Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208046.roa
File: AS208046.roa (raw, json)
Hash identifier: QvPP4nwmcUoS5xUtY1crPca5PGsG0qe0H2izcRR7X7A=
Subject key identifier: 15:77:64:AB:C9:CC:A2:39:F8:29:C7:16:AE:92:A2:E7:1F:FB:E7:69
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 47C811C8D04035219C2157579D65D2A82D323DC3
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208046.roa
Signing time: Tue 05 Dec 2023 02:44:15 +0000
ROA not before: Tue 05 Dec 2023 02:39:15 +0000
ROA not after: Tue 03 Dec 2024 02:44:15 +0000
asID: 208046
IP address blocks: 5.253.84.0/24 maxlen: 24
5.253.86.0/24 maxlen: 24
185.99.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c8:11:c8:d0:40:35:21:9c:21:57:57:9d:65:d2:a8:2d:32:3d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:15 2023 GMT
Not After : Dec 3 02:44:15 2024 GMT
Subject: CN=157764ABC9CCA239F829C716AE92A2E71FFBE769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:84:70:9b:5b:5b:97:db:20:e2:f2:97:a7:
88:b2:8e:e5:5d:e0:78:49:1b:5b:08:35:63:e6:75:
55:a1:76:3f:78:26:3f:11:1f:3d:42:73:32:08:df:
18:56:26:01:99:54:42:71:80:df:29:e7:be:5e:e5:
8d:aa:a6:5b:50:19:e4:e3:80:c1:66:10:cd:93:5d:
63:4e:90:2c:62:2f:a7:f9:58:d3:47:86:6b:0b:7f:
66:8e:cc:80:90:6a:14:84:0d:7b:2a:14:b7:c0:bc:
2b:8d:08:e3:3c:d3:cf:86:71:8f:92:33:81:02:7c:
68:1b:37:af:53:7e:be:d2:5a:bf:5a:9d:bd:95:f1:
ee:97:49:f3:88:51:36:7e:2b:b7:46:cc:e4:94:8a:
c9:2c:84:b0:59:0b:d3:28:54:54:b9:aa:c8:31:89:
c5:f8:11:c8:94:c2:d1:d9:c0:0d:51:6a:ce:0c:f0:
fd:aa:95:4d:2d:1f:84:b5:39:f1:c5:60:30:57:b4:
29:a3:2e:e7:78:33:f6:84:89:91:05:8d:ce:84:f2:
3f:d8:73:2e:3d:3a:46:15:94:f8:6a:50:0f:91:e1:
40:b2:ba:15:1d:1d:03:18:49:56:49:46:24:3d:52:
98:81:2a:19:a1:7b:16:c8:aa:a8:2a:c7:b1:93:2f:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:64:AB:C9:CC:A2:39:F8:29:C7:16:AE:92:A2:E7:1F:FB:E7:69
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS208046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.84.0/24
5.253.86.0/24
185.99.135.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:4a:7b:dd:24:bd:46:be:21:fc:b6:10:b6:93:1b:ad:74:1e:
cc:43:d4:f1:79:7f:90:19:ae:b0:89:bb:d9:c4:5e:1c:49:ad:
79:23:b4:ce:ff:f8:15:9e:82:2f:ab:51:50:65:30:c6:74:96:
f1:f6:6a:1b:45:ae:8b:f5:10:cd:72:22:7b:48:79:26:4c:c9:
13:40:0a:78:15:e9:71:ba:22:ec:3f:a4:8b:f4:45:20:a5:95:
d7:d1:bb:28:a2:8a:fa:47:52:ce:bf:6e:d7:a8:09:e2:b8:2e:
11:66:00:af:95:8f:30:2b:28:a9:12:c4:03:ad:f6:2c:de:af:
5e:87:fe:b2:98:88:bb:42:44:18:ce:1e:17:a9:5e:19:ae:77:
4c:00:65:3c:30:e9:94:7d:ff:9c:b7:4d:c8:c8:58:d6:70:c9:
31:64:b3:97:3c:0d:00:2e:d0:dc:36:94:b1:c5:77:da:e4:88:
87:2e:c4:ff:9e:1b:c9:b8:ed:ed:1c:b8:93:92:9b:7c:af:72:
ab:88:0a:dc:10:17:80:cb:68:9e:3e:a5:0a:a6:6f:70:0f:f2:
a1:1a:c9:c5:1e:0c:4f:85:cf:67:12:98:0c:35:8c:65:86:a8:
cc:19:13:82:b8:b6:4d:1a:ce:0f:a5:07:30:7a:76:63:16:f3:
b1:a6:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:32:56 2024 by rpki-client on console-fra.rpki-client.org