Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207778.roa
File: AS207778.roa (raw, json)
Hash identifier: FXNlgkcuzW1eY3kyB2jtlJ+6Vfbf3mq/uGIZG4QRMxw=
Subject key identifier: ED:6D:65:ED:93:FE:A5:5F:3D:CD:38:E5:9E:E1:79:5D:4F:6A:E1:3D
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 502C01597440CE6CC851E87B8C0B56D1F784B223
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207778.roa
Signing time: Tue 05 Nov 2024 03:40:06 +0000
ROA not before: Tue 05 Nov 2024 03:35:06 +0000
ROA not after: Tue 04 Nov 2025 03:40:06 +0000
asID: 207778
IP address blocks: 2a06:a005:1e20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2c:01:59:74:40:ce:6c:c8:51:e8:7b:8c:0b:56:d1:f7:84:b2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:06 2024 GMT
Not After : Nov 4 03:40:06 2025 GMT
Subject: CN=ED6D65ED93FEA55F3DCD38E59EE1795D4F6AE13D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:24:05:7e:6a:57:11:7b:8f:2d:02:0d:94:
ca:5e:6f:85:6f:8f:4b:8c:e6:f2:9c:df:8a:93:93:
ce:86:e8:8c:55:eb:b3:c2:c2:dc:15:57:60:dd:7b:
f9:29:98:6d:a4:6a:39:21:a5:70:ee:2b:96:47:74:
d4:c6:a1:4d:c4:42:f7:c1:d0:c8:b6:b7:a7:3b:aa:
43:64:01:5a:b2:08:71:03:45:63:0e:fa:fe:fa:4e:
80:a4:c1:93:23:31:9f:36:a5:d9:91:ec:6d:6e:81:
15:23:9f:ad:ba:24:3d:13:23:8f:6e:ec:75:bb:98:
ba:52:d2:ac:be:22:8e:6e:4b:69:b1:d4:3e:bb:fa:
ab:f8:6f:fe:fa:09:de:52:53:3b:27:a5:31:35:6b:
47:52:e1:48:e8:38:23:25:5e:05:d4:8f:24:36:7c:
38:86:12:be:61:a0:90:9f:5b:b0:4f:53:4c:24:62:
f0:ad:04:8b:35:11:e4:42:fb:98:60:8b:94:55:d0:
2d:25:8a:16:bb:83:fd:b0:2c:11:44:3a:f7:9d:70:
98:da:de:39:01:d9:99:2e:23:ef:9d:f5:dd:9e:e3:
9f:81:aa:67:6a:a5:56:e0:f3:55:90:04:2b:d8:7e:
d1:00:0c:83:2f:25:d3:4f:b8:de:85:a0:ea:6d:bc:
a4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6D:65:ED:93:FE:A5:5F:3D:CD:38:E5:9E:E1:79:5D:4F:6A:E1:3D
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207778.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e20::/44
Signature Algorithm: sha256WithRSAEncryption
3e:9b:05:c5:a3:b5:bf:dc:24:6f:ff:13:11:07:51:08:e1:c9:
25:af:78:14:88:22:12:de:8c:08:91:69:8b:44:3b:9d:47:0a:
f7:2b:7c:e0:55:03:38:98:87:45:f0:18:3f:57:54:be:5a:34:
de:4a:70:86:49:f5:43:7e:52:0c:b6:0b:f3:fd:cf:1d:93:30:
fe:5c:a6:65:be:44:9d:13:ca:c3:82:09:53:ba:fa:df:ef:4c:
72:6f:26:df:03:14:a1:b4:ab:90:dc:e1:18:7e:25:50:47:2b:
b3:9a:d6:5f:c2:d3:b7:90:27:c4:2a:cf:52:ae:c9:3a:58:2a:
42:0e:b5:46:3b:f9:95:79:fa:59:ee:20:f9:92:f3:74:ee:ad:
88:6d:65:ad:c5:79:d1:aa:24:93:83:e9:65:6e:12:97:aa:55:
34:7c:43:c1:5b:e8:7f:70:1d:26:2e:76:48:3b:79:34:89:08:
aa:95:99:73:be:c4:a1:a8:3c:a5:a8:1e:e0:db:de:a2:94:5c:
9a:7f:23:00:e3:62:79:88:23:8d:53:1d:b5:65:23:31:5e:ae:
f2:5a:60:32:cd:2e:10:13:02:0c:f9:50:a2:54:10:17:d0:05:
ea:9b:6a:21:e4:d5:f4:61:76:85:c0:81:72:63:a2:fa:99:34:
e2:e4:10:20
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUUCwBWXRAzmzIUeh7jAtW0feEsiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDZaFw0yNTExMDQwMzQwMDZaMDMxMTAvBgNV
BAMTKEVENkQ2NUVEOTNGRUE1NUYzRENEMzhFNTlFRTE3OTVENEY2QUUxM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNziQFfmpXEXuPLQINlMpeb4Vv
j0uM5vKc34qTk86G6IxV67PCwtwVV2Dde/kpmG2kajkhpXDuK5ZHdNTGoU3EQvfB
0Mi2t6c7qkNkAVqyCHEDRWMO+v76ToCkwZMjMZ82pdmR7G1ugRUjn626JD0TI49u
7HW7mLpS0qy+Io5uS2mx1D67+qv4b/76Cd5SUzsnpTE1a0dS4UjoOCMlXgXUjyQ2
fDiGEr5hoJCfW7BPU0wkYvCtBIs1EeRC+5hgi5RV0C0liha7g/2wLBFEOvedcJja
3jkB2ZkuI++d9d2e45+BqmdqpVbg81WQBCvYftEADIMvJdNPuN6FoOptvKSRAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQU7W1l7ZP+pV89zTjlnuF5XU9q4T0wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA3Nzc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBR4gMA0GCSqGSIb3DQEBCwUAA4IBAQA+mwXF
o7W/3CRv/xMRB1EI4cklr3gUiCIS3owIkWmLRDudRwr3K3zgVQM4mIdF8Bg/V1S+
WjTeSnCGSfVDflIMtgvz/c8dkzD+XKZlvkSdE8rDgglTuvrf70xybybfAxShtKuQ
3OEYfiVQRyuzmtZfwtO3kCfEKs9Srsk6WCpCDrVGO/mVefpZ7iD5kvN07q2IbWWt
xXnRqiSTg+llbhKXqlU0fEPBW+h/cB0mLnZIO3k0iQiqlZlzvsShqDylqB7g296i
lFyafyMA42J5iCONUx21ZSMxXq7yWmAyzS4QEwIM+VCiVBAX0AXqm2oh5NX0YXaF
wIFyY6L6mTTi5BAg
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:21 2024 by rpki-client on console-ams.rpki-client.org