Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211484.roa
File: AS211484.roa (raw, json)
Hash identifier: kB7d2bkFqqez1q9E18d0h5uDDP3NsERIr4M4pAyhU4w=
Subject key identifier: C6:4D:33:10:66:67:A8:A3:A9:AE:89:81:C2:09:57:DE:DF:22:91:4A
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 0D51546A9F331B53E21A38E20196FC67CEBEB828
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211484.roa
Signing time: Tue 05 Dec 2023 02:44:14 +0000
ROA not before: Tue 05 Dec 2023 02:39:14 +0000
ROA not after: Tue 03 Dec 2024 02:44:14 +0000
asID: 211484
IP address blocks: 2a06:a005:2440::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:51:54:6a:9f:33:1b:53:e2:1a:38:e2:01:96:fc:67:ce:be:b8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Dec 5 02:39:14 2023 GMT
Not After : Dec 3 02:44:14 2024 GMT
Subject: CN=C64D33106667A8A3A9AE8981C20957DEDF22914A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:24:92:1f:c5:b9:b6:88:d7:b0:e0:2d:ed:
b7:e9:37:3b:7f:a9:67:ff:3f:13:9d:90:dc:01:2f:
d6:ac:f1:7f:8d:a3:25:f4:ac:81:fd:96:f6:4f:63:
35:99:ba:8b:de:f2:bc:2c:70:0b:77:35:ce:49:99:
57:83:4f:97:22:df:b3:d0:1c:c3:ae:88:db:bb:bb:
0c:41:1a:64:b3:30:e3:bf:c3:36:1d:61:9c:1d:4e:
69:f0:f9:03:d3:02:ab:f0:ba:83:60:0a:32:3e:44:
87:0c:bf:e2:ae:f9:9d:96:14:d1:22:3b:8e:eb:58:
52:1c:f1:ef:e0:28:1d:eb:4b:24:20:54:c0:b1:4e:
f0:e8:af:59:72:ca:2b:ce:27:0c:8c:27:a8:ae:bb:
e2:a2:0f:11:d8:0f:88:72:fa:b6:2f:26:52:ee:85:
c3:10:0d:dd:d3:51:84:5d:ad:20:a6:8b:11:70:69:
35:5c:cf:58:e0:da:0a:10:f1:55:52:81:95:71:2e:
73:d6:ef:3d:56:59:bb:e7:4a:14:99:e5:e5:73:37:
73:f9:4f:3f:0b:fd:3f:b3:05:eb:79:10:0e:c9:d9:
95:1b:91:75:ad:e8:61:ba:6d:6c:e3:ad:f4:cc:b6:
57:d9:a9:f8:e1:73:3f:f4:c0:7e:de:2f:bb:11:8c:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4D:33:10:66:67:A8:A3:A9:AE:89:81:C2:09:57:DE:DF:22:91:4A
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS211484.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:2440::/44
Signature Algorithm: sha256WithRSAEncryption
a6:30:ea:1b:84:58:6f:3e:3f:ad:8c:53:05:43:fd:cd:d0:e4:
07:f8:4e:da:ba:e6:f4:1f:10:ca:1d:36:d3:5c:42:5d:f6:e0:
ff:a1:d2:0c:ad:00:ee:da:73:5a:08:01:de:29:ea:c4:cb:0c:
69:fb:a3:28:f2:6b:d0:90:39:3e:6a:8c:02:e5:b1:4f:67:4b:
37:9d:9b:8c:f5:dd:9a:4a:a0:20:54:20:ed:7e:46:f0:bb:77:
e9:c3:7c:8e:d1:48:fc:3d:ce:4a:9b:1b:00:2c:f6:68:c5:1f:
b2:f7:d1:da:e9:bf:03:26:ca:1c:bf:ee:1a:cc:59:6c:86:59:
a1:20:5a:cc:ab:f2:62:4e:e6:fe:10:de:0c:4e:a0:94:ca:30:
24:24:36:8c:9d:d6:98:15:49:83:87:4f:91:59:0a:21:f5:68:
7e:9a:e7:16:65:ea:fe:2d:59:52:af:ff:8a:c7:0e:69:9c:b6:
fa:01:00:bd:14:51:0b:a3:51:bd:d4:a4:e0:6c:fd:57:72:eb:
6e:64:16:63:1e:54:1a:a8:2e:1d:4d:7b:fb:95:1a:c0:04:e5:
38:38:8a:f2:bc:af:e2:3e:f1:c1:7a:dd:ad:03:ab:10:1d:d7:
bd:2a:d1:99:21:00:cc:b0:b6:7d:dc:c9:f8:23:c0:7b:85:f3:
c7:ad:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:12:18 2024 by rpki-client on console-ams.rpki-client.org