Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211233.roa
File: AS211233.roa (raw, json)
Hash identifier: QtlkcgGcor0EdCH7DfGSyq1NaABxvi3DXZxIaGUAog8=
Subject key identifier: 57:8F:C8:CB:63:16:C4:D4:C4:C2:C1:8D:EA:AE:E2:56:6D:E2:B3:EB
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 78CC740333F660C78703F6B61DE440F557A63319
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211233.roa
Signing time: Tue 05 Nov 2024 03:40:03 +0000
ROA not before: Tue 05 Nov 2024 03:35:03 +0000
ROA not after: Tue 04 Nov 2025 03:40:03 +0000
asID: 211233
IP address blocks: 2a06:a005:19b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:cc:74:03:33:f6:60:c7:87:03:f6:b6:1d:e4:40:f5:57:a6:33:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:03 2024 GMT
Not After : Nov 4 03:40:03 2025 GMT
Subject: CN=578FC8CB6316C4D4C4C2C18DEAAEE2566DE2B3EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:bd:cf:2b:5d:8b:aa:b7:f1:14:61:ca:22:
f3:b5:b9:8c:6d:6c:35:11:b1:25:98:96:f7:14:4d:
9a:62:ac:1f:1a:b6:a1:fc:2e:57:9d:b4:4b:4a:ac:
8b:97:45:fd:47:f5:73:be:3c:97:0b:c1:6f:1b:35:
38:75:dd:a4:36:68:05:35:20:7c:77:69:fc:2a:a3:
04:3e:85:e1:3c:d9:36:c2:65:98:c5:31:d8:12:8b:
68:5c:56:5a:23:00:e5:db:fe:33:a3:cb:54:24:07:
b4:b5:a4:a4:93:f4:ba:c3:8d:6b:ae:42:34:bc:99:
82:0d:36:b6:b0:ff:91:4e:93:67:48:85:4e:de:63:
be:e9:52:40:8c:ed:5e:88:b3:7e:0e:c4:e4:71:af:
75:37:22:21:53:8d:51:45:73:68:7b:11:e0:1a:64:
3d:b9:90:87:da:2b:04:7d:e1:d2:11:12:69:b8:25:
49:46:f8:ff:cc:cd:c2:70:d7:83:3c:cb:0f:d1:4b:
c3:7c:02:0e:57:73:60:fc:18:96:66:30:cb:9d:24:
fa:8b:65:b9:05:f4:f6:71:ed:64:20:14:17:d9:5d:
1b:7e:8e:38:14:d9:61:c4:e1:69:9a:33:64:67:63:
12:e3:a1:b5:de:fd:14:e4:f0:8c:f9:f4:8b:12:c4:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8F:C8:CB:63:16:C4:D4:C4:C2:C1:8D:EA:AE:E2:56:6D:E2:B3:EB
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:19b0::/44
Signature Algorithm: sha256WithRSAEncryption
7d:b6:e1:87:88:c5:56:7d:c3:a3:c3:d3:cf:1e:c5:4c:ab:70:
44:74:26:af:e8:7e:10:93:e0:92:67:fd:c3:85:e8:77:9b:c1:
ba:94:17:d5:b5:a6:ac:e3:1c:46:40:a8:16:79:bf:d1:ab:e5:
77:ad:9d:bb:20:85:0f:02:87:ec:f1:15:7b:8e:05:d5:17:f6:
16:b5:82:45:d4:d8:b2:f7:e0:fe:2f:7c:b3:3d:8b:5a:5f:3b:
bb:7e:c8:e7:b0:aa:ce:23:f9:af:3a:10:c9:21:af:0d:e5:29:
03:0d:8c:68:30:b5:d9:21:2c:b4:59:e8:8f:80:c3:b5:2f:6d:
e7:9d:03:3d:ef:45:0d:1f:48:fc:da:2d:29:b8:d5:ac:95:15:
92:2e:60:f3:08:3e:1b:75:37:d7:f2:3f:3c:89:96:49:1c:21:
69:7e:d7:1d:5b:7a:af:04:59:23:bf:75:49:9a:ec:68:a6:9b:
b0:19:3c:52:0f:58:7f:dd:9c:6a:45:61:50:b4:10:85:32:de:
42:1e:a8:d8:be:cb:7f:0b:6e:8b:f1:70:3f:0e:0f:a4:b8:d3:
33:5a:2e:28:4a:9d:cb:36:0e:dd:95:98:4f:2a:b6:61:57:7e:
e6:a8:23:cf:11:eb:98:e7:6c:dd:ac:a2:19:72:eb:58:a8:aa:
09:a4:49:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:16 2025 by rpki-client