Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209263.roa
File: AS209263.roa (raw, json)
Hash identifier: vL58DTN4FTKGZsIHbaaEhi/PfsXY14gc8lktRX3EfTk=
Subject key identifier: ED:4E:1F:C1:F0:5F:17:FE:70:09:D4:DC:41:33:D9:80:6C:5D:78:CC
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 29D18DE354A2D75C7764D227854CE60A7DCB78B7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209263.roa
Signing time: Tue 05 Dec 2023 02:44:12 +0000
ROA not before: Tue 05 Dec 2023 02:39:12 +0000
ROA not after: Tue 03 Dec 2024 02:44:12 +0000
asID: 209263
IP address blocks: 2a06:a005:470::/44 maxlen: 48
2a06:a005:1070::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d1:8d:e3:54:a2:d7:5c:77:64:d2:27:85:4c:e6:0a:7d:cb:78:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:12 2023 GMT
Not After : Dec 3 02:44:12 2024 GMT
Subject: CN=ED4E1FC1F05F17FE7009D4DC4133D9806C5D78CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:ac:79:34:f4:ee:71:f0:c5:8f:92:0d:52:
3c:74:7a:e4:ab:67:96:04:82:c8:7d:f5:3e:c6:e7:
08:81:bb:a8:10:0c:98:f7:d7:6c:91:1d:1e:c6:b5:
20:da:41:88:5c:c3:a5:0d:dc:f4:e8:54:0d:69:2c:
d9:ee:40:19:10:e4:3f:76:40:e9:59:d1:39:45:b7:
81:55:77:63:b9:10:a5:7f:42:ec:86:86:3a:d5:20:
82:64:7e:5d:87:0d:a5:24:1b:35:18:46:06:2f:96:
10:8f:f6:2a:b7:d3:5f:6a:46:45:a8:9e:a5:47:0a:
93:5b:f3:dc:7d:1a:f4:3a:99:b9:0e:a2:25:55:a3:
04:c1:58:71:ed:39:35:05:f9:d2:6c:5c:bb:ea:9f:
37:38:89:c9:0a:a4:2a:02:b6:63:8e:d3:53:07:15:
0b:a6:6b:97:7d:a4:77:77:a3:ae:54:b5:9b:fb:d8:
e2:63:10:c7:89:39:12:6d:3a:8a:1c:6e:a5:da:cc:
8d:2a:d3:86:3f:bb:0a:dd:6c:48:2e:dd:e0:ca:80:
24:28:fb:58:99:86:1e:3f:a1:87:f6:ac:1a:78:9a:
b8:86:db:1e:d2:0a:f7:38:87:b5:49:7b:a5:88:0d:
be:94:fc:15:7e:98:af:fa:f7:6f:0c:d0:3a:33:1b:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4E:1F:C1:F0:5F:17:FE:70:09:D4:DC:41:33:D9:80:6C:5D:78:CC
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209263.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:470::/44
2a06:a005:1070::/44
Signature Algorithm: sha256WithRSAEncryption
b3:46:97:2e:37:6f:0e:29:08:a5:a2:a2:6d:20:08:a3:93:43:
79:eb:bb:fe:9f:84:ed:c1:09:bb:4f:ab:95:97:46:b5:bb:b3:
19:9b:04:66:03:77:23:95:f1:80:69:f9:f5:4d:93:06:74:e7:
8c:48:7c:5c:a6:b5:98:70:2f:04:45:15:b7:b8:a7:b6:6c:99:
b0:d2:71:0f:20:2a:82:41:73:ac:1d:16:9e:e1:01:09:85:56:
c2:d8:4b:68:dd:8b:51:77:1d:5d:60:2e:fa:bd:1b:16:d8:46:
c4:c0:7e:e4:f3:e8:29:27:54:3a:c3:c8:7f:66:9f:df:4f:da:
ac:3d:42:8c:79:a2:ce:5c:c3:b2:0a:21:ed:85:5b:58:1c:6c:
2b:cd:1e:1b:d1:69:73:05:fe:fc:12:89:79:38:8f:88:5b:80:
32:42:22:f9:42:6c:bd:80:36:cf:5d:fb:61:b0:d2:4d:5a:ca:
41:4a:ad:91:a1:9b:95:90:9c:d3:71:64:b0:1d:fe:ac:7e:74:
39:82:f7:13:66:51:85:53:34:a9:6f:82:99:ef:8d:72:b0:52:
5c:c5:2a:e9:96:fd:d2:6e:d6:50:33:bb:8b:8b:99:55:28:7f:
fe:1b:5f:44:e9:f2:fc:07:2e:a6:23:44:f4:61:e8:e2:e5:5e:
fe:79:46:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org