Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207252.roa
File: AS207252.roa (raw, json)
Hash identifier: x+r7hsERzsk9Pxdtlx3pjzSv+4qWqz1C9ueK7Q3i6Bs=
Subject key identifier: EF:D6:72:6D:A0:33:27:00:9C:4E:3B:E4:C4:F5:6E:24:7A:53:4E:97
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7AD90EAE0538A134F2980EE86EF65DFAE185670C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207252.roa
Signing time: Sat 16 Nov 2024 00:40:12 +0000
ROA not before: Sat 16 Nov 2024 00:35:12 +0000
ROA not after: Sat 15 Nov 2025 00:40:12 +0000
asID: 207252
IP address blocks: 2a06:a005:2b60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:d9:0e:ae:05:38:a1:34:f2:98:0e:e8:6e:f6:5d:fa:e1:85:67:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 16 00:35:12 2024 GMT
Not After : Nov 15 00:40:12 2025 GMT
Subject: CN=EFD6726DA03327009C4E3BE4C4F56E247A534E97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:64:0f:dd:cf:04:5c:3c:4b:58:18:af:a3:95:
e2:94:32:a6:a3:18:ff:83:57:7f:64:27:dc:43:54:
b7:a0:e2:d5:e2:a8:7c:3a:93:ac:d7:b8:9a:eb:18:
60:8d:e6:73:3b:31:53:d2:7d:64:4e:8c:e4:8d:b6:
77:d0:65:19:d9:94:77:b5:d9:86:a6:84:1f:5d:87:
eb:9e:eb:da:8c:92:93:d9:74:43:fa:cd:31:c9:ca:
cc:42:be:d3:1a:8e:ee:82:4d:45:6d:b1:07:01:70:
c3:63:41:2e:58:ed:c9:1f:3a:7f:3a:1a:e6:4f:e4:
7e:91:97:bc:9a:76:4f:22:c3:97:80:d6:61:ba:50:
a0:98:3f:8c:99:72:6c:61:70:ba:8d:c8:a7:62:1e:
bf:01:e7:55:03:7f:a0:07:e9:c6:82:36:8d:5f:1b:
1c:e6:c9:79:2e:54:59:fe:f0:db:eb:a0:4b:cd:44:
cc:80:c2:42:14:b6:b1:79:c6:b3:01:2b:61:94:14:
fc:48:64:88:b0:c5:af:53:9a:d9:43:df:16:e5:ff:
07:cb:3e:8b:84:06:5c:8f:e8:74:16:c1:df:e8:48:
83:bc:29:7a:81:16:75:84:a7:c7:c8:02:f3:c7:2e:
76:e1:8d:dd:7d:a8:91:23:aa:03:d0:a3:2a:c9:ea:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:72:6D:A0:33:27:00:9C:4E:3B:E4:C4:F5:6E:24:7A:53:4E:97
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2b60::/44
Signature Algorithm: sha256WithRSAEncryption
0d:55:27:82:89:b9:00:b2:59:77:d5:b2:e8:42:2a:e3:00:64:
a0:5a:ad:81:99:3b:dd:e0:8b:e5:a0:59:43:0e:da:61:35:c1:
9f:59:fe:fc:ab:09:6c:ba:7e:51:df:0e:f7:3e:93:56:23:84:
70:d3:83:43:9b:af:89:ce:aa:d3:8a:97:a2:29:01:22:42:68:
c2:89:d2:1c:76:e1:e1:39:8d:40:a8:31:39:0b:59:b4:e3:b3:
2b:c6:c7:d2:74:8c:79:ce:7b:6d:9c:31:cf:c6:ec:45:65:02:
91:23:26:47:6e:14:13:d2:ca:6d:17:3b:19:3d:84:6c:a6:3e:
d2:47:14:cb:a1:53:57:08:ee:b9:4d:28:82:da:26:42:7e:fe:
6f:bb:13:d9:62:56:3f:c7:07:c1:7b:24:6e:c1:34:38:ca:d6:
4f:ae:72:28:3a:a9:fc:25:47:fa:a5:0f:d2:8a:07:72:22:0b:
a6:57:41:d9:e7:c5:79:d9:b8:a3:00:a7:bd:9e:fd:d7:2d:5c:
e9:90:b0:c1:e2:0f:46:7a:d4:ee:9e:bc:3b:87:c1:a1:e8:f6:
5a:90:d9:d5:2b:12:9b:77:6e:db:83:7e:f5:25:eb:43:f8:7e:
06:cb:bc:71:47:ac:88:10:76:3c:e6:d0:b5:17:d5:8d:57:9a:
c4:af:21:7b
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUetkOrgU4oTTymA7obvZd+uGFZwwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMTYwMDM1MTJaFw0yNTExMTUwMDQwMTJaMDMxMTAvBgNV
BAMTKEVGRDY3MjZEQTAzMzI3MDA5QzRFM0JFNEM0RjU2RTI0N0E1MzRFOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDZA/dzwRcPEtYGK+jleKUMqaj
GP+DV39kJ9xDVLeg4tXiqHw6k6zXuJrrGGCN5nM7MVPSfWROjOSNtnfQZRnZlHe1
2YamhB9dh+ue69qMkpPZdEP6zTHJysxCvtMaju6CTUVtsQcBcMNjQS5Y7ckfOn86
GuZP5H6Rl7yadk8iw5eA1mG6UKCYP4yZcmxhcLqNyKdiHr8B51UDf6AH6caCNo1f
GxzmyXkuVFn+8NvroEvNRMyAwkIUtrF5xrMBK2GUFPxIZIiwxa9TmtlD3xbl/wfL
PouEBlyP6HQWwd/oSIO8KXqBFnWEp8fIAvPHLnbhjd19qJEjqgPQoyrJ6mstAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU79ZybaAzJwCcTjvkxPVuJHpTTpcwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA3MjUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBStgMA0GCSqGSIb3DQEBCwUAA4IBAQANVSeC
ibkAsll31bLoQirjAGSgWq2BmTvd4IvloFlDDtphNcGfWf78qwlsun5R3w73PpNW
I4Rw04NDm6+JzqrTipeiKQEiQmjCidIcduHhOY1AqDE5C1m047MrxsfSdIx5zntt
nDHPxuxFZQKRIyZHbhQT0sptFzsZPYRspj7SRxTLoVNXCO65TSiC2iZCfv5vuxPZ
YlY/xwfBeyRuwTQ4ytZPrnIoOqn8JUf6pQ/SigdyIgumV0HZ58V52bijAKe9nv3X
LVzpkLDB4g9GetTunrw7h8Gh6PZakNnVKxKbd27bg371JetD+H4Gy7xxR6yIEHY8
5tC1F9WNV5rEryF7
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:24 2024 by rpki-client on console-fra.rpki-client.org