Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206292.roa
File: AS206292.roa (raw, json)
Hash identifier: Fmxhn89vpL2BXnUNeMm9GZLCASJ9CxSOzOYHlKsvyN8=
Subject key identifier: 92:F3:3D:EA:DC:30:09:06:67:15:74:CF:97:95:DC:9A:DB:8F:E3:E1
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2549C87DD6F0ABF2E1A9F4BD3978BCC423AC3787
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206292.roa
Signing time: Sun 14 Jan 2024 21:27:50 +0000
ROA not before: Sun 14 Jan 2024 21:22:50 +0000
ROA not after: Sun 12 Jan 2025 21:27:50 +0000
asID: 206292
IP address blocks: 81.31.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:49:c8:7d:d6:f0:ab:f2:e1:a9:f4:bd:39:78:bc:c4:23:ac:37:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 14 21:22:50 2024 GMT
Not After : Jan 12 21:27:50 2025 GMT
Subject: CN=92F33DEADC300906671574CF9795DC9ADB8FE3E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:b3:08:a2:27:9d:5e:c8:8b:4e:ec:73:f6:
91:f0:9f:88:ef:8e:77:be:09:d4:d9:2a:90:15:a3:
9b:89:fa:eb:18:49:4c:b1:e9:a2:c4:b9:be:b0:56:
ec:21:30:da:9c:28:0e:08:cc:28:d4:43:ac:7e:28:
e2:d9:ba:19:ca:a9:fe:d3:e4:c3:42:7a:aa:8c:4d:
73:a8:28:90:11:60:62:27:66:2a:ea:9d:ec:5f:e2:
97:36:2f:f2:e4:27:fd:ad:e3:81:39:00:8a:da:52:
c5:f0:e7:fa:1f:79:31:fb:72:b2:de:e7:41:dd:5b:
2b:b3:ec:aa:3e:ce:d3:33:f6:50:b1:6e:e4:f7:f3:
56:ca:54:df:52:e9:78:3e:fc:17:81:69:2b:1e:fa:
ac:bd:d0:d4:d8:d0:5b:f1:6a:97:09:af:dd:04:e8:
a9:8f:57:17:a7:98:a6:86:c3:06:18:23:a0:1a:62:
7a:b5:f9:e8:9f:19:2f:f2:89:dc:92:eb:c2:c7:40:
62:90:5e:4c:c7:d6:1e:1f:f9:75:6b:c1:0b:2f:df:
56:c6:82:2c:33:1e:61:bf:29:e9:61:74:73:2e:14:
3d:92:ad:00:51:5a:51:98:ab:80:df:b5:3b:63:fa:
56:f0:27:ab:b2:3e:26:be:b9:64:97:09:21:b4:ba:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F3:3D:EA:DC:30:09:06:67:15:74:CF:97:95:DC:9A:DB:8F:E3:E1
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206292.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.215.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:34:3e:8c:38:e3:de:28:1d:74:59:1d:45:01:d9:f1:53:e7:
42:6a:a2:e4:b2:a5:80:36:4e:01:ca:d6:69:6d:d9:cc:c3:04:
b8:55:ef:29:99:b0:1f:6d:37:80:a3:32:54:a1:5e:b4:cc:76:
03:4d:e3:e6:ea:2c:65:bd:54:f1:94:82:e3:8a:87:3a:41:82:
2d:0d:40:d8:50:60:53:ac:94:2a:40:45:d5:f5:40:5e:c4:14:
89:1b:73:00:77:a1:24:46:92:f2:07:14:5d:00:53:a1:07:31:
9d:48:43:40:9c:30:66:62:c8:6f:82:e3:a9:68:fd:7e:d7:8a:
bd:32:de:9a:15:be:7f:f6:af:3a:b3:52:3b:47:c2:ca:49:46:
54:e0:9f:40:2e:ce:36:96:db:a8:63:1f:b6:95:70:88:cf:74:
a9:5c:40:6f:f1:ba:8d:4f:89:36:88:2f:70:4e:a4:37:29:88:
02:97:02:96:58:b3:30:df:97:75:d6:6e:fc:40:6f:55:f0:0e:
20:d8:12:d6:e5:39:91:c5:c8:f2:bd:29:2f:00:5a:60:58:cd:
89:19:57:73:33:d3:9f:99:f2:20:3f:03:89:8f:dd:9d:1f:0f:
ae:82:a8:7e:d7:d7:e3:19:7f:03:e0:f2:06:a2:c8:18:e1:94:
92:e8:d5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org