Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209554.roa
File: AS209554.roa (raw, json)
Hash identifier: EALTqzrn04W3cfe7GZVU6V7RS/ffKkRHSy3vQPed7zc=
Subject key identifier: B0:5A:B9:EB:BD:4E:48:D0:F4:86:96:AE:18:47:CC:C9:B0:2A:4C:D9
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 319B2DA4CB0053A750D4BC53CEA5989A9EB5A6FA
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209554.roa
Signing time: Tue 26 Dec 2023 15:44:21 +0000
ROA not before: Tue 26 Dec 2023 15:39:21 +0000
ROA not after: Tue 24 Dec 2024 15:44:21 +0000
asID: 209554
IP address blocks: 2a06:a005:b6e::/48 maxlen: 48
2a06:a005:1872::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:9b:2d:a4:cb:00:53:a7:50:d4:bc:53:ce:a5:98:9a:9e:b5:a6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 26 15:39:21 2023 GMT
Not After : Dec 24 15:44:21 2024 GMT
Subject: CN=B05AB9EBBD4E48D0F48696AE1847CCC9B02A4CD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:fe:52:b2:39:99:c8:96:ed:2b:4a:5a:a9:
fe:b0:40:0c:0d:ba:bb:6c:96:63:c4:48:f8:b2:b3:
ca:e5:25:f2:3e:4a:44:cf:3d:db:13:16:62:f3:af:
05:78:05:9a:86:89:2f:55:5b:ce:f2:51:20:64:ed:
a9:56:f9:4e:2c:10:d8:0c:7f:78:82:f5:e5:2e:4b:
57:b9:e7:3b:76:d7:62:a7:47:73:85:05:44:38:92:
ef:e7:a3:f7:76:96:8d:2b:41:27:63:ec:fd:ba:da:
eb:e9:aa:f2:ab:6b:81:65:0e:9e:97:1f:ee:69:10:
1b:2f:ef:ad:a9:e8:f6:89:ce:44:89:c1:dc:21:44:
0b:ad:c1:19:17:89:ea:5d:31:18:ee:e0:cc:db:71:
d4:79:a1:bb:06:bf:58:64:f0:d8:63:c5:9a:03:c4:
d2:ff:13:d2:6f:63:49:ab:6d:1b:12:b8:95:88:9d:
15:d6:8f:05:7f:3a:15:06:7a:e1:d2:40:91:fc:4c:
68:ae:bc:f5:d6:1e:88:f5:3b:2a:7d:f1:33:b2:b8:
c7:96:fa:94:c4:35:62:26:72:75:fa:3d:4b:71:62:
67:80:45:ce:0a:84:f9:83:21:41:f7:52:1f:1e:98:
ed:56:f8:1d:e7:6e:bf:5e:ee:2b:27:e9:c8:16:f1:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5A:B9:EB:BD:4E:48:D0:F4:86:96:AE:18:47:CC:C9:B0:2A:4C:D9
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209554.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:b6e::/48
2a06:a005:1872::/48
Signature Algorithm: sha256WithRSAEncryption
79:8c:76:7c:ad:03:ba:a2:3a:30:e2:54:df:b4:80:37:4f:52:
dc:88:24:59:ef:8d:c3:13:8f:c6:dd:91:b2:dc:43:65:e6:b8:
5f:11:09:82:dc:0c:28:1a:22:39:0f:72:55:a2:39:ff:8c:54:
31:2e:83:53:55:ae:46:f3:c7:84:7d:5f:ec:02:b6:3c:49:7e:
49:f2:c0:49:bd:00:e8:0b:a7:e2:72:5e:cb:ad:f1:a2:d8:e6:
74:06:2c:ea:aa:d0:7e:13:ea:62:55:a9:52:82:f2:1c:aa:a7:
21:09:45:bd:5a:77:01:19:db:76:90:b7:4e:f6:82:0b:c4:b9:
b8:72:98:1e:24:c4:34:03:75:19:19:4d:67:07:01:69:6b:15:
09:de:83:b4:a2:0a:11:f4:97:c9:5a:8a:23:26:33:39:b1:f9:
0d:08:13:c4:31:88:50:69:6a:4e:79:93:2e:0a:d3:d3:e0:77:
0c:75:69:76:82:6f:6e:54:fc:58:6b:3c:a3:b3:4c:88:16:6c:
d1:da:d0:20:f0:d7:0b:45:cd:c7:f1:e2:1f:30:30:bb:50:ff:
5e:e6:a8:f4:79:f6:b9:ba:24:49:80:42:62:b5:bf:a5:5f:9a:
df:d9:8d:7c:a3:54:58:68:03:00:6a:f1:93:99:60:a7:7d:87:
54:8e:ed:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org