Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: r/4g9n1L3wICss4h9/r+d7yrc29t3XwKaB8u9sLF6nI=
Subject key identifier: FB:F9:3F:2D:D7:44:E4:A8:F4:9C:FD:A8:E1:64:31:84:CE:DF:4D:24
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0A2E8D648AE4C0C67278301DFF468686ABCE5D78
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211484.roa
Signing time: Tue 05 Nov 2024 03:40:00 +0000
ROA not before: Tue 05 Nov 2024 03:35:00 +0000
ROA not after: Tue 04 Nov 2025 03:40:00 +0000
asID: 211484
IP address blocks: 2a06:a005:2440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2e:8d:64:8a:e4:c0:c6:72:78:30:1d:ff:46:86:86:ab:ce:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Nov 5 03:35:00 2024 GMT
Not After : Nov 4 03:40:00 2025 GMT
Subject: CN=FBF93F2DD744E4A8F49CFDA8E1643184CEDF4D24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:55:43:85:57:66:36:71:2b:7b:dc:80:7e:
c5:78:7b:7a:2f:d8:f2:2c:19:75:a9:3f:75:2c:04:
4d:7f:51:7a:24:97:46:79:c6:5f:f3:c5:38:a9:d9:
69:f9:73:02:0f:0c:27:8f:ce:7a:56:08:34:75:64:
33:ce:16:59:ba:44:40:1b:35:1e:f1:8f:d6:f1:70:
9b:52:f9:19:2b:c7:35:7a:be:2a:30:63:28:30:fb:
22:ee:8d:19:c4:68:0f:68:65:3c:0d:87:7a:1f:ee:
54:67:95:37:a6:1a:7c:6d:56:4d:18:86:9d:1b:71:
b5:f2:93:75:20:c9:aa:77:f0:6d:7f:6c:63:6a:bb:
4f:fa:e8:47:ba:ea:4f:50:bb:93:95:a3:60:e4:6d:
e8:d4:c6:96:4b:be:7a:40:21:6c:c8:8e:57:89:23:
8d:01:46:97:11:7b:94:78:66:6e:37:58:09:03:44:
c7:16:01:9a:30:9f:73:a8:2d:87:b9:c8:98:03:89:
c7:8a:7d:cb:38:19:66:13:c0:4b:d6:86:40:40:5c:
f2:ee:33:97:c4:59:68:3d:e6:c5:d0:a7:02:0b:ce:
ff:c9:5f:2b:58:66:16:b9:27:3c:10:18:88:4c:e3:
26:77:13:62:48:9d:6f:07:51:4f:24:8f:ce:25:fe:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F9:3F:2D:D7:44:E4:A8:F4:9C:FD:A8:E1:64:31:84:CE:DF:4D:24
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2440::/44
Signature Algorithm: sha256WithRSAEncryption
26:a1:9d:77:12:0a:88:77:40:8b:c9:24:2e:06:68:9c:4a:1f:
4a:d8:62:b0:22:f3:4a:31:d4:9e:75:70:9a:2d:59:68:04:14:
d3:e8:25:36:d9:f4:b4:d3:7c:31:95:54:6b:96:26:cf:a6:3e:
9d:51:b2:f8:45:9b:1c:37:d2:a2:44:32:1d:f7:2b:1b:b0:3a:
44:56:7f:81:8c:22:73:6f:9a:07:41:10:0d:6d:f4:10:18:66:
91:e9:a5:48:53:e7:ae:97:75:57:d1:42:62:a0:4d:e1:52:6f:
32:57:dc:b2:77:82:32:18:57:77:e5:69:68:c0:27:dc:9c:d3:
5c:3e:19:5e:f0:0c:c8:85:78:dc:33:9b:65:1e:1c:4b:85:fb:
89:02:91:a9:f3:71:f9:3b:11:71:cd:98:9e:26:63:e0:e3:8c:
10:c5:71:20:b7:26:76:f7:4b:58:31:65:96:53:cf:e0:98:f8:
8c:49:bb:5a:2f:1d:ac:14:b2:1d:83:4a:d4:cf:54:bd:09:46:
b8:16:b4:f4:7b:28:dd:69:58:69:6c:0b:50:59:c4:db:f5:62:
2b:80:a1:13:f3:f4:64:98:e8:f8:64:1c:9f:82:23:d7:b4:8b:
22:d8:9c:d1:d0:76:c7:2a:d6:3b:6c:9d:11:b7:e1:60:e5:65:
f1:35:b8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:36 2024 by rpki-client on console-fra.rpki-client.org