Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211233.roa
File: AS211233.roa (raw, json)
Hash identifier: GRm30SY1c5XljV2urM/hwEphYy7rAZv0uYho7TvDVUE=
Subject key identifier: 14:D0:A3:B7:41:00:1F:2B:F0:22:B5:3B:45:FC:EF:FC:5A:B9:D3:55
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 064752AA6B62B5813CAF4157248EFE20019443C6
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211233.roa
Signing time: Tue 05 Dec 2023 02:44:12 +0000
ROA not before: Tue 05 Dec 2023 02:39:12 +0000
ROA not after: Tue 03 Dec 2024 02:44:12 +0000
asID: 211233
IP address blocks: 2a06:a005:19b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:47:52:aa:6b:62:b5:81:3c:af:41:57:24:8e:fe:20:01:94:43:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:12 2023 GMT
Not After : Dec 3 02:44:12 2024 GMT
Subject: CN=14D0A3B741001F2BF022B53B45FCEFFC5AB9D355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:56:07:b3:d3:c0:84:99:1c:1e:ba:2d:b0:
77:e4:40:21:c7:0a:76:fe:51:4c:3c:b4:dc:cb:62:
fe:8d:c4:80:07:e2:57:ef:ab:69:6f:a1:36:27:72:
19:b4:b2:1c:54:5b:b1:0c:8d:4b:e5:cc:32:35:94:
82:07:d1:c1:c4:22:76:76:50:86:71:a3:63:d8:03:
2d:06:a0:15:8d:f4:da:06:5b:1e:8b:36:2a:80:14:
bd:e3:6b:db:71:de:d2:a8:7e:dc:92:f6:b3:a5:90:
5b:d6:26:cc:85:0c:44:2f:f4:72:d3:59:ea:5d:16:
21:48:7d:bb:90:86:69:bd:75:18:ed:cf:6b:15:24:
c6:b7:2e:dc:17:1b:ce:23:8d:6e:50:76:21:e3:c1:
de:92:21:87:66:6f:4c:cc:3a:a4:00:72:94:7a:2d:
16:3b:b8:38:3e:52:95:e3:01:ac:eb:59:23:a8:35:
13:d9:29:ec:0b:e6:4f:fa:2f:05:7d:45:05:2d:25:
94:d1:be:e7:a7:5d:4b:7c:01:0b:f4:64:28:9c:09:
90:af:46:1a:40:88:ea:5f:72:5f:ea:ca:89:df:83:
6c:14:a0:3c:d1:6f:05:15:b3:45:31:74:f0:93:43:
6e:4c:e1:ad:83:94:9f:ad:f7:73:ec:11:d5:74:c0:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D0:A3:B7:41:00:1F:2B:F0:22:B5:3B:45:FC:EF:FC:5A:B9:D3:55
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19b0::/44
Signature Algorithm: sha256WithRSAEncryption
39:71:51:af:5e:01:41:47:26:ba:db:53:90:bc:36:0e:4e:d7:
b9:e3:c3:59:4a:7c:65:0e:c1:e2:bb:ea:4e:51:4b:c8:1b:00:
7a:49:6c:91:93:20:1f:a3:51:f6:ec:97:d0:6f:94:ec:03:ac:
94:91:8e:62:4f:27:31:32:50:f5:8a:4c:3b:d6:dc:94:60:51:
f8:85:87:5e:a8:50:af:e6:51:f5:9f:ee:4f:cc:3c:a1:8d:73:
56:0e:f1:2e:b4:69:2a:77:34:ce:9e:f9:eb:4a:58:31:d1:f7:
fb:92:0e:d3:5a:ac:13:ce:fc:e6:6a:7f:9f:26:a0:e7:13:f0:
ea:b8:ad:1a:4b:12:e0:27:9e:1f:19:2a:24:2c:df:71:66:e3:
68:64:22:35:f8:58:4f:c1:2d:49:3c:26:d5:c3:5a:df:e0:5b:
a3:3c:ce:96:11:4a:77:1b:e6:20:1f:73:e6:f8:42:3a:86:f5:
1b:ae:7b:6a:e7:e2:0d:c3:62:e5:56:16:dc:f0:75:d6:99:bb:
d8:1b:01:d6:8d:eb:a7:1f:6b:43:c7:2f:9e:46:2a:00:5b:ad:
6f:ce:ae:f6:49:cc:51:b1:ae:17:57:b4:c1:06:f6:c0:4a:aa:
34:6e:70:c6:a6:7c:18:4e:62:bc:48:33:41:d6:7c:20:0c:dd:
67:fb:d4:bc
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUBkdSqmtitYE8r0FXJI7+IAGUQ8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yMzEyMDUwMjM5MTJaFw0yNDEyMDMwMjQ0MTJaMDMxMTAvBgNV
BAMTKDE0RDBBM0I3NDEwMDFGMkJGMDIyQjUzQjQ1RkNFRkZDNUFCOUQzNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5VYHs9PAhJkcHrotsHfkQCHH
Cnb+UUw8tNzLYv6NxIAH4lfvq2lvoTYnchm0shxUW7EMjUvlzDI1lIIH0cHEInZ2
UIZxo2PYAy0GoBWN9NoGWx6LNiqAFL3ja9tx3tKoftyS9rOlkFvWJsyFDEQv9HLT
WepdFiFIfbuQhmm9dRjtz2sVJMa3LtwXG84jjW5QdiHjwd6SIYdmb0zMOqQAcpR6
LRY7uDg+UpXjAazrWSOoNRPZKewL5k/6LwV9RQUtJZTRvuenXUt8AQv0ZCicCZCv
RhpAiOpfcl/qyonfg2wUoDzRbwUVs0UxdPCTQ25M4a2DlJ+t93PsEdV0wMFhAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUFNCjt0EAHyvwIrU7Rfzv/Fq501UwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjExMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcEKgagBRmwMA0GCSqGSIb3DQEBCwUAA4IBAQA5cVGv
XgFBRya621OQvDYOTte548NZSnxlDsHiu+pOUUvIGwB6SWyRkyAfo1H27JfQb5Ts
A6yUkY5iTycxMlD1ikw71tyUYFH4hYdeqFCv5lH1n+5PzDyhjXNWDvEutGkqdzTO
nvnrSlgx0ff7kg7TWqwTzvzman+fJqDnE/DquK0aSxLgJ54fGSokLN9xZuNoZCI1
+FhPwS1JPCbVw1rf4FujPM6WEUp3G+YgH3Pm+EI6hvUbrntq5+INw2LlVhbc8HXW
mbvYGwHWjeunH2tDxy+eRioAW61vzq72ScxRsa4XV7TBBvbASqo0bnDGpnwYTmK8
SDNB1nwgDN1n+9S8
-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org