Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206804.roa
File: AS206804.roa (raw, json)
Hash identifier: ZjlzwDVkTTG3E0OKPPWgh/Q/z2GP5kGEMD5b+zxAkbs=
Subject key identifier: 91:DE:D0:54:79:F3:21:FD:F7:59:0C:67:41:01:B5:5F:5C:15:39:53
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 01A2F8264D9EE6FB87C1E5C891ED1A3848BDCC6B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206804.roa
Signing time: Mon 04 Sep 2023 13:21:15 +0000
ROA not before: Mon 04 Sep 2023 13:16:15 +0000
ROA not after: Mon 02 Sep 2024 13:21:15 +0000
asID: 206804
IP address blocks: 103.230.142.0/24 maxlen: 24
185.195.236.0/24 maxlen: 24
185.195.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a2:f8:26:4d:9e:e6:fb:87:c1:e5:c8:91:ed:1a:38:48:bd:cc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Sep 4 13:16:15 2023 GMT
Not After : Sep 2 13:21:15 2024 GMT
Subject: CN=91DED05479F321FDF7590C674101B55F5C153953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:f8:15:41:3e:9c:06:5f:a1:65:74:77:fd:
7f:68:70:5b:83:55:53:24:5f:e9:7a:7c:96:07:00:
21:b0:89:66:68:0c:f5:64:42:62:4b:10:35:c4:70:
a7:08:fc:8c:1a:ca:d0:18:df:f9:b2:7a:1c:ba:37:
c9:9b:a8:80:f4:ff:0e:69:22:91:09:b6:b2:6c:b9:
57:3a:1a:89:8c:b1:73:8e:8c:31:91:b0:c5:5d:4e:
4d:89:31:1e:0e:f7:8a:d9:1f:28:d8:10:c0:f4:89:
f1:d4:05:88:fd:87:ce:37:58:5a:18:09:54:19:6a:
74:34:26:18:e5:4b:72:98:7e:7a:d6:c3:57:66:9e:
aa:0a:a6:24:34:3f:aa:7f:d8:53:e7:d9:c0:ce:3e:
0c:67:bf:6d:81:eb:ef:af:70:22:cc:0b:6f:a9:b8:
a4:8a:e8:5e:fe:17:66:5e:51:52:4c:e7:ee:28:cb:
b1:9e:20:2e:b6:f1:f7:02:67:b6:9f:99:34:f7:c0:
cf:3c:84:da:a2:6f:8f:c7:f5:f6:86:86:dd:36:7e:
7d:d3:75:54:62:83:6b:77:a6:c5:c6:21:26:aa:e0:
d6:72:95:2b:94:15:24:28:f0:9a:4b:9b:44:ba:26:
04:9b:a5:d3:d0:cb:7a:b8:78:97:b3:a2:11:78:21:
a2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:D0:54:79:F3:21:FD:F7:59:0C:67:41:01:B5:5F:5C:15:39:53
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206804.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.230.142.0/24
185.195.236.0/23
Signature Algorithm: sha256WithRSAEncryption
43:fd:f1:6f:d9:96:1f:cc:c5:bc:65:21:c4:43:50:71:0b:be:
9e:30:66:8f:1a:f0:5c:06:db:85:06:41:f2:bb:1a:5a:d4:03:
8b:08:d9:c1:69:55:23:79:c4:5c:e5:ea:8d:a3:60:97:d4:e3:
28:ef:9d:41:84:04:ca:bd:9c:c2:50:78:cc:8c:31:1b:cf:79:
d0:2d:86:71:d2:9f:f4:83:fc:df:43:ba:34:2b:e1:0f:b3:1e:
3f:51:fa:e4:42:c8:a3:3b:b5:cd:cf:18:5e:2a:b1:e6:3f:83:
e0:81:3f:63:b3:74:42:a4:1f:1e:cc:20:3b:7c:12:85:51:b7:
a6:70:ec:03:51:2d:fc:f6:2c:5e:77:e9:e9:23:21:ce:4b:4c:
27:7e:e2:d5:8b:2a:d8:cf:18:2b:f2:bc:6f:29:36:d2:b5:a4:
cc:16:2e:ef:da:27:6e:cf:8d:84:df:5c:37:f0:c0:b2:86:54:
10:4d:b6:8e:da:26:55:2b:65:c1:cf:74:0f:c8:ef:ae:b2:ec:
9b:e1:26:1e:06:1e:28:9f:4d:83:73:1c:70:68:9b:c6:0a:a5:
fb:45:ea:d4:c0:fa:1c:69:d5:65:3a:65:af:42:6e:7c:65:9c:
d4:d3:0c:07:5e:86:38:47:62:66:f3:54:47:a8:ce:17:71:03:
df:93:59:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org