Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209100.roa
File: AS209100.roa (raw, json)
Hash identifier: oCfvc3ld/jI11izH/VM7nS33Y5WXGduJqlYVHna3850=
Subject key identifier: 9D:21:4C:25:1C:12:BF:55:0D:27:70:75:E5:BE:A9:8D:B1:12:FD:CC
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6B4CA7366F8BAC66A89C85A5B7B76FE31B8CE30A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209100.roa
Signing time: Tue 05 Dec 2023 02:44:19 +0000
ROA not before: Tue 05 Dec 2023 02:39:19 +0000
ROA not after: Tue 03 Dec 2024 02:44:19 +0000
asID: 209100
IP address blocks: 2a06:a005:d50::/44 maxlen: 48
2a06:a005:d60::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:4c:a7:36:6f:8b:ac:66:a8:9c:85:a5:b7:b7:6f:e3:1b:8c:e3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:19 2023 GMT
Not After : Dec 3 02:44:19 2024 GMT
Subject: CN=9D214C251C12BF550D277075E5BEA98DB112FDCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:2f:b1:cf:9f:13:7e:95:45:87:73:9f:6d:
d1:53:0a:06:7f:4b:c0:94:13:b8:2e:f4:df:26:0b:
40:dc:b6:57:8d:e5:1a:f2:77:2a:2f:e4:cd:b8:7b:
4d:ff:9f:71:6d:7e:0c:59:04:5d:f2:b7:53:05:d4:
99:f0:cc:c2:57:ed:06:d8:0f:4f:16:38:58:a4:c3:
93:5e:30:a5:0f:52:6d:5d:38:a3:22:c4:cd:98:4e:
00:81:06:f1:63:7d:b0:84:67:5c:74:06:57:eb:31:
9c:a8:1e:d4:8b:27:96:d8:29:d2:8d:ee:ba:e8:83:
a1:ef:65:2a:a9:b5:ff:4c:bb:5c:56:90:f0:4f:1d:
70:45:89:49:55:fa:cd:70:b5:b5:3d:52:86:87:cc:
7a:b9:1c:d3:ef:b9:fc:49:78:69:86:a1:0f:8b:f9:
df:56:69:c3:e7:c0:c2:50:de:14:bc:4e:14:8b:bc:
92:24:6b:41:5d:2a:8e:20:82:f6:f6:23:22:0f:ac:
57:e7:c0:c9:0d:c1:b6:69:b3:51:0c:5f:50:56:8f:
36:43:60:0b:ff:85:53:bf:5a:0b:25:48:1d:c0:1c:
3c:9f:e9:31:2e:49:6c:7c:40:87:c1:84:e3:ac:4c:
0c:67:f5:71:e9:73:b2:b3:3c:5b:dd:3b:a9:6a:69:
98:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:21:4C:25:1C:12:BF:55:0D:27:70:75:E5:BE:A9:8D:B1:12:FD:CC
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209100.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:d50::-2a06:a005:d6f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
16:46:6e:69:fe:b1:8f:72:60:05:5d:79:56:14:8c:16:c7:d5:
9a:5b:fa:25:b8:0e:fd:b1:46:a1:f4:0d:98:4c:7b:e1:87:11:
70:4c:3b:2a:ac:1d:be:41:45:d5:98:11:90:30:e7:9a:81:b0:
ca:cd:94:84:91:62:ba:06:bc:47:ab:2f:6a:3a:92:e6:45:eb:
37:6c:fd:80:f7:d2:10:c4:25:e6:41:a0:ae:6b:5b:51:92:ce:
d8:66:02:dc:5e:e8:44:f7:3b:2f:29:60:28:b5:b0:5f:b1:61:
6f:88:e1:e1:96:28:04:2f:e8:bc:37:80:a1:4b:97:37:e7:2c:
42:7b:07:12:7f:11:6a:fc:7f:94:d3:bc:5e:c4:39:9c:b3:31:
a1:18:d9:bd:a3:ff:4e:c5:dc:58:74:79:e3:de:02:e5:ad:2c:
af:d7:eb:76:b9:61:a3:0e:32:91:9b:78:2f:9e:ed:a4:d4:a4:
43:db:bb:25:6d:06:ce:1a:74:6c:a3:b1:4d:d0:66:a0:95:69:
88:c7:35:b2:78:f1:7c:82:7b:9b:46:7d:bf:ce:61:b0:f4:4b:
32:e9:aa:8e:f6:f5:a4:a3:b9:b1:4a:e9:5a:27:c1:45:32:c2:
91:fb:27:9d:53:7a:10:c6:6d:b1:03:7c:99:33:48:b3:ba:2d:
69:31:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:12 2024 by rpki-client on console-fra.rpki-client.org