Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206292.roa
File: AS206292.roa (raw, json)
Hash identifier: 2Yf45aqNd6adNQzfPdRk/ZhhAC7nqwXN+5kNv1uq8s8=
Subject key identifier: 82:0E:80:F7:C9:47:29:60:EA:62:66:E6:AC:50:E9:F5:E9:D6:20:A3
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2CFCF8BF6A01E66750BD1C1426320B8A0A29AF95
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206292.roa
Signing time: Sun 15 Dec 2024 21:40:12 +0000
ROA not before: Sun 15 Dec 2024 21:35:12 +0000
ROA not after: Sun 14 Dec 2025 21:40:12 +0000
asID: 206292
IP address blocks: 81.31.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 09:24:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:fc:f8:bf:6a:01:e6:67:50:bd:1c:14:26:32:0b:8a:0a:29:af:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 15 21:35:12 2024 GMT
Not After : Dec 14 21:40:12 2025 GMT
Subject: CN=820E80F7C9472960EA6266E6AC50E9F5E9D620A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7a:11:8e:f8:44:9b:d2:d4:20:50:97:5c:e4:
43:86:e1:a2:6f:76:0a:9b:70:7b:06:9e:5e:ef:52:
b7:1c:81:1a:f5:d3:66:bb:54:38:33:3d:27:51:f9:
ac:de:ad:2c:12:24:2a:97:99:fe:3d:6d:d9:ce:4d:
98:43:d1:2a:95:15:29:f7:92:ea:ad:56:05:8d:f0:
e6:84:f4:4d:40:9f:39:ce:57:04:9e:1d:19:68:3f:
7e:0d:e8:48:b8:18:b1:80:41:3b:e3:da:8d:38:94:
e7:5f:a5:bc:17:44:98:7f:eb:d9:57:b1:c8:39:77:
7a:36:8c:b4:f8:24:e5:27:62:c4:1a:bf:2f:2b:0e:
38:19:12:e9:b4:13:a1:de:37:53:d8:ca:da:36:92:
a8:7d:44:c2:b0:ff:64:39:85:f7:46:93:72:0f:5a:
e4:54:1d:41:67:cc:8c:0d:29:f4:6b:95:d7:88:74:
b3:10:c2:ca:9a:d5:5b:c2:84:fd:bb:0e:10:77:85:
79:c5:f2:bc:94:d4:f5:59:2f:2b:22:07:65:1e:52:
01:a7:9f:5f:6d:1c:b8:47:6f:e1:6d:f6:a5:5e:21:
3c:21:3f:9e:9a:e1:f0:2a:a2:8b:7d:2f:6d:61:85:
2c:49:8b:de:04:74:bc:48:d2:32:d6:cb:3f:bc:98:
23:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0E:80:F7:C9:47:29:60:EA:62:66:E6:AC:50:E9:F5:E9:D6:20:A3
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206292.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.215.0/24
Signature Algorithm: sha256WithRSAEncryption
80:be:82:c4:7e:3d:f6:7a:10:f6:64:48:15:2b:87:8e:d1:0c:
cf:dd:d4:b9:7d:61:bd:3f:bd:02:92:88:b7:5a:61:61:a9:c9:
cd:2d:f9:45:d8:e1:b1:55:aa:8e:f0:b8:0e:ae:33:e9:b0:e9:
d7:a7:dc:31:ad:c7:0f:c7:9e:92:c1:47:b8:26:e0:c1:58:c1:
ad:0a:fa:a0:3f:51:9e:e2:6a:05:16:a9:f6:86:5c:87:ff:dc:
88:cb:53:fa:06:44:a2:39:47:2d:a3:55:38:a8:14:40:8b:e4:
a4:60:7b:f8:36:e7:ad:e5:6f:06:38:99:f0:f3:2c:1d:1d:b9:
64:d3:32:ee:89:dd:38:33:94:44:b0:f3:b9:b4:7e:34:b6:60:
b6:00:78:0b:2c:b4:a7:24:89:6d:7a:91:54:ec:bb:9e:6a:4b:
73:07:d6:3a:31:31:2e:c9:ef:19:29:2f:0b:79:24:53:f5:d6:
f6:63:4a:76:72:cc:ef:4f:92:ba:11:b2:71:a7:ce:9a:57:22:
85:87:7d:cc:47:79:52:aa:18:98:86:d5:56:2a:e0:4e:ce:85:
26:f1:97:77:1e:4b:83:2f:e4:6e:ea:ed:cf:11:a8:4c:67:86:
96:1a:73:61:44:bc:07:61:87:27:6c:b6:da:de:3f:43:da:c2:
5b:83:63:9b
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIULPz4v2oB5mdQvRwUJjILigopr5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDEyMTUyMTM1MTJaFw0yNTEyMTQyMTQwMTJaMDMxMTAvBgNV
BAMTKDgyMEU4MEY3Qzk0NzI5NjBFQTYyNjZFNkFDNTBFOUY1RTlENjIwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdehGO+ESb0tQgUJdc5EOG4aJv
dgqbcHsGnl7vUrccgRr102a7VDgzPSdR+azerSwSJCqXmf49bdnOTZhD0SqVFSn3
kuqtVgWN8OaE9E1AnznOVwSeHRloP34N6Ei4GLGAQTvj2o04lOdfpbwXRJh/69lX
scg5d3o2jLT4JOUnYsQavy8rDjgZEum0E6HeN1PYyto2kqh9RMKw/2Q5hfdGk3IP
WuRUHUFnzIwNKfRrldeIdLMQwsqa1VvChP27DhB3hXnF8ryU1PVZLysiB2UeUgGn
n19tHLhHb+Ft9qVeITwhP56a4fAqoot9L21hhSxJi94EdLxI0jLWyz+8mCPVAgMB
AAGjggHvMIIB6zAdBgNVHQ4EFgQUgg6A98lHKWDqYmbmrFDp9enWIKMwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA2MjkyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAUR/XMA0GCSqGSIb3DQEBCwUAA4IBAQCAvoLEfj32
ehD2ZEgVK4eO0QzP3dS5fWG9P70Ckoi3WmFhqcnNLflF2OGxVaqO8LgOrjPpsOnX
p9wxrccPx56SwUe4JuDBWMGtCvqgP1Ge4moFFqn2hlyH/9yIy1P6BkSiOUcto1U4
qBRAi+SkYHv4Nuet5W8GOJnw8ywdHblk0zLuid04M5REsPO5tH40tmC2AHgLLLSn
JIltepFU7LueaktzB9Y6MTEuye8ZKS8LeSRT9db2Y0p2cszvT5K6EbJxp86aVyKF
h33MR3lSqhiYhtVWKuBOzoUm8Zd3HkuDL+Ru6u3PEahMZ4aWGnNhRLwHYYcnbLba
3j9D2sJbg2Ob
-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:20 2025 by rpki-client