Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209165.roa
File: AS209165.roa (raw, json)
Hash identifier: 7maElBVz2wlnf1yjphdYrCE4NLStwes+Pbr7GI2+Ogs=
Subject key identifier: D1:A9:D6:5B:53:AE:D2:3B:77:59:CE:B3:CE:88:19:97:3C:75:28:3E
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0604A981A674A11BBCC2DB36D2C438F4FDA483E0
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209165.roa
Signing time: Sun 18 Feb 2024 23:44:24 +0000
ROA not before: Sun 18 Feb 2024 23:39:24 +0000
ROA not after: Sun 16 Feb 2025 23:44:24 +0000
asID: 209165
IP address blocks: 2a06:a005:1801::/48 maxlen: 48
2a06:a005:26cc::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:04:a9:81:a6:74:a1:1b:bc:c2:db:36:d2:c4:38:f4:fd:a4:83:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 18 23:39:24 2024 GMT
Not After : Feb 16 23:44:24 2025 GMT
Subject: CN=D1A9D65B53AED23B7759CEB3CE8819973C75283E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3b:ba:ac:52:36:13:1f:9b:c4:07:b7:be:08:
0a:4b:08:e4:df:b3:21:9b:12:0b:00:94:35:bd:23:
23:26:1c:52:ac:07:c9:1a:32:3e:73:21:88:79:68:
d1:f5:71:49:7d:64:5b:4a:5c:9d:4b:2f:52:0f:97:
39:17:44:61:49:28:52:36:be:4d:63:2d:37:3e:56:
ec:72:b0:e3:d3:6b:45:de:4b:41:41:e4:30:68:98:
2e:29:23:35:fd:68:63:2a:31:04:78:56:02:0e:1e:
c6:c7:ed:f5:de:9d:5a:18:80:8a:4e:05:1e:1c:94:
ef:af:c2:3c:b1:d5:55:91:e8:59:b0:f0:49:79:1b:
ca:0d:48:ac:4c:cd:16:06:9f:0f:31:82:8a:ef:2d:
6b:97:e2:ac:37:df:95:b9:7b:0c:1b:fa:4d:02:95:
8d:d7:98:b5:eb:fd:48:e8:cd:ea:21:d0:49:f7:51:
ae:1e:89:dd:e8:36:68:51:e0:a9:a3:67:cd:80:11:
ef:12:a1:6f:24:cd:1c:48:38:7d:59:5b:57:b2:07:
18:04:ac:03:6c:0b:5e:d7:17:98:4d:c3:15:73:f4:
1a:80:06:0d:3b:08:75:81:91:f7:9b:00:81:63:46:
9a:a8:bf:e7:75:3a:3f:48:8a:fd:51:ae:9f:2d:73:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A9:D6:5B:53:AE:D2:3B:77:59:CE:B3:CE:88:19:97:3C:75:28:3E
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209165.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1801::/48
2a06:a005:26cc::/47
Signature Algorithm: sha256WithRSAEncryption
79:c5:f8:c0:39:dd:9c:45:f7:6a:83:d0:2d:e9:1d:d9:ee:65:
31:34:30:ba:5c:63:e2:74:4d:79:64:28:31:32:93:8d:5e:91:
03:5f:a4:4a:a2:c6:0e:23:63:73:33:73:2b:40:f2:44:e7:2c:
13:df:b8:ce:3b:7e:b8:d8:48:98:1b:af:03:03:8e:c0:70:02:
a8:4e:89:7c:fa:af:0e:8a:a1:5f:08:28:ef:fb:d6:46:a1:fc:
fe:de:27:30:9d:e0:24:7d:b5:88:74:53:c8:04:5d:e1:4a:82:
a9:34:f5:a5:80:21:ec:c8:9c:6e:21:19:8a:cc:d8:9b:82:be:
c9:07:4d:6f:75:d1:eb:6b:61:4f:13:3e:c1:c8:52:e5:79:e4:
2e:54:3f:a7:a9:56:8e:21:98:d4:f7:e5:ae:5e:57:08:fe:ee:
6a:a1:a6:57:22:2d:6f:45:31:7e:00:1a:30:4f:43:3e:d4:c4:
74:8d:bd:a2:b3:e0:32:4e:82:dd:09:44:39:c8:fd:15:e4:4e:
57:a3:2f:67:b3:7e:19:6f:25:5a:82:89:d4:f7:13:89:1e:32:
bd:66:5f:5b:b9:b5:34:84:1a:77:eb:7f:24:d6:60:3b:63:d7:
7f:95:f0:dd:de:83:08:07:79:39:41:0c:71:27:5b:95:e2:36:
1d:cc:60:ac
-----BEGIN CERTIFICATE-----
MIIE8TCCA9mgAwIBAgIUBgSpgaZ0oRu8wts20sQ49P2kg+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMTgyMzM5MjRaFw0yNTAyMTYyMzQ0MjRaMDMxMTAvBgNV
BAMTKEQxQTlENjVCNTNBRUQyM0I3NzU5Q0VCM0NFODgxOTk3M0M3NTI4M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2O7qsUjYTH5vEB7e+CApLCOTf
syGbEgsAlDW9IyMmHFKsB8kaMj5zIYh5aNH1cUl9ZFtKXJ1LL1IPlzkXRGFJKFI2
vk1jLTc+VuxysOPTa0XeS0FB5DBomC4pIzX9aGMqMQR4VgIOHsbH7fXenVoYgIpO
BR4clO+vwjyx1VWR6Fmw8El5G8oNSKxMzRYGnw8xgorvLWuX4qw335W5ewwb+k0C
lY3XmLXr/Ujozeoh0En3Ua4eid3oNmhR4KmjZ82AEe8SoW8kzRxIOH1ZW1eyBxgE
rANsC17XF5hNwxVz9BqABg07CHWBkfebAIFjRpqov+d1Oj9Iiv1Rrp8tcwRFAgMB
AAGjggH7MIIB9zAdBgNVHQ4EFgQU0anWW1Ou0jt3Wc6zzogZlzx1KD4wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjA5MTY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEH
AQH/BBwwGjAYBAIAAjASAwcAKgagBRgBAwcBKgagBSbMMA0GCSqGSIb3DQEBCwUA
A4IBAQB5xfjAOd2cRfdqg9At6R3Z7mUxNDC6XGPidE15ZCgxMpONXpEDX6RKosYO
I2NzM3MrQPJE5ywT37jOO3642EiYG68DA47AcAKoTol8+q8OiqFfCCjv+9ZGofz+
3icwneAkfbWIdFPIBF3hSoKpNPWlgCHsyJxuIRmKzNibgr7JB01vddHra2FPEz7B
yFLleeQuVD+nqVaOIZjU9+WuXlcI/u5qoaZXIi1vRTF+ABowT0M+1MR0jb2is+Ay
ToLdCUQ5yP0V5E5Xoy9ns34ZbyVagonU9xOJHjK9Zl9bubU0hBp3638k1mA7Y9d/
lfDd3oMIB3k5QQxxJ1uV4jYdzGCs
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org