Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209100.roa
File: AS209100.roa (raw, json)
Hash identifier: XiiZyYYgPVWNSguobDCeGXRucRlBho2DaUSp5TAz8UQ=
Subject key identifier: 2C:A1:5B:E4:44:E4:C4:72:F2:B7:21:E1:73:39:41:06:88:D8:9E:43
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 695B9C5797A0936FB3769615B00135AFF51F5652
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209100.roa
Signing time: Tue 05 Nov 2024 03:40:08 +0000
ROA not before: Tue 05 Nov 2024 03:35:08 +0000
ROA not after: Tue 04 Nov 2025 03:40:08 +0000
asID: 209100
IP address blocks: 2a06:a005:d50::/44 maxlen: 48
2a06:a005:d60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5b:9c:57:97:a0:93:6f:b3:76:96:15:b0:01:35:af:f5:1f:56:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:08 2024 GMT
Not After : Nov 4 03:40:08 2025 GMT
Subject: CN=2CA15BE444E4C472F2B721E17339410688D89E43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:55:77:60:c5:d6:ff:7b:6a:1b:46:05:6f:c2:
59:9b:41:a8:e0:f7:3d:81:52:67:1b:58:95:e4:09:
c6:1d:a6:0c:be:00:d7:ce:f6:93:24:3a:c0:96:a5:
2e:81:69:95:4b:b0:76:1c:ee:72:48:46:46:61:76:
2a:86:e4:33:6d:ca:40:31:34:be:1e:2b:63:ec:ee:
cb:4c:4a:97:9d:73:bc:50:f1:07:bb:ad:bc:56:9f:
33:0f:60:8a:b4:8f:29:c6:32:f6:fb:b8:ba:33:20:
de:3c:4e:da:1d:c7:3d:a1:46:11:2f:5e:2d:75:af:
c4:c0:f0:26:76:36:d8:ce:38:5a:b3:e2:7d:8c:65:
42:7d:bc:00:ec:99:cf:d5:8f:d3:82:37:97:e6:c3:
c4:92:b2:2a:d2:df:ed:c6:24:68:ab:88:5a:da:2c:
d1:5f:7b:28:77:b3:f3:95:2a:16:bd:6b:a1:23:e1:
c1:19:42:c9:8e:76:01:0c:0f:e3:36:b1:3e:ee:92:
fd:71:12:7b:1e:39:14:88:74:dd:3c:7e:98:6a:4b:
d6:7b:a7:f1:7a:01:56:ad:98:59:b6:65:70:70:8a:
f0:7f:6e:ac:a0:4f:7c:a9:0d:9f:74:6e:dd:5f:d9:
72:0c:c7:4c:f3:85:7b:67:20:31:4c:b9:f4:50:9d:
57:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A1:5B:E4:44:E4:C4:72:F2:B7:21:E1:73:39:41:06:88:D8:9E:43
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d50::-2a06:a005:d6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:e3:58:81:51:70:4f:42:fe:4f:21:e2:71:09:6c:77:e0:3f:
c3:82:7c:ae:02:b2:63:45:c7:31:da:6e:ec:79:a7:b8:fa:c8:
20:f6:dc:80:fe:73:18:fb:4e:57:3a:9b:3e:c7:71:7d:6f:12:
d2:65:a7:5b:f2:d1:bc:25:94:78:f7:e6:c8:86:1d:9d:a0:df:
68:e2:30:15:9d:3b:71:4d:32:24:40:8a:f6:30:fe:26:2e:7e:
c0:2a:86:d3:9b:77:26:86:93:cd:30:8d:98:9b:6e:48:26:99:
fb:af:80:6c:ec:fb:b4:f8:ce:9f:ef:c5:d5:83:f5:c9:b7:8a:
f2:82:a4:8d:4a:0c:16:90:33:48:ea:37:7d:49:c8:5f:7c:da:
7f:6f:85:ff:52:a9:c8:6c:c6:85:30:a6:76:9c:34:3e:e9:da:
cf:c9:c3:16:f7:52:d4:fb:f1:57:bf:f2:6b:50:4c:f5:42:d4:
73:21:43:f7:25:6e:28:53:07:17:7a:e9:20:32:dd:1f:9a:64:
15:9f:16:ce:62:b8:b0:70:fc:5c:29:2a:c4:40:23:87:0a:51:
22:ae:da:f9:45:ef:7a:f8:25:c0:67:5c:3e:72:b7:02:f6:a1:
65:b8:7b:d4:2c:e6:91:43:3f:1b:ed:c3:0c:93:2d:6e:37:43:
05:c6:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:11 2024 by rpki-client on console-ams.rpki-client.org