Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209263.roa
File: AS209263.roa (raw, json)
Hash identifier: xx/pOrheGnIVZv7XDgIAdg6jmN4ceQ9PF24siYcVwVA=
Subject key identifier: A9:F0:27:E7:5C:0B:57:9D:AE:BA:4F:5D:5E:3C:04:6D:20:3E:25:CB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 7AB833F121C98E4BD84D20DC2046B88B376E1A22
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209263.roa
Signing time: Tue 05 Nov 2024 03:40:04 +0000
ROA not before: Tue 05 Nov 2024 03:35:04 +0000
ROA not after: Tue 04 Nov 2025 03:40:04 +0000
asID: 209263
IP address blocks: 2a06:a005:470::/44 maxlen: 48
2a06:a005:1070::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b8:33:f1:21:c9:8e:4b:d8:4d:20:dc:20:46:b8:8b:37:6e:1a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:04 2024 GMT
Not After : Nov 4 03:40:04 2025 GMT
Subject: CN=A9F027E75C0B579DAEBA4F5D5E3C046D203E25CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:27:94:e6:f7:8b:e9:21:b2:73:7e:e8:5c:
a7:fb:b6:99:bb:18:9d:cd:94:01:c3:00:e8:77:51:
ef:ab:4e:df:f3:ad:41:b4:ab:8d:e3:de:5a:cf:55:
3d:95:75:ba:bc:0c:e2:ae:86:35:df:7c:b3:31:ef:
96:e1:4e:a6:4b:79:e5:54:cd:f8:37:3b:9b:a9:55:
0b:55:6d:af:d2:aa:f6:84:c7:b7:b6:07:c7:22:4e:
c8:ca:4b:65:05:aa:82:39:45:37:40:ea:ec:d9:19:
b4:ac:56:d3:f1:04:6d:4d:4f:e3:31:c9:c4:35:91:
0e:ba:dc:ab:5c:db:cf:02:64:7a:5c:d5:62:c6:07:
7d:05:7a:f3:bc:f8:14:d6:8f:ca:e2:78:49:f0:78:
ec:33:d3:82:6d:1d:1f:40:fe:c6:91:b8:42:ce:56:
4a:92:9b:fe:0f:2f:84:2e:f9:ca:56:17:db:72:44:
6a:5e:84:57:02:81:6d:e4:ca:34:ee:25:fa:5b:f4:
77:ca:c4:37:91:c4:d5:12:97:46:51:34:b9:4f:10:
50:67:31:88:7b:cf:0a:2b:e2:4f:16:2a:8f:68:4d:
88:85:6c:af:b7:2b:a7:60:94:8d:b9:e4:9b:6f:0b:
f6:a5:47:02:d0:2c:4b:a7:b3:9c:8e:c0:9d:f7:98:
49:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:27:E7:5C:0B:57:9D:AE:BA:4F:5D:5E:3C:04:6D:20:3E:25:CB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209263.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:470::/44
2a06:a005:1070::/44
Signature Algorithm: sha256WithRSAEncryption
cf:35:00:59:4e:83:c5:35:2b:d9:ab:fc:99:56:6d:1b:6c:e0:
1c:ba:1f:f4:f5:29:b1:07:99:22:d7:a8:94:dc:cf:d2:9c:be:
6a:4a:af:b1:7d:9d:39:ff:db:e0:5a:16:f2:c1:78:b8:e9:57:
a1:09:6a:d6:aa:ab:2b:c5:09:b3:13:70:07:88:88:9f:dd:c1:
73:43:71:3e:99:de:aa:73:0f:e4:72:4a:8c:28:bf:9b:5a:c2:
88:a7:57:3b:00:2f:29:6d:0d:c0:47:79:af:7e:33:e4:21:3f:
31:8f:65:fc:07:5f:42:a4:29:95:20:0b:84:5a:e4:5a:9e:b5:
87:4c:ff:6b:d5:3a:c2:57:32:12:b3:5c:0f:00:ea:ba:66:32:
bf:d6:a5:54:2b:ab:b3:f5:26:ab:8e:be:a2:7b:c1:12:4b:79:
04:a1:00:d7:00:7d:2c:b4:f9:cd:1a:ae:59:8d:d4:3e:4a:ce:
a4:89:13:c3:48:8e:45:3b:33:88:56:f6:6e:ae:f9:40:e8:f9:
58:b9:57:31:7c:9f:f6:39:20:ea:ce:83:f2:9a:99:43:dd:14:
10:3f:4a:11:b2:ce:5b:eb:3d:40:af:9c:08:0c:c0:48:e1:a9:
59:9f:70:3d:cd:d1:71:5d:01:b6:2c:7a:67:99:2a:66:ab:2c:
08:b7:ef:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:11 2024 by rpki-client on console-ams.rpki-client.org