Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204857.roa
File: AS204857.roa (raw, json)
Hash identifier: o6vHV8+s7pdGxe/1BP+6ZxzatosLeQl2sK+Zt+Y5USw=
Subject key identifier: 79:F2:F2:A2:AD:16:AD:05:53:3C:F2:13:13:ED:46:54:99:BA:06:8F
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2791E7FDAA77AA65F938E79F51CF0465D838A8EF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204857.roa
Signing time: Tue 05 Dec 2023 02:44:15 +0000
ROA not before: Tue 05 Dec 2023 02:39:15 +0000
ROA not after: Tue 03 Dec 2024 02:44:15 +0000
asID: 204857
IP address blocks: 2a06:a005:b70::/44 maxlen: 48
2a06:a005:b80::/44 maxlen: 48
2a06:a005:b90::/44 maxlen: 48
2a06:a005:bd0::/44 maxlen: 48
2a06:a005:be0::/44 maxlen: 48
2a06:a005:bf0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:91:e7:fd:aa:77:aa:65:f9:38:e7:9f:51:cf:04:65:d8:38:a8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:15 2023 GMT
Not After : Dec 3 02:44:15 2024 GMT
Subject: CN=79F2F2A2AD16AD05533CF21313ED465499BA068F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:cf:b3:c2:ab:e5:a3:12:15:72:42:87:31:
99:ee:a1:b0:b2:ff:2e:f4:6a:3a:8d:29:d7:53:8a:
15:e0:26:bc:16:2f:ad:25:f0:42:11:b9:25:21:31:
4f:74:1f:09:8c:a7:53:8e:87:73:59:4f:5f:67:84:
f3:68:0e:0b:75:2b:1c:0b:00:4e:13:44:7a:f4:ba:
38:b7:f4:9c:7a:d6:11:35:8b:19:19:bd:1c:e3:fe:
58:fb:96:6c:cc:66:ab:1f:af:c0:c6:47:35:a4:a8:
1c:5c:00:02:ed:50:9e:07:5a:84:d4:98:73:75:23:
1c:0c:e0:26:c9:0e:c9:4b:7a:eb:fc:49:f5:c8:a4:
96:48:2f:b0:ea:28:a6:4e:8b:34:6c:e6:d9:da:5c:
df:45:db:4c:c3:42:2d:e4:cf:d9:5c:12:67:85:64:
b6:4b:7a:7f:83:9b:39:2e:85:dd:27:60:45:66:24:
9a:c8:ab:d0:26:56:42:ad:80:81:b0:dd:95:54:ba:
c6:71:d2:56:d9:54:41:cb:ec:32:f8:81:a0:67:bd:
6b:b6:b4:c6:4b:d4:09:f9:dd:b1:c1:4b:f2:ee:79:
be:6d:c8:d2:ab:3c:01:2d:9b:8c:c5:5c:d3:4c:41:
d8:17:02:f9:56:de:5c:4a:8f:f5:b3:7b:41:a1:eb:
ce:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F2:F2:A2:AD:16:AD:05:53:3C:F2:13:13:ED:46:54:99:BA:06:8F
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS204857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b70::-2a06:a005:b9f:ffff:ffff:ffff:ffff:ffff
2a06:a005:bd0::-2a06:a005:bff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:4c:88:22:3a:ca:fd:69:a0:02:0d:a5:74:20:db:b1:2c:6d:
76:64:b6:01:d1:35:d9:ee:e4:af:57:7d:cf:7d:a6:93:cf:77:
75:1a:64:6c:fe:59:18:e9:16:be:a8:c7:ee:60:7d:02:f6:59:
e4:cc:d6:9d:11:b2:49:d0:2f:b7:84:07:8b:10:e9:1b:d5:27:
19:58:1e:21:50:23:db:02:19:27:01:9e:01:8b:a4:f2:9c:c6:
50:ae:68:c1:2d:0e:57:54:48:45:04:78:9e:2e:a1:e2:c1:ff:
3a:54:ef:e8:06:72:59:9f:41:9b:96:a0:16:c3:8e:47:b9:9c:
22:84:8a:02:29:69:4b:b6:3b:e8:b2:e6:f0:18:19:2b:1c:c5:
2b:34:9c:30:e4:88:5d:b4:d8:08:ed:bc:ce:83:90:ca:ea:81:
e8:b2:f8:ac:c9:1a:b2:aa:02:e4:e1:b3:62:4f:da:91:be:ff:
d5:19:2d:24:dd:fc:81:97:a0:b0:97:95:e4:1c:4f:50:9f:48:
4d:9e:03:76:55:f2:19:62:38:ef:9b:95:87:95:95:d3:75:84:
5b:d2:43:e9:3e:23:43:39:8b:6b:a1:37:95:1b:48:f6:58:83:
c5:70:86:49:23:c3:99:26:19:7d:ac:0f:9b:4e:c9:eb:c1:60:
93:be:0a:2c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUJ5Hn/ap3qmX5OOefUc8EZdg4qO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTVaFw0yNDEyMDMwMjQ0MTVaMDMxMTAvBgNV
BAMTKDc5RjJGMkEyQUQxNkFEMDU1MzNDRjIxMzEzRUQ0NjU0OTlCQTA2OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1I8+zwqvloxIVckKHMZnuobCy
/y70ajqNKddTihXgJrwWL60l8EIRuSUhMU90HwmMp1OOh3NZT19nhPNoDgt1KxwL
AE4TRHr0uji39Jx61hE1ixkZvRzj/lj7lmzMZqsfr8DGRzWkqBxcAALtUJ4HWoTU
mHN1IxwM4CbJDslLeuv8SfXIpJZIL7DqKKZOizRs5tnaXN9F20zDQi3kz9lcEmeF
ZLZLen+Dmzkuhd0nYEVmJJrIq9AmVkKtgIGw3ZVUusZx0lbZVEHL7DL4gaBnvWu2
tMZL1An53bHBS/Lueb5tyNKrPAEtm4zFXNNMQdgXAvlW3lxKj/Wze0Gh6869AgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUefLyoq0WrQVTPPITE+1GVJm6Bo8wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA0ODU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEH
AQH/BDEwLzAtBAIAAjAnMBIDBwQqBqAFC3ADBwUqBqAFC4AwEQMHBCoGoAUL0AMG
AioGoAUIMA0GCSqGSIb3DQEBCwUAA4IBAQBATIgiOsr9aaACDaV0INuxLG12ZLYB
0TXZ7uSvV33PfaaTz3d1GmRs/lkY6Ra+qMfuYH0C9lnkzNadEbJJ0C+3hAeLEOkb
1ScZWB4hUCPbAhknAZ4Bi6TynMZQrmjBLQ5XVEhFBHieLqHiwf86VO/oBnJZn0Gb
lqAWw45HuZwihIoCKWlLtjvosubwGBkrHMUrNJww5IhdtNgI7bzOg5DK6oHosvis
yRqyqgLk4bNiT9qRvv/VGS0k3fyBl6Cwl5XkHE9Qn0hNngN2VfIZYjjvm5WHlZXT
dYRb0kPpPiNDOYtroTeVG0j2WIPFcIZJI8OZJhl9rA+bTsnrwWCTvgos
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org