Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207705.roa
File: AS207705.roa (raw, json)
Hash identifier: ylm/7riqT4Q9zTx/4mu0MhUqw19lITs8mA6m5GmjjNY=
Subject key identifier: 99:C6:97:08:6B:15:FA:DC:32:54:E5:1B:64:5D:FB:51:74:79:02:E4
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 757F1EE55F198C108F1F441D9EE978BEA2EE6E3E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207705.roa
Signing time: Tue 05 Dec 2023 02:44:15 +0000
ROA not before: Tue 05 Dec 2023 02:39:15 +0000
ROA not after: Tue 03 Dec 2024 02:44:15 +0000
asID: 207705
IP address blocks: 2a06:a005:210::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:7f:1e:e5:5f:19:8c:10:8f:1f:44:1d:9e:e9:78:be:a2:ee:6e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:15 2023 GMT
Not After : Dec 3 02:44:15 2024 GMT
Subject: CN=99C697086B15FADC3254E51B645DFB51747902E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:54:87:74:32:ab:dc:e6:a1:53:d6:69:70:b7:
39:2b:75:02:28:85:7a:e6:09:f1:eb:cd:b4:a9:47:
26:96:1a:84:4e:1c:47:9f:e7:16:ac:66:66:48:f4:
8e:fa:80:86:c5:81:7f:e2:87:d5:00:bd:f9:37:5b:
4c:47:90:b3:88:b0:85:03:04:84:5f:59:1d:36:a3:
87:ca:fe:a1:70:7f:30:cc:4c:3c:94:48:22:de:29:
23:53:ff:d5:e3:20:54:00:2b:73:d6:e2:9f:78:f6:
e0:18:e1:50:1b:eb:fe:98:02:0c:5d:29:1b:9c:78:
69:16:78:bf:f2:4f:09:10:46:b2:43:f2:b6:1a:9b:
b5:91:1e:8a:d7:4e:5c:2d:a0:39:e9:a0:1c:96:d4:
a2:6c:dd:99:86:b3:33:8f:da:36:27:b9:8b:79:f6:
30:c2:0c:7f:d8:7f:bf:6c:33:3f:78:66:c3:33:8d:
36:23:c3:98:1f:c3:1e:88:99:02:1a:e6:64:b0:30:
5f:7c:a1:1d:e9:16:ec:f7:77:f2:f7:14:bf:19:a5:
37:c0:77:da:4a:b2:3b:31:5e:81:e6:da:66:0c:5a:
74:57:bb:01:43:7e:b9:46:82:59:d2:71:a9:e3:6b:
9d:43:0e:65:9c:7f:47:a3:f7:f6:10:c0:4c:a5:38:
91:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:97:08:6B:15:FA:DC:32:54:E5:1B:64:5D:FB:51:74:79:02:E4
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:210::/44
Signature Algorithm: sha256WithRSAEncryption
a4:ae:c4:a8:af:54:a0:59:da:73:4e:46:c0:e8:da:60:73:9b:
02:35:ae:6d:27:7e:1b:05:dd:3d:95:f9:58:8f:c8:ef:9a:da:
9a:7b:96:96:05:1b:d7:0a:53:dc:32:19:a1:28:c7:f0:37:21:
ca:f5:f4:b4:0b:c7:b9:ae:29:b9:f2:2e:c5:e6:75:fb:92:38:
49:e1:6c:d6:3e:c6:28:73:ec:65:c6:cc:6f:42:5e:53:8d:ce:
e3:da:75:d9:76:be:69:2d:1e:af:57:7e:92:fe:09:27:2c:42:
76:82:cf:f0:31:f7:82:60:52:82:20:50:48:b6:34:b1:d7:f1:
0b:84:c1:dd:70:72:8b:3b:dc:f2:55:54:c3:da:48:a9:89:76:
9b:d8:b9:5d:a4:96:ba:69:10:31:38:86:cb:00:42:45:d5:38:
c8:d5:22:77:dc:0e:66:46:70:1f:57:5c:d2:7a:f1:5e:cd:96:
8d:ea:12:26:49:60:42:b1:ff:19:71:8d:b8:84:f5:98:ac:19:
3e:0c:92:a3:b0:e9:cd:ac:fc:ad:e0:fe:0c:18:15:2f:dd:27:
6d:31:27:7e:c1:40:f0:b2:1c:7c:8b:27:9a:92:bf:c8:5c:ec:
de:81:f1:8d:3f:a8:e1:cc:cd:de:5f:57:f4:93:fb:18:c1:43:
19:fc:a4:1d
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUdX8e5V8ZjBCPH0Qdnul4vqLubj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTVaFw0yNDEyMDMwMjQ0MTVaMDMxMTAvBgNV
BAMTKDk5QzY5NzA4NkIxNUZBREMzMjU0RTUxQjY0NURGQjUxNzQ3OTAyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbVId0Mqvc5qFT1mlwtzkrdQIo
hXrmCfHrzbSpRyaWGoROHEef5xasZmZI9I76gIbFgX/ih9UAvfk3W0xHkLOIsIUD
BIRfWR02o4fK/qFwfzDMTDyUSCLeKSNT/9XjIFQAK3PW4p949uAY4VAb6/6YAgxd
KRuceGkWeL/yTwkQRrJD8rYam7WRHorXTlwtoDnpoByW1KJs3ZmGszOP2jYnuYt5
9jDCDH/Yf79sMz94ZsMzjTYjw5gfwx6ImQIa5mSwMF98oR3pFuz3d/L3FL8ZpTfA
d9pKsjsxXoHm2mYMWnRXuwFDfrlGglnScanja51DDmWcf0ej9/YQwEylOJHZAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUmcaXCGsV+twyVOUbZF37UXR5AuQwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA3NzA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBQIQMA0GCSqGSIb3DQEBCwUAA4IBAQCkrsSo
r1SgWdpzTkbA6Npgc5sCNa5tJ34bBd09lflYj8jvmtqae5aWBRvXClPcMhmhKMfw
NyHK9fS0C8e5rim58i7F5nX7kjhJ4WzWPsYoc+xlxsxvQl5Tjc7j2nXZdr5pLR6v
V36S/gknLEJ2gs/wMfeCYFKCIFBItjSx1/ELhMHdcHKLO9zyVVTD2kipiXab2Lld
pJa6aRAxOIbLAEJF1TjI1SJ33A5mRnAfV1zSevFezZaN6hImSWBCsf8ZcY24hPWY
rBk+DJKjsOnNrPyt4P4MGBUv3SdtMSd+wUDwshx8iyeakr/IXOzegfGNP6jhzM3e
X1f0k/sYwUMZ/KQd
-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org