subject key identifier: 22:12:5F:92:0F:AB:EC:91:B4:D9:8A:AF:5C:5B:D3:0B:D6:E9:61:BD
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 1C9181A2D3C0CAFC4BFB595BF28A5C791C2CE5D2
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204268.roa
Signing time: Sun 11 Feb 2024 18:44:24 +0000
ROA not before: Sun 11 Feb 2024 18:39:24 +0000
ROA not after: Sun 09 Feb 2025 18:44:24 +0000
asID: 204268
IP address blocks: 2a06:a005:a0e::/48 maxlen: 48
2a06:a005:a12::/48 maxlen: 48
2a06:a005:1000::/44 maxlen: 48
2a06:a005:15b0::/44 maxlen: 48
2a06:a005:1d59::/48 maxlen: 48
2a06:a005:2320::/44 maxlen: 48
2a06:a005:2820::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:91:81:a2:d3:c0:ca:fc:4b:fb:59:5b:f2:8a:5c:79:1c:2c:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 11 18:39:24 2024 GMT
Not After : Feb 9 18:44:24 2025 GMT
Subject: CN=22125F920FABEC91B4D98AAF5C5BD30BD6E961BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:00:a8:ff:29:15:03:94:06:90:02:0c:1a:
95:12:10:c3:31:d6:63:3b:7f:61:d6:4d:f4:30:c4:
97:7c:c4:52:56:1b:60:bb:3d:42:8f:73:dd:dc:b3:
a2:83:31:fd:74:cf:d1:bd:3e:9f:ed:28:f7:9c:2f:
97:7e:87:06:77:f6:2a:ba:27:a3:00:a4:35:d0:c4:
7e:2d:b2:c6:e9:f4:d3:33:3d:1a:4a:a3:d1:33:fd:
2c:9f:d5:43:ee:3e:a7:5c:fe:ee:a6:8b:33:c2:42:
50:73:fc:e9:40:a1:b7:90:d7:b1:8c:07:02:fa:a4:
9b:5e:f3:86:bd:5e:5b:08:54:5e:99:20:ff:0e:60:
06:ff:c9:1e:99:c9:19:e7:59:dc:ae:9e:18:10:21:
09:e4:4a:36:c9:9a:c5:e7:7f:bf:cc:a7:95:70:43:
c2:a8:b4:8c:f0:ad:55:67:13:91:4f:55:4b:5f:ba:
99:76:53:89:ff:0b:88:77:2e:a2:38:25:9b:64:fd:
70:f8:8e:1a:2c:9b:41:5d:18:70:2e:da:ec:8f:fb:
b4:39:68:ae:23:59:ec:d3:42:c9:ff:82:17:8a:58:
95:ad:47:c8:61:d0:d6:b5:85:51:92:22:9b:32:b2:
3a:66:3f:fe:01:4e:8f:40:e6:16:7b:a6:f2:38:ef:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:12:5F:92:0F:AB:EC:91:B4:D9:8A:AF:5C:5B:D3:0B:D6:E9:61:BD
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204268.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:a0e::/48
2a06:a005:a12::/48
2a06:a005:1000::/44
2a06:a005:15b0::/44
2a06:a005:1d59::/48
2a06:a005:2320::/44
2a06:a005:2820::/44
Signature Algorithm: sha256WithRSAEncryption
18:c0:6f:ed:8e:6d:a0:c2:4e:09:af:10:0f:e5:02:b5:b2:b8:
b8:35:9a:94:33:f9:18:fe:b8:44:40:0a:27:0c:2f:88:ba:a1:
9c:a8:b1:db:e3:97:85:65:51:7a:6c:52:3a:fc:5e:fe:2b:c9:
0c:3b:3b:de:dc:14:19:af:1e:21:eb:91:24:41:2f:a6:cf:20:
24:a8:b0:aa:87:80:7c:26:1b:92:ea:8a:f1:d3:c8:3b:b3:7d:
80:43:ec:74:2c:c6:48:01:cc:9b:31:c9:a3:72:43:84:67:61:
56:e5:e8:ee:57:75:e7:4c:fc:6c:87:5d:a3:8f:6b:d6:68:f6:
56:82:cb:0d:4f:94:5a:16:ac:f1:b9:09:01:5d:03:3a:77:b2:
d0:77:c6:eb:d2:94:37:45:52:cc:cf:9b:dc:53:43:26:8a:66:
43:e7:29:79:a6:42:7a:d1:4b:6f:67:7b:fd:89:c3:a1:0f:8d:
48:ca:45:9a:5c:db:77:f1:8e:1f:0e:1d:b8:d1:f7:84:25:a0:
54:bf:4e:02:7b:98:8e:a3:4e:ef:9e:55:5c:fc:47:63:77:62:
1a:e6:48:27:2c:d7:30:c2:ce:1f:af:2a:56:b8:ac:e0:e4:f8:
c2:81:e0:49:98:2a:89:b8:cb:41:83:31:1e:c9:7b:db:4c:3b:
a2:ca:54:23
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUHJGBotPAyvxL+1lb8opceRws5dIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMTExODM5MjRaFw0yNTAyMDkxODQ0MjRaMDMxMTAvBgNV
BAMTKDIyMTI1RjkyMEZBQkVDOTFCNEQ5OEFBRjVDNUJEMzBCRDZFOTYxQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7ACo/ykVA5QGkAIMGpUSEMMx
1mM7f2HWTfQwxJd8xFJWG2C7PUKPc93cs6KDMf10z9G9Pp/tKPecL5d+hwZ39iq6
J6MApDXQxH4tssbp9NMzPRpKo9Ez/Syf1UPuPqdc/u6mizPCQlBz/OlAobeQ17GM
BwL6pJte84a9XlsIVF6ZIP8OYAb/yR6ZyRnnWdyunhgQIQnkSjbJmsXnf7/Mp5Vw
Q8KotIzwrVVnE5FPVUtfupl2U4n/C4h3LqI4JZtk/XD4jhosm0FdGHAu2uyP+7Q5
aK4jWezTQsn/gheKWJWtR8hh0Na1hVGSIpsysjpmP/4BTo9A5hZ7pvI47wGnAgMB
AAGjggIoMIICJDAdBgNVHQ4EFgQUIhJfkg+r7JG02YqvXFvTC9bpYb0wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA0MjY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEH
AQH/BEkwRzBFBAIAAjA/AwcAKgagBQoOAwcAKgagBQoSAwcEKgagBRAAAwcEKgag
BRWwAwcAKgagBR1ZAwcEKgagBSMgAwcEKgagBSggMA0GCSqGSIb3DQEBCwUAA4IB
AQAYwG/tjm2gwk4JrxAP5QK1sri4NZqUM/kY/rhEQAonDC+IuqGcqLHb45eFZVF6
bFI6/F7+K8kMOzve3BQZrx4h65EkQS+mzyAkqLCqh4B8JhuS6orx08g7s32AQ+x0
LMZIAcybMcmjckOEZ2FW5ejuV3XnTPxsh12jj2vWaPZWgssNT5RaFqzxuQkBXQM6
d7LQd8br0pQ3RVLMz5vcU0MmimZD5yl5pkJ60UtvZ3v9icOhD41IykWaXNt38Y4f
Dh240feEJaBUv04Ce5iOo07vnlVc/Edjd2Ia5kgnLNcwws4frypWuKzg5PjCgeBJ
mCqJuMtBgzEeyXvbTDuiylQj
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:35 2024 by rpki-client on console-fra.rpki-client.org