Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210199.roa
File: AS210199.roa (raw, json)
Hash identifier: SIz0IWrq5KEyVdGc1qsfMKlnOC9kT4bvVVu2a8aX0lo=
Subject key identifier: B5:58:5B:80:20:F2:98:43:37:12:31:7E:F9:4F:5C:74:8C:DB:E7:61
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: BBF12CBCC900BDD7BE55144AE87A426D186240
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210199.roa
Signing time: Fri 09 Feb 2024 18:44:24 +0000
ROA not before: Fri 09 Feb 2024 18:39:24 +0000
ROA not after: Fri 07 Feb 2025 18:44:24 +0000
asID: 210199
IP address blocks: 2a06:a005:487::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
bb:f1:2c:bc:c9:00:bd:d7:be:55:14:4a:e8:7a:42:6d:18:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Feb 9 18:39:24 2024 GMT
Not After : Feb 7 18:44:24 2025 GMT
Subject: CN=B5585B8020F298433712317EF94F5C748CDBE761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:49:22:87:31:62:b5:da:d0:60:99:76:ec:
fd:90:4e:9e:dc:c6:fa:66:d1:ea:1e:11:f0:68:76:
9d:83:19:94:16:e3:61:ed:b8:17:79:1a:c2:47:89:
fd:73:05:96:81:86:d3:04:46:75:21:74:af:03:ff:
b8:eb:d3:ec:63:4c:e7:1c:6e:52:57:db:be:3d:5c:
e3:d6:25:fc:e1:ca:d8:58:e0:d4:a6:b7:c7:e5:80:
fe:1a:2a:0f:59:c6:08:5c:02:ab:05:71:2b:59:2e:
7a:34:f5:f0:b7:87:cf:e7:d7:89:f7:3d:25:80:a8:
78:fc:ff:d1:31:c8:e0:7e:06:28:5a:fd:e7:c1:34:
dc:62:cf:ab:39:15:6a:e0:fd:01:c9:39:1f:bf:41:
91:16:8d:c0:31:6e:b0:a6:67:0c:6a:0e:4f:36:30:
86:dc:84:66:a4:89:2d:af:dd:62:34:be:1a:b2:67:
c3:24:02:ea:cf:28:7b:49:08:00:03:4b:3b:26:24:
21:4f:1d:11:da:fa:48:77:21:68:b0:2e:fb:89:c8:
18:d9:e8:ab:33:87:2d:aa:71:7e:90:e8:fb:f1:dd:
a3:3e:88:bf:19:0f:47:02:62:de:7b:e6:59:dc:6f:
65:c1:da:37:d9:7c:8c:49:3d:2b:2c:c1:8f:e4:17:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:5B:80:20:F2:98:43:37:12:31:7E:F9:4F:5C:74:8C:DB:E7:61
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS210199.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:487::/48
Signature Algorithm: sha256WithRSAEncryption
16:e5:cd:16:f4:fe:2c:25:dd:35:16:d6:4d:04:5d:50:4c:24:
d4:57:75:b2:2a:50:84:25:09:23:74:35:07:15:ca:ab:cd:f5:
fd:12:90:c9:74:25:36:b7:bb:cf:df:dc:31:45:ab:23:45:fe:
2d:67:9f:7a:29:4a:cc:c2:0b:95:50:72:2d:8c:5e:10:2c:de:
5d:09:8a:31:65:2b:fd:14:80:a2:f1:50:5e:22:9a:d2:fd:4b:
c9:1f:ca:b5:d6:39:99:21:bd:c6:cc:4c:f5:f5:27:16:c4:d6:
3c:0c:24:c6:fb:79:40:85:e7:b3:f0:4f:0f:43:e9:65:51:29:
5b:90:4e:e7:1c:84:dc:c9:e2:56:dc:74:8f:35:d6:af:ce:08:
d4:22:40:da:0a:16:5f:05:56:d9:42:ca:e9:78:dc:42:8c:ef:
b4:e1:dc:f4:11:da:d5:db:06:91:2c:d9:c2:07:4f:46:2a:9b:
7d:86:69:21:75:71:97:c2:f3:16:7c:16:c2:19:7d:e8:f5:37:
3d:40:ab:67:11:7a:f1:af:d2:46:27:84:ea:5d:c2:0b:ea:c9:
f1:ab:08:3a:c1:23:67:e5:2c:66:2e:f0:9a:9b:79:26:d9:88:
64:75:77:1a:7e:0b:a2:df:ef:bd:9b:86:af:22:41:6a:3d:94:
ba:94:69:86
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUALvxLLzJAL3XvlUUSuh6Qm0YYkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDAyMDkxODM5MjRaFw0yNTAyMDcxODQ0MjRaMDMxMTAvBgNV
BAMTKEI1NTg1QjgwMjBGMjk4NDMzNzEyMzE3RUY5NEY1Qzc0OENEQkU3NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8H0kihzFitdrQYJl27P2QTp7c
xvpm0eoeEfBodp2DGZQW42HtuBd5GsJHif1zBZaBhtMERnUhdK8D/7jr0+xjTOcc
blJX2749XOPWJfzhythY4NSmt8flgP4aKg9ZxghcAqsFcStZLno09fC3h8/n14n3
PSWAqHj8/9ExyOB+Biha/efBNNxiz6s5FWrg/QHJOR+/QZEWjcAxbrCmZwxqDk82
MIbchGakiS2v3WI0vhqyZ8MkAurPKHtJCAADSzsmJCFPHRHa+kh3IWiwLvuJyBjZ
6Kszhy2qcX6Q6Pvx3aM+iL8ZD0cCYt575lncb2XB2jfZfIxJPSsswY/kF2HJAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUtVhbgCDymEM3EjF++U9cdIzb52EwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEwMTk5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQSHMA0GCSqGSIb3DQEBCwUAA4IBAQAW5c0W
9P4sJd01FtZNBF1QTCTUV3WyKlCEJQkjdDUHFcqrzfX9EpDJdCU2t7vP39wxRasj
Rf4tZ596KUrMwguVUHItjF4QLN5dCYoxZSv9FICi8VBeIprS/UvJH8q11jmZIb3G
zEz19ScWxNY8DCTG+3lAheez8E8PQ+llUSlbkE7nHITcyeJW3HSPNdavzgjUIkDa
ChZfBVbZQsrpeNxCjO+04dz0EdrV2waRLNnCB09GKpt9hmkhdXGXwvMWfBbCGX3o
9Tc9QKtnEXrxr9JGJ4TqXcIL6snxqwg6wSNn5SxmLvCam3km2YhkdXcafgui3++9
m4avIkFqPZS6lGmG
-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org