Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211390.roa
File: AS211390.roa (raw, json)
Hash identifier: i07pn+hBZhG2c+mj3XE19P9EewQEdWtnFTvvl7+0ETM=
Subject key identifier: 4B:4F:9B:79:8C:92:44:55:BD:66:B3:1C:34:E2:48:A5:2C:A3:E1:A3
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 6E032C5BA8102071EE461DAEEA5539ACD578E537
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211390.roa
Signing time: Tue 05 Dec 2023 02:44:12 +0000
ROA not before: Tue 05 Dec 2023 02:39:12 +0000
ROA not after: Tue 03 Dec 2024 02:44:12 +0000
asID: 211390
IP address blocks: 2a06:a005:45e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:03:2c:5b:a8:10:20:71:ee:46:1d:ae:ea:55:39:ac:d5:78:e5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:12 2023 GMT
Not After : Dec 3 02:44:12 2024 GMT
Subject: CN=4B4F9B798C924455BD66B31C34E248A52CA3E1A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:81:0e:d7:2e:93:4c:76:eb:a1:fe:64:ee:15:
10:86:06:00:df:11:8f:13:6f:aa:40:54:a2:e7:92:
c2:ba:c1:a8:50:2d:4a:f0:a6:ea:66:15:97:9b:66:
29:c6:96:f7:94:5c:ca:f2:12:2b:1b:fb:54:9a:ea:
d1:3c:71:9d:3b:3b:f0:6f:61:cc:d4:df:da:e2:87:
f8:e2:64:4d:6d:83:f7:a3:b7:04:97:81:f2:59:9a:
0b:e1:01:01:da:82:2e:98:08:bc:93:c2:37:52:30:
e6:ed:4b:c1:e2:9a:06:cd:16:a2:3c:17:b8:e9:b8:
c0:49:05:c7:8c:72:a8:60:50:76:45:f2:c4:54:cf:
cf:5a:42:13:3d:39:6e:8f:c7:45:12:0b:67:e3:6d:
67:5b:2c:44:94:82:4b:95:41:cd:c8:b1:1c:c3:09:
70:a1:aa:1d:af:40:81:64:4e:d0:bf:0c:96:b8:85:
27:a5:b2:2d:5c:c1:f3:6e:3f:9f:68:9c:aa:26:7f:
d7:26:fd:04:1e:ef:7f:c7:12:51:c6:95:67:33:31:
6b:31:fd:31:ba:6b:61:ac:f1:f6:96:cf:99:8d:d2:
18:46:76:c2:88:f0:dc:ee:21:1c:e1:49:ca:b4:89:
c7:81:9e:42:91:6f:c8:65:09:c4:11:eb:01:2d:9b:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4F:9B:79:8C:92:44:55:BD:66:B3:1C:34:E2:48:A5:2C:A3:E1:A3
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:45e::/48
Signature Algorithm: sha256WithRSAEncryption
74:4c:22:1d:d0:f7:d9:20:1f:97:11:be:db:af:b1:28:a7:4c:
eb:11:56:cc:0e:e4:e3:1e:ff:b8:12:74:83:a7:39:df:ed:84:
cc:aa:f4:75:c9:b6:fd:6d:08:4b:20:12:98:68:94:37:c2:2c:
2f:fd:a5:7d:8e:27:fc:77:7d:50:c0:2e:5b:dc:f3:6e:cc:8c:
39:45:93:2a:85:f5:03:ba:6b:7c:d5:60:89:e0:e5:15:fb:ad:
19:d6:86:40:30:91:8e:c6:76:ae:91:93:52:d8:4d:8b:99:8a:
b8:43:d5:07:ec:fb:a0:76:d8:b5:d9:9a:6b:f2:59:6b:d2:a1:
21:04:b5:1f:e8:53:a7:ee:f9:69:fa:8b:4e:24:8b:6d:fc:d3:
37:ec:f7:56:bb:44:81:e9:c8:91:24:79:ac:ac:eb:61:50:29:
f7:07:fd:a7:c5:e6:15:78:4d:a3:07:93:79:b1:58:1c:bc:11:
40:19:e4:4b:25:10:26:13:05:6a:f9:f5:bd:24:e0:98:d7:8d:
5c:86:1d:7e:e0:c2:c1:7e:f3:73:bd:06:57:4b:a0:e8:6d:f2:
66:d9:41:42:46:f8:10:4a:e6:e9:33:e8:0b:55:9d:91:a7:71:
c5:b8:ca:b1:ce:60:49:55:15:c2:78:7c:7c:8a:64:c6:de:f7:
b5:86:e9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:12:34 2024 by rpki-client on console-ams.rpki-client.org