Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211139.roa
File: AS211139.roa (raw, json)
Hash identifier: lD7VLxP0UU+tLkJP5QBvMj7w7TzzqALVDliuTCHNFqM=
Subject key identifier: C4:70:D1:15:D5:9A:EB:C2:6D:D0:E3:62:B4:3C:D3:26:95:BC:9A:9B
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2939F05592A9755C7CCF7C8622E1534EB5134668
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211139.roa
Signing time: Tue 05 Dec 2023 02:44:20 +0000
ROA not before: Tue 05 Dec 2023 02:39:20 +0000
ROA not after: Tue 03 Dec 2024 02:44:20 +0000
asID: 211139
IP address blocks: 2a06:a005:2c0::/44 maxlen: 48
2a06:a005:2d6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:39:f0:55:92:a9:75:5c:7c:cf:7c:86:22:e1:53:4e:b5:13:46:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:20 2023 GMT
Not After : Dec 3 02:44:20 2024 GMT
Subject: CN=C470D115D59AEBC26DD0E362B43CD32695BC9A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:cf:61:dd:cd:71:30:38:14:f8:b8:ea:3e:
f1:80:d1:41:1c:5a:9b:28:2b:f7:ad:23:34:d7:1a:
2a:b3:02:43:0b:e5:2d:9c:31:9b:6c:78:25:c8:c7:
41:5c:99:6e:9a:34:86:6d:36:5a:b6:79:a1:4b:93:
ea:b7:fb:b0:ba:96:1e:8e:e9:5a:54:4c:75:ba:32:
20:c0:54:9c:8c:22:03:ff:c7:0f:f0:13:e6:49:c1:
c9:b6:2c:df:be:c4:51:13:3d:7e:97:b5:3a:cc:0b:
c0:7f:ea:77:f5:e6:3b:3b:49:a3:cd:22:e6:a2:cc:
15:07:f0:32:f8:12:ba:e1:76:35:3e:2f:f8:1c:3e:
04:9c:70:08:fd:13:b8:95:b7:70:ed:4d:3d:cd:53:
17:05:07:f3:e5:24:8b:34:9b:1d:f0:50:aa:cd:fd:
d7:fb:2a:4e:19:7a:f2:9c:23:0f:0a:26:fd:b7:e7:
b0:6e:3e:37:43:23:05:b0:84:6a:1f:60:d3:8b:14:
62:3c:07:d8:da:f6:a6:35:a7:30:f4:3a:92:16:8a:
0f:f0:70:fd:f7:ff:43:d7:fb:27:ee:fb:ab:c7:40:
10:a1:61:ab:a6:8f:c1:a3:98:fa:20:2f:42:fa:11:
b1:26:79:a5:4b:ee:14:9f:f8:55:82:21:ab:db:af:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:70:D1:15:D5:9A:EB:C2:6D:D0:E3:62:B4:3C:D3:26:95:BC:9A:9B
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2c0::/44
2a06:a005:2d6::/48
Signature Algorithm: sha256WithRSAEncryption
79:4c:4c:b4:04:43:0b:89:50:c7:5f:a8:b3:f9:2d:9d:41:d8:
8a:e5:77:75:63:51:bb:73:8f:44:08:e9:05:1c:1d:d2:b1:81:
38:4a:c7:a4:44:64:24:50:ef:de:cd:8c:fe:6a:86:f9:c8:e3:
a7:7a:d9:0a:af:2d:f7:a6:6c:14:69:10:33:9d:fd:d7:41:7a:
b0:b9:c9:b3:4e:15:f2:a1:32:7f:76:1b:c5:95:19:82:13:eb:
d5:43:31:d9:98:d5:2d:a3:28:5b:72:4d:c4:c8:35:79:ba:5f:
47:51:ba:62:65:18:83:66:ed:c3:31:be:26:21:d6:6c:e2:ad:
7f:b8:96:74:a6:b9:df:12:c6:2a:cb:a1:b4:5c:ef:b5:01:77:
ad:2a:32:c8:72:55:97:8f:52:5c:45:46:13:13:cf:d2:d3:b9:
7b:30:47:5f:92:24:fc:cc:49:76:a9:61:5c:5d:91:ac:2f:27:
bd:cd:80:b6:37:12:0d:ac:e9:be:88:ec:bb:f5:0f:f4:ac:7b:
d1:18:5b:ff:7f:7c:9e:f7:b2:14:2d:e9:73:85:e6:36:b0:6e:
f8:d3:30:48:bf:89:33:d0:87:47:5c:6a:c6:93:a9:3a:51:71:
6f:82:c8:d2:a4:38:e7:b3:96:cb:fd:8a:a1:3b:e8:06:58:ea:
63:bc:a3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:13:13 2024 by rpki-client on console-fra.rpki-client.org