Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205245.roa
File: AS205245.roa (raw, json)
Hash identifier: cYqCDgFBK3MRPUf2AgrwqZNsx9ukdjyZdCyVByoR57k=
Subject key identifier: 6A:48:D6:3D:64:85:41:B2:91:57:C8:57:C7:4B:37:87:C1:3F:2D:7C
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 426B2DEC906F2FD5CB779FEDC6F20CDADDAC9E59
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205245.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 205245
IP address blocks: 2a06:a005:7a0::/44 maxlen: 48
2a06:a005:7b0::/44 maxlen: 48
2a06:a005:820::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:6b:2d:ec:90:6f:2f:d5:cb:77:9f:ed:c6:f2:0c:da:dd:ac:9e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=6A48D63D648541B29157C857C74B3787C13F2D7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:d4:ba:42:73:74:bc:fe:98:73:fd:81:53:
51:06:d5:65:e0:ac:97:be:7d:94:18:b4:8e:9d:c7:
10:5c:f7:90:50:f5:fe:29:3e:a9:23:a2:fc:e3:ec:
bd:c7:b7:2b:d9:5f:5a:6c:33:7f:e9:c7:89:9e:a4:
53:f0:da:32:0b:1d:e3:6a:71:b2:a3:e1:18:dd:8b:
90:fe:d5:b4:e6:1b:a7:02:b1:12:ae:c5:02:a0:cf:
74:4d:14:a6:e5:bd:b1:fb:a1:d3:bc:a7:b4:89:d5:
9a:21:ca:e5:03:3b:0a:0a:47:e0:f8:a1:18:63:72:
0e:0a:3b:89:8b:16:ee:37:5d:6a:bb:d9:eb:b9:21:
79:0f:ce:f9:5d:a5:70:62:b1:91:aa:03:d8:57:ce:
9b:03:aa:69:b4:a1:8d:53:db:50:09:05:26:8e:c9:
60:23:66:f9:04:5d:b8:5b:87:63:39:e5:f7:61:28:
f6:eb:68:e8:fb:d3:0d:46:71:3b:a4:d3:cd:ee:c3:
52:62:a5:ac:10:86:0a:f7:60:67:45:71:5d:d2:30:
e3:ef:0f:cd:03:62:bd:17:41:1f:24:41:18:7d:f2:
c5:e7:df:84:d8:ac:da:e3:0f:69:7d:31:fd:6c:fe:
b8:31:aa:13:e4:7a:13:3d:d0:fc:5d:a2:38:9e:d3:
ca:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:48:D6:3D:64:85:41:B2:91:57:C8:57:C7:4B:37:87:C1:3F:2D:7C
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:7a0::/43
2a06:a005:820::/44
Signature Algorithm: sha256WithRSAEncryption
3b:44:d7:c9:69:71:76:7d:67:c8:1c:6b:2f:1c:df:bf:b4:6a:
67:cd:0b:bb:ca:67:1c:76:68:e3:a7:cd:4e:9a:10:c1:1d:62:
b5:93:0a:5a:80:41:8c:c2:26:85:17:fb:0a:f9:82:da:c7:ef:
79:88:54:4d:f1:f3:81:b2:5e:a5:88:dc:77:18:9c:47:88:71:
7d:97:05:01:8e:94:dc:25:9e:32:e8:90:a2:92:f6:56:a5:05:
7a:c4:eb:7c:f7:5c:fc:53:bc:6e:55:3f:c7:a1:3c:73:5a:30:
c0:28:e8:d0:40:52:ca:a4:02:bb:52:04:a1:96:bd:69:22:6d:
9f:52:86:0e:92:30:2f:2a:23:3b:b3:fb:14:d6:b8:6f:b1:5d:
41:69:03:b5:c5:59:2b:49:c2:ea:3d:b5:9d:6b:cf:69:15:32:
e4:be:38:27:b2:cf:75:8c:e5:a5:11:73:ee:bc:a1:23:7d:15:
38:17:91:c0:48:2d:0f:75:72:52:c7:4e:55:5d:61:e7:3d:f2:
12:d7:68:c6:08:a6:c5:0a:5f:84:03:be:80:ec:86:64:cd:32:
06:6c:ac:14:96:0f:a1:15:ec:ef:12:ef:80:58:53:dd:31:f1:
f0:f3:65:7b:48:4b:54:a3:e6:1b:c4:80:bf:0c:8c:4b:ff:21:
50:fa:71:18
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUQmst7JBvL9XLd5/txvIM2t2snlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDBaFw0yNTExMDQwMzQwMDBaMDMxMTAvBgNV
BAMTKDZBNDhENjNENjQ4NTQxQjI5MTU3Qzg1N0M3NEIzNzg3QzEzRjJEN0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HdS6QnN0vP6Yc/2BU1EG1WXg
rJe+fZQYtI6dxxBc95BQ9f4pPqkjovzj7L3HtyvZX1psM3/px4mepFPw2jILHeNq
cbKj4Rjdi5D+1bTmG6cCsRKuxQKgz3RNFKblvbH7odO8p7SJ1ZohyuUDOwoKR+D4
oRhjcg4KO4mLFu43XWq72eu5IXkPzvldpXBisZGqA9hXzpsDqmm0oY1T21AJBSaO
yWAjZvkEXbhbh2M55fdhKPbraOj70w1GcTuk083uw1JipawQhgr3YGdFcV3SMOPv
D80DYr0XQR8kQRh98sXn34TYrNrjD2l9Mf1s/rgxqhPkehM90Pxdojie08p7AgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQUakjWPWSFQbKRV8hXx0s3h8E/LXwwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA1MjQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcFKgagBQegAwcEKgagBQggMA0GCSqGSIb3DQEBCwUA
A4IBAQA7RNfJaXF2fWfIHGsvHN+/tGpnzQu7ymccdmjjp81OmhDBHWK1kwpagEGM
wiaFF/sK+YLax+95iFRN8fOBsl6liNx3GJxHiHF9lwUBjpTcJZ4y6JCikvZWpQV6
xOt891z8U7xuVT/HoTxzWjDAKOjQQFLKpAK7UgShlr1pIm2fUoYOkjAvKiM7s/sU
1rhvsV1BaQO1xVkrScLqPbWda89pFTLkvjgnss91jOWlEXPuvKEjfRU4F5HASC0P
dXJSx05VXWHnPfIS12jGCKbFCl+EA76A7IZkzTIGbKwUlg+hFezvEu+AWFPdMfHw
82V7SEtUo+YbxIC/DIxL/yFQ+nEY
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:10 2024 by rpki-client on console-ams.rpki-client.org