Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207778.roa
File: AS207778.roa (raw, json)
Hash identifier: o/UqxmHxi7WGnbDL/1+88MNr3wjLdBBqkMbr9EIrIMg=
Subject key identifier: CC:3C:3A:34:9F:12:DC:2E:B8:AA:7A:87:E4:C8:2E:9C:77:1A:43:5E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 49A1DDA4C34F4CE53391BF46DC46099A27A96D47
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207778.roa
Signing time: Tue 05 Dec 2023 02:44:12 +0000
ROA not before: Tue 05 Dec 2023 02:39:12 +0000
ROA not after: Tue 03 Dec 2024 02:44:12 +0000
asID: 207778
IP address blocks: 2a06:a005:1e20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a1:dd:a4:c3:4f:4c:e5:33:91:bf:46:dc:46:09:9a:27:a9:6d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:12 2023 GMT
Not After : Dec 3 02:44:12 2024 GMT
Subject: CN=CC3C3A349F12DC2EB8AA7A87E4C82E9C771A435E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8e:9d:88:87:85:25:4e:c8:05:18:fc:97:20:
f3:ae:4d:9c:da:9f:86:9b:5f:ce:6e:d8:b4:9a:80:
1e:4e:a1:d0:64:ea:ec:6f:d0:e5:77:e6:ee:27:9c:
36:36:ca:f7:81:85:83:99:81:0d:c7:f9:95:1d:c2:
e1:ef:47:41:e4:1d:35:04:2a:6e:0e:f9:6a:bc:a6:
ad:8c:6f:23:35:5b:53:af:dc:09:f1:dd:09:78:85:
fe:75:da:a0:0b:59:e1:c6:77:3f:6f:26:03:27:c2:
65:04:1d:b8:47:a2:d1:11:9f:ac:79:23:7a:d0:1a:
53:40:9c:37:15:e2:c0:30:77:02:c7:87:eb:c1:ee:
a0:b7:31:ac:42:aa:01:d3:f7:da:de:d7:26:6a:32:
22:83:63:23:6e:e4:f4:08:72:30:7c:24:22:af:9a:
3b:54:a5:9b:fa:2e:55:12:47:a9:dc:0f:21:1a:63:
a4:93:1b:8f:27:9b:17:53:1b:83:62:6b:7c:53:3e:
e9:66:a1:7a:9d:72:c9:a0:8c:94:7d:24:49:50:82:
7d:2a:9f:45:3e:59:5a:0d:2d:75:19:7d:8e:bc:84:
aa:6b:26:e7:24:cf:eb:e3:4b:64:ae:97:99:ec:99:
8f:28:de:fd:d8:40:c9:4e:cc:a9:87:07:6c:7a:c1:
99:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3C:3A:34:9F:12:DC:2E:B8:AA:7A:87:E4:C8:2E:9C:77:1A:43:5E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207778.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1e20::/44
Signature Algorithm: sha256WithRSAEncryption
09:3a:01:92:c4:e2:87:9f:31:02:06:c2:d3:b4:70:ef:e4:92:
70:a3:62:62:d5:22:ea:da:a8:30:2a:65:4c:94:c8:3d:3a:ef:
6b:97:6c:39:8a:d3:73:f1:2a:25:fd:fc:55:65:23:a8:61:1c:
95:af:4f:9f:95:de:9e:b7:4d:d0:91:3b:f1:95:71:19:5b:81:
31:06:54:8a:0a:28:13:c4:63:e2:d7:a3:a9:78:60:f9:88:70:
70:71:1b:1c:f1:d2:94:06:b6:7f:54:a1:21:b9:43:88:d3:ec:
0f:c6:39:9c:14:5b:61:27:5e:98:5c:5e:89:71:33:f4:30:1d:
72:2c:65:61:b8:3a:ae:e9:a1:6c:2a:5c:6e:a2:dc:4b:63:15:
39:df:5e:92:d8:6d:79:ce:aa:2c:4d:ce:32:bf:a1:3a:98:dd:
ff:00:89:4b:eb:43:36:e9:c8:fa:80:9c:b7:8e:20:cc:84:49:
54:47:0c:1d:b1:63:96:a1:52:06:96:e1:a9:d4:ae:aa:a6:50:
3e:c5:e8:5f:4f:6f:00:1a:53:fc:9f:1d:d4:57:a2:bb:c2:bf:
75:66:c2:0e:79:d1:58:a0:11:23:8a:c7:3c:18:bf:53:cc:e8:
a9:ec:4e:ea:16:80:19:12:09:fb:b3:30:d8:4e:2f:1b:64:ef:
2f:c0:32:ce
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUSaHdpMNPTOUzkb9G3EYJmiepbUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTJaFw0yNDEyMDMwMjQ0MTJaMDMxMTAvBgNV
BAMTKENDM0MzQTM0OUYxMkRDMkVCOEFBN0E4N0U0QzgyRTlDNzcxQTQzNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvjp2Ih4UlTsgFGPyXIPOuTZza
n4abX85u2LSagB5OodBk6uxv0OV35u4nnDY2yveBhYOZgQ3H+ZUdwuHvR0HkHTUE
Km4O+Wq8pq2MbyM1W1Ov3Anx3Ql4hf512qALWeHGdz9vJgMnwmUEHbhHotERn6x5
I3rQGlNAnDcV4sAwdwLHh+vB7qC3MaxCqgHT99re1yZqMiKDYyNu5PQIcjB8JCKv
mjtUpZv6LlUSR6ncDyEaY6STG48nmxdTG4Nia3xTPulmoXqdcsmgjJR9JElQgn0q
n0U+WVoNLXUZfY68hKprJuckz+vjS2Sul5nsmY8o3v3YQMlOzKmHB2x6wZkFAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUzDw6NJ8S3C64qnqH5MgunHcaQ14wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA3Nzc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBR4gMA0GCSqGSIb3DQEBCwUAA4IBAQAJOgGS
xOKHnzECBsLTtHDv5JJwo2Ji1SLq2qgwKmVMlMg9Ou9rl2w5itNz8Sol/fxVZSOo
YRyVr0+fld6et03QkTvxlXEZW4ExBlSKCigTxGPi16OpeGD5iHBwcRsc8dKUBrZ/
VKEhuUOI0+wPxjmcFFthJ16YXF6JcTP0MB1yLGVhuDqu6aFsKlxuotxLYxU5316S
2G15zqosTc4yv6E6mN3/AIlL60M26cj6gJy3jiDMhElURwwdsWOWoVIGluGp1K6q
plA+xehfT28AGlP8nx3UV6K7wr91ZsIOedFYoBEjisc8GL9TzOip7E7qFoAZEgn7
szDYTi8bZO8vwDLO
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org